ModelsAtlas
Explore
Atlas / MCP servers / ojuschugh1 / sqz

sqzBLOCK

mcp/ojuschugh1/sqz
MCP server by ojuschugh1 · agentic ai · ai agents · claude code · Audited 2026-10-11
⚑ Report / re-scanSource ↗

Context compression for AI coding agents: compresses tool output before it enters the model, dedups repeats to 13-token refs. Claude Code, Cursor, Codex, Kiro, Zed, any MCP client. Rust, zero LLM calls.

Verdict
BLOCK
Grade
F
Trust score
49 /100
Exposed tools
—
Transport
stdio
License
Apache-2.0
Stars
644
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

███████╗ ██████╗ ███████╗ ██╔════╝██╔═══██╗╚══███╔╝ ███████╗██║ ██║ ███╔╝ ╚════██║██║▄▄ ██║ ███╔╝ ███████║╚██████╔╝███████╗ ╚══════╝ ╚══▀▀═╝ ╚══════╝

Pre-injection context compression and session deduplication for AI coding agents

Real session stats: 3,003 compressions · 178,442 tokens saved · 24.7% avg reduction · up to 92% on output the model already has

Read from source at commit 45fb555e4b43OBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add sqz -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "sqz": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Trust audit

BLOCKgrade F · trust 49/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (8 observation(s))
Network
declared (7 observation(s))
Shell
declared (5 observation(s))
Dependencies
not all pinned
Secrets in source
found

Findings (25)

CRITICALHard-coded secrets · secret.private_key · CWE-798, CWE-321
sqz-mcp/src/lib.rs:1971
("keys", format!("-----BEGIN RSA PRIVATE KEY-----\n{pem}-----END RSA PRIVATE KEY-----\n{creds}")),
CRITICALHard-coded secrets · secret.private_key · CWE-798, CWE-321
sqz/src/cli_proxy.rs:935
("cat deploy/secrets.env", format!("-----BEGIN RSA PRIVATE KEY-----\n{pem}-----END RSA PRIVATE KEY-----\n{creds}")),
CRITICALHard-coded secrets · secret.private_key · CWE-798, CWE-321
sqz_engine/src/confidence_router.rs:440
let key = "-----BEGIN RSA PRIVATE KEY-----\nMIIEowIBAAKCAQEA0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOP\nQRSTUVWXYZ0123456789abcdefghijklmnopqrstuvwxyz==\n-----END RSA PRIVATE KEY-----\n";
CRITICALHard-coded secrets · secret.private_key · CWE-798, CWE-321
sqz_engine/src/confidence_router.rs:545
"-----BEGIN RSA PRIVATE KEY-----\nMIIEowIBAAKCAQEA0123456789abcdefghijklmnopqrstuvwxyz\n-----END RSA PRIVATE KEY-----\n",
MEDIUMInventory / provenance · inv.binary · CWE-1104
extension-firefox/sqz-firefox-0.3.0.zip
sqz-firefox-0.3.0.zip
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
extension-firefox/sqz_wasm_bg.wasm
sqz_wasm_bg.wasm
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
extension/sqz_wasm_bg.wasm
sqz_wasm_bg.wasm
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.symlink · CWE-1104
sqz-mcp/LICENSE-APACHE
sqz-mcp/LICENSE-APACHE
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
sqz-mcp/LICENSE-MIT
sqz-mcp/LICENSE-MIT
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
sqz-wasm/LICENSE-APACHE
sqz-wasm/LICENSE-APACHE
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
sqz-wasm/LICENSE-MIT
sqz-wasm/LICENSE-MIT
Why it matters. link not followed
MEDIUMInventory / provenance · inv.symlink · CWE-1104
sqz/LICENSE-APACHE
sqz/LICENSE-APACHE
Why it matters. link not followed
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
sqz-mcp/src/lib.rs:977
eprintln!("[sqz-mcp] SSE server listening on http://127.0.0.1:{port}");
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
sqz/src/main.rs:1807
println!("[sqz] starting dashboard on http://127.0.0.1:{port}");
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
sqz_engine/src/cmd_formatters/git.rs:653
\tновый файл:     файл.txt\n";
MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321
sqz/tests/integration.rs:529
("cat deploy/secrets.env", format!("-----BEGIN RSA PRIVATE KEY-----\n{pem}-----END RSA PRIVATE KEY-----\n{creds}")),
LOWInventory / provenance · inv.hidden_file · CWE-1104
vscode-extension/.vscodeignore
.vscodeignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
vscode-extension/src/test/runTest.ts:5
const extensionDevelopmentPath = path.resolve(__dirname, "../../");
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/integrations/level3/api-proxy.md:28
curl -s http://127.0.0.1:8080/v1/chat/completions --data-binary @request.json
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
vscode-extension/package.json
@types/glob, @types/mocha, @types/node, @types/vscode, @vscode/test-electron, glob, mocha, typescript
Why it matters. 8 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
distribution/mcp-registry/server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table
INFOInventory / provenance · inv.oversize · CWE-1104
assets/sqz-architecture.png
assets/sqz-architecture.png
Why it matters. 1555556 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
docs/arxiv/sqz-architecture.png
docs/arxiv/sqz-architecture.png
Why it matters. 1555556 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
docs/arxiv/sqz-submission.tar.gz
docs/arxiv/sqz-submission.tar.gz
Why it matters. 1404239 bytes not read
INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427
docs/quality-benchmark.md:57
| dotenv with secrets | `cat .env` | 78 | 78 | 0.0% | 4/4 | n/a | passthrough, never cached |
Why it matters. asks the agent to read credentials

Gates applied: critical_finding, no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha 45fb555e4b43full audit observations/trust-audit/mcp-server/ojuschugh1__sqz.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-1145fb555e4b43BLOCKF49first audit
05

Questions

What is the sqz MCP server?

Context compression for AI coding agents: compresses tool output before it enters the model, dedups repeats to 13-token refs. Claude Code, Cursor, Codex, Kiro, Zed, any MCP client. Rust, zero LLM calls.

Is sqz safe to connect to an agent?

No — not without reading the findings first. The audit graded it F (49/100) and found 4 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does sqz need?

No credential environment variables were found in its source, so it appears to need none.

How does sqz run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as sqz at 0.6.0.

How current is this page?

The grade is for one exact copy of the source (45fb555e4b43), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement