Atlas Scout MCP Registry packaging

Atlas Scout MCP Registry packaging

This repository contains the inspectable packaging metadata and locked buildrecipe used to publish Atlas Scout to the official MCP Registry.

Atlas Scout is a local, read-only MCP server for structural code navigation. Itbuilds a disposable SQLite index inside each workspace and provides boundeddefinitions, exact source ranges, references, static call relationships,architecture summaries, and edit-impact evidence to connected coding agents.

Install

Use an MCP Registry client that supports MCPB packages and choose the releaseasset matching your operating system and CPU architecture. Each bundle starts:

atlas-scout mcp

The current Preview 25 target matrix is:

Preview binaries for macOS and Windows are not yet platform-signed. Review theinstallation and platform-safety documentationand do not weaken operating-system or organization security controls.

Reproduce the MCPB artifacts

The build is locked to Atlas Scout 1.0.0-preview.25, the exact signed publicrelease-manifest digest, all four source-archive digests and byte lengths, and@anthropic-ai/mcpb 2.1.2.

Requirements: Bash, curl, jq, Node.js/npm, sha256sum, tar, and unzip.

./scripts/build-mcpb.sh
(cd dist/packages && sha256sum --check SHA256SUMS)

The script downloads only immutable Preview 25 release objects fromdownload.atlasscout.dev, verifies them before extraction, and packages onenative target per .mcpb file. Generated artifacts remain under dist/ andare not committed to Git.

For directories that accept only one downloadable MCPB artifact per listing,build the universal package:

./scripts/build-smithery-mcpb.sh

That package contains three of the same verified native executables and a smallNode.js launcher that selects the matching operating system and CPU at startup.It supports macOS/ARM64, Linux/x86-64, and Windows/x86-64 and requires Node.js18 or newer. Smithery currently limits MCPB uploads to 25 MB, so Linux/ARM64users should install its target-specific package from the official MCP Registryor GitHub release. Atlas Scout itself remains a native executable; the launcheris used only for cross-platform MCPB distribution.

The official MCPB CLI records the packaging time in each ZIP. Rebuildingverifies and packages the same native inputs, but does not promise abyte-identical .mcpb digest. The immutable release-asset digests used by MCPclients are recorded in server.json and RELEASE_EVIDENCE.md.

The source archives additionally provide OpenPGP signatures, Sigstore bundles,SPDX SBOMs, and aggregate checksums through the signed public releasemanifest.

Licensing boundary

The packaging metadata, build scripts, and repository documentation arelicensed under Apache License 2.0. Atlas Scout itself is separate proprietarysoftware. The executables and product materials inside MCPB release assetsremain governed by the Atlas Scout Proprietary License and EULA included inevery bundle.

Installing or using an MCPB asset constitutes use of the proprietary runtime,not a grant under this repository's Apache license.

Privacy and support

Atlas Scout indexes locally. It does not transmit repository paths, symbols,queries, tool calls, editor state, Git remotes, index metrics, or source code tothe Atlas Scout licensing service. Navigation results are sent to the codingagent the user connects.

• Product documentation: https://atlasscout.dev/docs
• Privacy policy: https://atlasscout.dev/legal/privacy
• Support and security: [email protected]