SkillTotal is a Model Context Protocol (MCP) server: Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally. In practice that means any MCP-compatible AI assistant can call SkillTotal's tools directly — the model decides when to use them in a conversation or agent run.
It runs locally: the Python package skilltotal (via uvx) speaks MCP over stdio on your machine. No credentials are required — it works out of the box. The current release is v0.43.0, published under the Apache-2.0 license, with source at pezhik/skilltotal on GitHub.
SkillTotal is listed under AI & Agents on mcp.site and works with any MCP client — Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed and the rest of the ecosystem — using the install snippets below. If you maintain SkillTotal for skilltotal.ai, claim this listing to verify ownership, earn the Verified badge, and keep the details current.