ModelsAtlas
Explore
Atlas / MCP servers / verivus-oss / Sqry

SqryBLOCK

mcp/verivus-oss/sqry
MCP server by verivus-oss · call graph · cli · code search · Audited 2026-10-08
⚑ Report / re-scanSource ↗

Semantic code search engine - by Verivus (sqry.dev)

Verdict
BLOCK
Grade
F
Trust score
58 /100
Exposed tools
—
Transport
stdio
License
MIT
Stars
31
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://registry.modelcontextprotocol.io/v0.1/servers/io.github.verivus-oss%2Fsqry/versions/latest) [](https://crates.io/crates/sqry-cli) [](https://opensource.org/licenses/MIT)

sqry is a local semantic code search tool. It parses source code into AST-backed symbol and relationship graphs so you can ask code questions that text search cannot answer reliably.

Everything runs on your machine. Indexing and querying make no network calls, and sqry sends no telemetry.

Website: https://sqry.dev

Current Capabilities

  • 37 language plugins, 28 with full relation support and 9 with symbol extraction plus imports. By build cost, 29 are on the default fast path, json is compiled but excluded by default as high-wall-clock, and 7 specialty plugins sit behind Cargo features. The sqry://meta/manifest MCP resource reports these counts for the binary you have installed.
  • Structural queries over symbol kind, language, visibility, names, return types, references, and relations.
  • Graph analysis for callers, callees, imports, exports, call paths, cycles, unused symbols, duplicates, impact, semantic diff, and focused subgraphs.
  • Edge-backed returns: and resolution-aware resolved_via: predicates for supported graph paths. See Call resolution predicates.
  • Cross-language FFI edges. The C, C++, C#, Elixir, Haskell, Kotlin, Lua, PHP, R, Ruby, and Rust plugins emit FfiCall edges from mechanisms such as extern "C", DllImport / P/Invoke, JNI, Ruby FFI attach_function, and R .Call / Rcpp. Query them with sqry graph cross-language or the cross_language_edges MCP tool.
  • Structural shape matching with sqry shape-match, which finds functions with similar body structure independently of their identifiers.
  • A declarative
Read from source at commit 7a01572113d1OBSERVED · 2026-10-08
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code (oci)
claude mcp add sqry-mcp:v33.0.1 -- docker run -i --rm ghcr.io/verivus-oss/sqry-mcp:v33.0.1:None
03

Trust audit

BLOCKgrade F · trust 58/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (7 observation(s))
Network
declared (1 observation(s))
Shell
declared (2 observation(s))
Dependencies
not all pinned
Secrets in source
found

Findings (25)

CRITICALHard-coded secrets · secret.stripe · CWE-798, CWE-321
sqry-cli/src/persistence/history.rs:803
&["api_key=sk_live_abc123def456ghi789".to_string()],
HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59
sqry-daemon/src/mcp_host/redaction.rs:268
"/root/.ssh/id_ed25519",
Why it matters. touches a credential store
HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59
sqry-mcp-redaction/src/rules/pattern.rs:932
"/root/.ssh/id_ed25519",
Why it matters. touches a credential store
LOWInventory / provenance · inv.binary · CWE-1104
sqry-lang-css/tests/fixtures/fuzz-crash-703-multibyte-selector.css
fuzz-crash-703-multibyte-selector.css
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWInventory / provenance · inv.hidden_file · CWE-1104
agent-skills/.lsp.json
.lsp.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
crates/tree-sitter-groovy-sqry/grammar-src/.clangd
.clangd
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
sqry-vscode/.vscodeignore
.vscodeignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
third-party/jobserver/.cargo_vcs_info.json
.cargo_vcs_info.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
third-party/kqueue-sys/.cargo_vcs_info.json
.cargo_vcs_info.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
sqry-cli/tests/cross_system_parity_tests.rs:274
"expected at least one Rust function ('main' or 'process') in results; got: {names:?}"
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
sqry-cli/tests/cross_system_parity_tests.rs:280
"expected at least one Python function ('handle_request' or 'transform') in results; got: {names:?}"
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
LOWFilesystem / path · fs.credential_store · CWE-22, CWE-59
sqry-mcp-redaction/tests/only_paths_are_redacted.rs:579
"/root/.ssh/id_ed25519",
Why it matters. touches a credential store
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
scripts/ci/test_agent_skills_parity.py:337
target.symlink_to("../../../agent-skills/skills/alpha/SKILL.md")
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
scripts/ci/test_agent_skills_parity.py:344
target.symlink_to("../../../agent-skills/skills/alpha/SKILL.md")
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
scripts/ci/test_agent_skills_parity.py:453
target.symlink_to("../../../agent-skills/skills/alpha/SKILL.md")
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
scripts/ci/test_agent_skills_parity.py:517
target.symlink_to("../../../.claude/skills/alpha/SKILL.md")
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
scripts/ci/test_agent_skills_parity.py:708
os.symlink("../../stale/gamma", repo / ".claude/skills/gamma")
LOWObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
.github/workflows/publish-homebrew-tap.yml:179
IyBIb21lYnJldyBUYXAgZm9yIHNxcnkKCltzcXJ5XShodHRwczovL3NxcnkuZGV2KSBpcyBhIGxlYW4sIGZvY3VzZWQgKipzZW1hbnRpYyBjb2RlIHNlYXJjaCB0b29sKioKYnVpbHQgaW4gUnVzdC4gSXQgdW5kZXJzdGFuZHMgY29kZSBzdHJ1Y3R1cmUgdGhyb3Vn
LOWObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
sqry-lang-perl/tests/fixtures/unicode_ident.pl:1
package Café::Ωmega;
LOWObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
sqry-lang-perl/tests/grammar_1_2_1_node_forms.rs:192
assert!(has_function_suffix(&staging, "Café::Ωmega::función"));
LOWObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
sqry-lang-perl/tests/grammar_1_2_1_node_forms.rs:193
assert!(has_function_suffix(&staging, "Café::Ωmega::precißión"));
LOWObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
sqry-lang-perl/tests/grammar_1_2_1_node_forms.rs:194
assert!(has_module_node(&staging, "Café::Ωmega"));
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
sqry-vscode/package.json
elkjs, fflate, https-proxy-agent, sigstore, vscode-languageclient, which, @types/chai, @types/mocha
Why it matters. 27 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
sqry-cli/CHANGELOG.md:183
- *(session)* harden graph cache semantics- *(session)* use session graph cache for queries- *(graph)* clarify detailed stats and sync 25.0.2 metadata## [25.0.2](https://github.com/verivus-oss/sqry/co
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
sqry-mcp/server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: critical_finding, no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha 7a01572113d1full audit observations/trust-audit/mcp-server/verivus-oss__sqry.json · Report an issue / request a re-scan
04

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-087a01572113d1BLOCKF58first audit
05

Questions

What is the Sqry MCP server?

Semantic code search engine - by Verivus (sqry.dev)

Is Sqry safe to connect to an agent?

No — not without reading the findings first. The audit graded it F (58/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does Sqry need?

No credential environment variables were found in its source, so it appears to need none.

How does Sqry run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as sqry-vscode at 33.0.1.

How current is this page?

The grade is for one exact copy of the source (7a01572113d1), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement