ascending-llc/jarvis-registry

23.0

Adjusted Score

23.0

Raw Score

100%

Time Factor

2026-08-09

Last Push

2.9K

Stars

Python

Language

268.1K

Lines of Code

862

Files

4.5K

Pattern Hits

2026-08-09

Scan Date

0.19

HC Hit Rate

What These Metrics Mean

Adjusted Score: Primary synthetic code indicator. Raw score normalised per 1,000 lines of code and multiplied by the temporal discount factor. This is the definitive comparative metric — use it to rank repositories by AI authorship density.
Raw Score: The unmodified sum of all severity-weighted, context-multiplied pattern match scores before temporal discounting. Reflects the absolute signal strength independent of when the repository was last active.
Time Factor: The temporal discount multiplier (0–100%) applied to the raw score. Repositories last updated before ChatGPT's launch (Nov 2022) receive a 5% factor. Full signal is only assigned to repositories active in the post-adoption era (Jan 2024+).
Pattern Hits: Total count of individual pattern matches across all files and categories. A high hit count with a low score may indicate a very large codebase with isolated AI snippets; a low count with a high score indicates dense, concentrated AI signatures.
HC Hit Rate: High+Critical pattern hits per file, averaged across the repository. This orthogonal signal catches repositories where a few files are densely packed with high-severity AI tells — a strong indicator even when the normalised score appears moderate due to codebase size.
Lines of Code / Files: Total lines and files analysed. The scanner examines 94 file extensions. These denominators are used to normalise the score, enabling fair comparison between repositories of vastly different sizes.

Score History

Longitudinal tracking requires multiple scan runs. Once this repository is re-scanned after new commits land, this chart will visualise how the synthetic code signal evolves over time — enabling you to detect whether AI authorship is growing, stabilising, or being actively corrected by human engineers.

No multi-scan history yet — run the scanner again to build trend data.

Severity Breakdown

Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.

CRITICAL 18HIGH 147MEDIUM 442LOW 3859

Directory Score Breakdown

This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.

Pattern Findings

The scanner identified 4466 distinct pattern matches across 22 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.

Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.

