Firmware Release Gate

io.github.jmshinhwaPublished by GitHub account jmshinhwav0.1.5Updated Oct 24, 2026

Finds the build-config lines that ship an ESP-IDF or Zephyr device with secure boot off, a debug por

VerifiedSTDIODesktop onlySecurity & Monitoring

Overview

AI-generated overview

A local MCP server that scans ESP-IDF or Zephyr build configuration for lines that ship a device with secure boot disabled or debug ports open.

What you can do
Inspect ESP-IDF and Zephyr build-configuration files for settings that leave a device insecure, such as secure boot turned off or a debug port left open. Report the specific configuration lines that trigger those findings. The manifest lists no individual tools, so the exact operations are not documented.
When to use it
Useful when reviewing firmware build configuration for ESP-IDF or Zephyr devices before release, to catch insecure defaults such as disabled secure boot or open debug ports.
Requirements
Runs locally over stdio, started with npx from the npm package @readystack/firmware-release-gate. Desktop only; no authentication, environment variables or headers are declared.
Before you install
The README describes unrelated VS Code themes, so documentation does not match the stated purpose; verify what the package actually does before running it. It runs as a local process on your machine.

Installation

In SourceWeft

  1. Open Firmware Release Gate in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

readystack-themes

Made by ReadyStack · free calculators and templates at getreadystack.com VS Code themes by ReadyStack

Source: README.md at commit ee1c884

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

3
  1. v0.1.5LatestSep 23, 2026
  2. v0.1.2Sep 18, 2026
  3. v0.1.1Sep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.