StarProof

net.bigfloppy.starproofPublished by starproof.bigfloppy.netOfficial publisherv1.0.0Updated Oct 26, 2026

GitHub repo authenticity scoring: stars-vs-forks, star velocity, astroturf fingerprints. Free API.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that scores a GitHub repository's authenticity, flagging fake-star and astroturf patterns from public repo data.

What you can do
  • Score a GitHub repository's authenticity by owner/name, returning a 0-100 score and a verdict
  • Inspect star-to-fork ratios, star velocity, missing language or license, product-named orgs, keyword-stuffed topics and hype descriptions
  • Check that the StarProof API is reachable
When to use it
Useful when you want a quick second opinion on whether a GitHub project's popularity looks organic before relying on it, citing it, or recommending it to others.
Requirements
A remote streamable HTTP endpoint; no package, environment variables or headers are declared. The scoring tool pulls repository data through the GitHub API, so network access is needed.
Before you install
The score is a heuristic fingerprint, not proof of manipulation; treat verdicts as a signal, not a verdict on a project's quality. Repository names you submit are sent to the StarProof service and to the GitHub API.

Installation

In SourceWeft

  1. Open StarProof in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/net.bigfloppy.starproof%2Fstarproof/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "starproof": {
      "type": "http",
      "url": "https://starproof.bigfloppy.net/mcp"
    }
  }
}

README

This repository has no README.

Tools

2

starproof_score

Score a GitHub repository's authenticity: pulls the repo through the GitHub API and checks the fake-star / astroturf fingerprint (stars-vs-forks, star velocity, missing language/license, product-named org, keyword-stuffed topics, hype description). Returns a 0-100 authenticity score, a verdict (likely-authentic/suspicious/likely-faked) and the evidence list. Free, no key.

Parametersreporequired

starproof_health

Check the StarProof API is up. Takes no arguments.

Takes no parameters.

Version history

1
  1. v1.0.0LatestOct 26, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.