Hyper-Verbose Identifiers2254 hits · 2192 pts

Severity	File	Line	Snippet	Context
LOW	registry-pkgs/tests/unit/test_beanie_event_hooks.py	45	def test_every_declared_event_hook_is_actually_registered(document_class: type[Document]) -> None:	CODE
LOW	registry-pkgs/tests/unit/test_metrics_client.py	6	def test_metrics_client_instantiation():	CODE
LOW	registry-pkgs/tests/unit/test_metrics_client.py	17	def test_metrics_client_with_config():	CODE
LOW	registry-pkgs/tests/unit/test_metrics_client.py	40	def test_metrics_client_skips_disabled_metrics():	CODE
LOW	registry-pkgs/tests/unit/test_metrics_client.py	101	def test_record_unregistered_metric_logs_warning():	CODE
LOW	registry-pkgs/tests/unit/test_metrics_client.py	113	def test_create_metrics_client_factory():	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	89	def test_produces_decodable_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	95	def test_kid_is_set_in_header(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	101	def test_no_kid_omits_kid_from_header(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	122	def test_returns_claims_for_valid_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	128	def test_audience_none_skips_aud_verification(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	141	def test_wrong_audience_raises(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	147	def test_expired_token_raises(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	154	def test_leeway_allows_slightly_expired_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	162	def test_leeway_zero_rejects_slightly_expired_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	169	def test_bad_signature_raises(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	190	def test_returns_kid_from_header(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	195	def test_returns_none_when_kid_absent(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	200	def test_raises_on_malformed_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	221	def test_raises_on_malformed_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	235	def test_includes_standard_claims(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	249	def test_expiration_calculated_correctly(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	259	def test_custom_iat_used_when_provided(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	359	def test_returns_claims_without_verification(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	366	def test_decodes_expired_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	373	def test_decodes_token_signed_with_different_key(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	380	def test_raises_on_malformed_token(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	435	def test_wrong_audience_raises(self, jwks):	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	442	def test_mismatched_key_raises(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	272	def test_token_type_included_when_provided(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	283	def test_token_type_omitted_when_none(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	294	def test_extra_claims_merged_into_payload(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	307	def test_extra_claims_can_override_standard_claims(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	320	def test_empty_extra_claims_dict_works(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	334	def test_payload_compatible_with_encode_jwt(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	400	def test_decodes_with_matching_jwk(self, jwks):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	407	def test_audience_none_skips_aud_verification(self, jwks):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	420	def test_expired_token_raises(self, jwks):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	475	def test_kid_matches_argument(self):	CODE
LOW	registry-pkgs/tests/unit/test_jwt_utils.py	495	def test_jwk_can_verify_token(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	24	async def test_connect_db_creates_client(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	48	async def test_connect_db_uses_env_variables(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	74	async def test_connect_db_extracts_dbname_from_uri(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	90	async def test_connect_db_initializes_beanie(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	128	async def test_connect_db_only_once(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_mongodb.py	165	async def test_close_db_when_not_connected(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_mongodb.py	171	def test_get_client_when_connected(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_mongodb.py	179	def test_get_client_when_not_connected(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_mongodb.py	186	def test_get_database_when_connected(self):	CODE
LOW	registry-pkgs/tests/unit/test_mongodb.py	199	def test_get_database_when_not_connected(self):	CODE
LOW⚡	registry-pkgs/tests/unit/test_scopes.py	76	def test_uses_scopes_config_path_from_settings_when_set(self, temp_scopes_file, reset_scopes_cache):	CODE
LOW⚡	registry-pkgs/tests/unit/test_scopes.py	82	def test_warns_when_scopes_config_path_set_but_file_not_found(self, reset_scopes_cache):	CODE
LOW⚡	registry-pkgs/tests/unit/test_scopes.py	91	def test_uses_package_bundled_file_when_env_var_not_set(self, reset_scopes_cache):	CODE
LOW⚡	registry-pkgs/tests/unit/test_scopes.py	98	def test_raises_filenotfounderror_when_no_file_found(self, reset_scopes_cache):	CODE
LOW⚡	registry-pkgs/tests/unit/test_scopes.py	109	def test_loads_valid_scopes_config_successfully(self, temp_scopes_file, valid_scopes_config, reset_scopes_cache):	CODE
LOW⚡	registry-pkgs/tests/unit/test_scopes.py	117	def test_caches_loaded_config(self, temp_scopes_file, reset_scopes_cache):	CODE
LOW⚡	registry-pkgs/tests/unit/test_scopes.py	126	def test_raises_runtime_error_for_invalid_config_type(self, reset_scopes_cache):	CODE
LOW⚡	registry-pkgs/tests/unit/test_scopes.py	259	def test_handles_relative_scopes_config_path(self, valid_scopes_config, reset_scopes_cache, tmp_path):	CODE
LOW⚡	registry-pkgs/tests/unit/test_scopes.py	279	def test_cache_persists_across_calls(self, temp_scopes_file, reset_scopes_cache):	CODE
LOW⚡	registry-pkgs/tests/unit/test_scopes.py	381	def test_unknown_group_is_removed(self, temp_scopes_file, reset_scopes_cache):	CODE
2194 more matches not shown…

Excessive Try-Catch Wrapping781 hits · 811 pts

Severity	File	Line	Snippet	Context
LOW	get_asor_token.py	89	except Exception as e:	CODE
LOW	…stry-pkgs/tests/unit/telemetry/test_telemetry_setup.py	26	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/database/mongodb.py	148	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/database/mongodb.py	160	except Exception:	CODE
LOW	…gistry-pkgs/src/registry_pkgs/database/redis_client.py	32	except Exception as e:	CODE
LOW	…gistry-pkgs/src/registry_pkgs/database/redis_client.py	44	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/scopes.py	81	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/agentcore_jwt.py	108	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/core/agentcore_jwt.py	125	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	240	except Exception as exc:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	324	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	388	except Exception as exc:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	436	except Exception as exc:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	457	except Exception as exc:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	496	except Exception as inner:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	503	except Exception as inner:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	515	except Exception as inner:	CODE
LOW	…gistry-pkgs/src/registry_pkgs/workflows/persistence.py	73	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/a2a_client.py	492	except Exception as exc:	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/mcp_executor.py	67	except Exception as exc:	CODE
LOW	…stry-pkgs/src/registry_pkgs/workflows/serialization.py	49	except Exception:	CODE
LOW⚡	…-pkgs/src/registry_pkgs/workflows/hitl/cancellation.py	38	except Exception as exc:	CODE
LOW⚡	…-pkgs/src/registry_pkgs/workflows/hitl/cancellation.py	48	except Exception as exc:	CODE
LOW⚡	…-pkgs/src/registry_pkgs/workflows/hitl/cancellation.py	57	except Exception as e:	CODE
LOW	…ry-pkgs/src/registry_pkgs/workflows/control/wrapper.py	119	except Exception as exc:	CODE
LOW	registry-pkgs/src/registry_pkgs/models/a2a_agent.py	564	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	44	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	68	except Exception:	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	79	except Exception: # nosec B110 - intentional suppression during teardown	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	88	except Exception: # nosec B110 - intentional suppression during teardown	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	139	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	151	except Exception as e:	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	169	except Exception as e:	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	174	except Exception as e:	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	184	except Exception: # nosec B110 - intentional suppression during teardown	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/README.md	123	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/telemetry/metrics_client.py	54	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/telemetry/metrics_client.py	69	except Exception as e:	CODE
LOW	…try-pkgs/src/registry_pkgs/telemetry/metrics_client.py	119	except Exception as e:	CODE
MEDIUM	…try-pkgs/src/registry_pkgs/telemetry/metrics_client.py	66	def wrapper(args, *kwargs):	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/decorators.py	50	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/decorators.py	100	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/decorators.py	112	except Exception as record_error:	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/decorators.py	125	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/decorators.py	137	except Exception as record_error:	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/decorators.py	205	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/decorators.py	227	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/client.py	71	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/client.py	94	except Exception as e:	CODE
LOW	…-pkgs/src/registry_pkgs/vector/base_sync_repository.py	128	except Exception as e:	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/vector/repository.py	227	except Exception as e:	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/vector/repository.py	350	except Exception as e:	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/vector/repository.py	469	except Exception as e:	CODE
LOW⚡	registry-pkgs/src/registry_pkgs/vector/repository.py	475	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/repository.py	103	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/repository.py	166	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/repository.py	190	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/repository.py	267	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/repository.py	291	except Exception as e:	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/repository.py	383	except Exception as e:	CODE
721 more matches not shown…

