ASSESSMENT #AIM-2026-000218

ai.pullpush/pullpush-mcp

Automated only

Connect any two APIs and keep them in sync — 48 MCP tools with shadow previews and diagnostics.

Repository Third-party · npm

Install

npx kaduno-pullpush-mcp

Running any third-party MCP server executes its code with the permissions you grant it. A grade reflects our findings at the “last verified” date below — verify independently before installing in a sensitive environment.

Should you install this?

Freshness (poor, 55/100), Maintenance (poor, 23/100), Provenance (poor, 40/100) so far. Safety hasn't been assessed yet — this is a partial picture, not a complete grade.

Last verified 2026-08-14

Dispute this grade

39/100 overall

§1Freshness

Last commit: 2026-08-10T03:32:46Z2026-08-14 · GitHub
Endpoint status: unknown (No scan data yet)2026-08-14 · Security scan

§2Maintenance

1 human contributor(s).2026-08-14 · GitHub
Repository has never had an issue opened — rate not measurable, neutral half-credit2026-08-14 · GitHub

§3Provenance

Registry namespace verified.2026-08-14 · MCP Registry
Not from a known official vendor.2026-08-14 · MCP Registry
Package has no build attestation on record.2026-08-14 · npm registry

Grade history

Historical grade tracking becomes available once this server has been through at least two sync cycles — the longitudinal dataset is what answers “is this server getting worse?”

Maintainer of this server? Dispute a finding or trigger a re-scan after a fix.

How disputes work Claim this listing