
Security News
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.
contract-diff-mcp
Advanced tools
Aggregate local contract snapshot changes without exposing schema contents. Tools include compare contract snapshots
Contract Diff compares two local JSON contract snapshots and reports a coarse structural fingerprint. It is useful for quickly answering whether a generated API or schema snapshot became larger, smaller, or structurally different without handing schema contents to an agent. It does not prove endpoint compatibility or identify semantic additions and removals.
compare_contract_snapshots: compare two local JSON snapshots using node counts, value type categories, and deltas only. The result is a structural signal, not a semantic contract diff.CONTRACT_DIFF_ROOT and realpath checks.npm install
npm run build
node dist/index.js
npm install
npm run build
node dist/index.js
The server uses stdio, so it can be connected to Claude Desktop, Cursor, VS Code, MCP Inspector, or another compatible MCP client.
compare_contract_snapshots: Compare two local JSON contract snapshots using a coarse structural fingerprint; schema names, paths, values, and versions are never returned.After building, connect the server through your MCP client. The repository root also contains smoke-test.mjs for projects covered by the shared harness. A typical tool call starts with compare_contract_snapshots.
These tools need a license key:
contract_riskBuy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-contract-diff-mcp and set it in your MCP client config:
"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
The key is checked against MCP Marketplace, cached for 24 hours, and keeps working offline once one check has succeeded. Every other tool on this server stays free.
FAQs
Aggregate local contract snapshot changes without exposing schema contents. Tools include compare contract snapshots
The npm package contract-diff-mcp receives a total of 119 weekly downloads. As such, contract-diff-mcp popularity was classified as not popular.
We found that contract-diff-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.