React NativeBLOCK
A Model Context Protocol (MCP) server providing comprehensive guidance and best practices for React Native development based on official React Native documentation.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://badge.fury.io/js/%40mrnitro360%2Freact-native-mcp-guide) [](https://opensource.org/licenses/MIT) [](https://modelcontextprotocol.io/) [](https://github.com/MrNitro360/React-Native-MCP/actions/workflows/auto-deploy.yml) [](https://www.typescriptlang.org/) [](https://reactnative.dev/)
Professional AI-powered React Native development companion with expert-level code remediation
Expert remediation • Automated fixes • Industry best practices • Enterprise security
Overview
A comprehensive Model Context Protocol (MCP) server designed for professional React Native development teams. This tool provides intelligent code analysis, expert-level automated code remediation, security auditing, and performance optimization with production-ready fixes.
🆕 v1.1.0 - Expert Remediation Features:
- 🔧 Expert Code Remediation - Automatically fix security, performance, and quality issues
- 🏗️ Advanced Refactoring - Comprehensive component modernization and optimization
- 🛡️ Security Fixes - Automatic hardcoded secret migration and vulnerability patching
- ⚡ Performance Fixes - Memory leak prevention and React Native optimization
- 📝 Production-Ready Code - TypeScript interfaces, StyleSheet extraction, accessibility
Key Benefits:
- 🚀 Accelerated Development - Automated code analysis, fixing, and test generation
- 🔒 Enterprise Security - Vulnerability detection with automatic remediation
- 📊 **Quality Ass
b0fb0c6c3ac2OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add react-native-mcp-guide -- npx -y @mrnitro360/[email protected]
{
"mcpServers": {
"react-native-mcp-guide": {
"command": "npx",
"args": [
"-y",
"@mrnitro360/[email protected]"
]
}
}
}Exposed tools (17)
17 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
analyze_codebase_comprehensive | read | Comprehensive React Native codebase analysis including performance, security, refactoring, and upgrades |
analyze_codebase_performance | read | Analyze entire React Native codebase for performance issues |
analyze_component | read | Analyze React Native component for best practices |
analyze_test_coverage | read | Analyze test coverage and identify gaps |
analyze_testing_strategy | read | Analyze current testing strategy and provide recommendations |
architecture_advice | read | Get React Native architecture and project structure advice |
audit_packages | read | Perform security audit on project dependencies and provide fix recommendations |
check_for_updates | read | Check for available updates to the React Native MCP server |
debug_issue | read | Get debugging guidance for React Native issues |
generate_component_test | read | Generate comprehensive React Native component tests following industry best practices |
get_version_info | read | Get React Native MCP Server version and build information |
migrate_packages | read | Migrate deprecated packages to their recommended alternatives |
optimize_performance | read | Get performance optimization suggestions for React Native |
refactor_component | read | Provide expert-level refactoring suggestions and implementations |
remediate_code | read | Automatically fix React Native code issues with expert-level solutions |
resolve_dependencies | read | Analyze and resolve dependency conflicts in React Native projects |
upgrade_packages | read | Automatically check for package updates and provide upgrade recommendations |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (4 observation(s))
- Shell
- declared (3 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (4)
issues.push("eval() usage detected - critical security risk");suggestions.push("Replace eval() with safer alternatives like JSON.parse()");{ pattern: /eval\s*\(/g, risk: 'critical', desc: 'eval() usage' },@modelcontextprotocol/sdk, zod, @types/node, tsx, typescript
Gates applied: no_behavioural_pass.
b0fb0c6c3ac2full audit observations/trust-audit/mcp-server/mrnitro360__react-native.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | b0fb0c6c3ac2 | BLOCK | D | 69 | first audit |
Questions
What is the React Native MCP server?
A Model Context Protocol (MCP) server providing comprehensive guidance and best practices for React Native development based on official React Native documentation.
What tools does React Native expose?
17 in total: 17 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is React Native safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does React Native need?
No credential environment variables were found in its source, so it appears to need none.
How does React Native run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @mrnitro360/react-native-mcp-guide at 1.1.0.
How current is this page?
The grade is for one exact copy of the source (b0fb0c6c3ac2), read on 2026-10-08. The repository is watched and re-audited when it changes.