TAR Engine
io.github.qingxuantang/tar-engine
Audit AI skill safety before you ship. Static, semantic, adversarial, supply chain scans.
Connect this server
Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.
{
"mcpServers": {
"tar-engine": {
"command": "uvx",
"args": [
"tar-engine"
],
"env": {
"TAR_ENGINE_BYOK_OPENAI_KEY": "<your TAR_ENGINE_BYOK_OPENAI_KEY>",
"TAR_ENGINE_BYOK_ANTHROPIC_KEY": "<your TAR_ENGINE_BYOK_ANTHROPIC_KEY>"
}
}
}
}- TAR_ENGINE_BYOK_OPENAI_KEYsecretOpenAI API key that unlocks the semantic LLM and adversarial prompt-fuzz layers. Static and supply-chain layers run without it.
- TAR_ENGINE_BYOK_ANTHROPIC_KEYsecretAnthropic API key alternative to the OpenAI key for the semantic and adversarial layers.
A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.
- Category
- Developer Tools
- Version
- 0.3.3
- Registry
- active
- Published
- 7/23/2026
More Developer Tools servers
Browse all Developer Tools →io.github.qinisolabs/bizdays
qinisolabs
Verified business-day math for AI agents: holidays + per-country weekends, not guesses.
io.github.qinisolabs/companieswise
qinisolabs
Verified UK company lookup & validation for AI agents — Companies House data, snapshot or live.
io.github.qinisolabs/floodwise
qinisolabs
England flood-risk by postcode for AI agents — verified Environment Agency data, not guesses.
io.github.qinisolabs/icdwise
qinisolabs
Verified ICD-10-CM code lookup & validation for AI agents — official descriptions, not guesses.
io.github.qinisolabs/localecheck
qinisolabs
Verified locale data for AI agents: dates, phone, currency, tax, holidays, addresses (UK/US)
Qiniso
qinisolabs
Deterministic fact verification for AI agents — checksums & curated data, not guesses.
Add the badge to your site
Show visitors that TAR Engine is listed here — it’s also the link we check for a free listing.
HTML — for your website
<a href="https://serverdex.io/server/io-github-qingxuantang-tar-engine?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="TAR Engine — listed on Serverdex" width="123" height="40" loading="lazy"></a>Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.
Markdown — for your README
[](https://serverdex.io/server/io-github-qingxuantang-tar-engine?utm_source=badge)Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.