# Skylos MCP
> Skylos MCP exposes local static-analysis tools for dead code, security issues, code quality, secrets, AI-generated code risks, and agent guardrails, with optional authenticated remediation.
Canonical: https://www.mcpfolio.com/servers/skylos-mcp
Last updated: 2026-10-28
## Catalog record

- Publisher: Duriantaco (community-maintained open-source project)
- Categories: development

## Website

https://skylos.dev/

## Repository

https://github.com/duriantaco/skylos

## Transports

stdio

## Authentication

No key is needed for the limited local analyze tool (up to five calls per day according to current docs). SKYLOS_API_KEY from the official Skylos Cloud dashboard enables authenticated tools; remediate additionally needs an LLM API key configured in the server environment or through Skylos key setup.

## Tools

- **analyze**: Find dead code and unused symbols in a selected local path.
- **security_scan**: Run static security and taint analysis on a selected path.
- **quality_check**: Analyze code complexity, nesting, structure, and quality patterns.
- **secrets_scan**: Detect hard-coded credentials and sensitive data in supported files.
- **verify_change**: Check a changed file or range for AI-code trust findings.
- **verify_agent**: Statically assess agent integrations and deployment guardrails.
- **remediate**: Generate candidate fixes, validate with tests, and optionally apply changes.

## Sources

- [official_mcp_documentation](https://docs.skylos.dev/mcp-server)
- [official_package_metadata](https://github.com/duriantaco/skylos/blob/main/pyproject.toml)
- [official_product_logo_asset](https://skylos.dev/assets/web-app-manifest-512x512.png)
- [discovery_directory](https://awesome-mcp.tools/)
- [maintainer_or_vendor_documentation](https://docs.skylos.dev/mcp-server)

## Setup

Use the interactive setup panel on [the detail page](https://www.mcpfolio.com/servers/skylos-mcp) to view instructions for each supported client.