Decorative Section Separators211 hits · 738 pts

Severity	File	Line	Snippet	Context
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	81	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	83	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	114	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	116	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	182	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	184	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	206	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	208	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	227	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	229	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	351	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	353	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	386	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	388	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	451	# ---------------------------------------------------------------------------	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_jwt_utils.py	453	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/test_jwt_utils.py	26	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/test_jwt_utils.py	28	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_persistence.py	402	# ── on_error=skip semantics (skip-tolerated failures) ──────────────────────	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/workflow/test_compiler.py	405	# ── StepConfig model validation ──────────────────────────────────────────	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/workflow/test_compiler.py	444	# ── _step_kwargs mapping ─────────────────────────────────────────────────	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/workflow/test_compiler.py	464	# ── compile_workflow honours StepConfig ──────────────────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	172	# ── A2ACallResult.render_text ────────────────────────────────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	249	# ── call_a2a: Message path ───────────────────────────────────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	269	# ── call_a2a: streaming Task path ────────────────────────────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	309	# ── call_a2a: non-streaming Task path (Bug 1 regression) ─────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	331	# ── call_a2a: polling fallback (Bug 2) ───────────────────────────────────────	COMMENT
MEDIUM	registry-pkgs/tests/unit/workflow/test_a2a_client.py	386	# ── call_a2a: error/empty paths ──────────────────────────────────────────────	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/workflow/test_a2a_client.py	673	# ── Provider detection + call-scoped extra headers ────────────────────────────	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/workflows/prompt.py	148	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/workflows/prompt.py	150	# ---------------------------------------------------------------------------	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/telemetry/README.md	73	# =============================================================================	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/telemetry/README.md	75	# =============================================================================	COMMENT
MEDIUM⚡	registry-pkgs/src/registry_pkgs/vector/repository.py	231	# ========================================	COMMENT
MEDIUM⚡	registry-pkgs/src/registry_pkgs/vector/repository.py	233	# ========================================	COMMENT
MEDIUM⚡	registry-pkgs/src/registry_pkgs/vector/repository.py	354	# ========================================	COMMENT
MEDIUM⚡	registry-pkgs/src/registry_pkgs/vector/repository.py	356	# ========================================	COMMENT
MEDIUM⚡	registry-pkgs/src/registry_pkgs/vector/repository.py	479	# ========================================	COMMENT
MEDIUM⚡	registry-pkgs/src/registry_pkgs/vector/repository.py	481	# ========================================	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/vector/repository.py	133	# ========================================	COMMENT
MEDIUM	registry-pkgs/src/registry_pkgs/vector/repository.py	135	# ========================================	COMMENT
MEDIUM⚡	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	197	# ========================================	COMMENT
MEDIUM⚡	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	199	# ========================================	COMMENT
MEDIUM⚡	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	300	# ========================================	COMMENT
MEDIUM⚡	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	302	# ========================================	COMMENT
MEDIUM	…stry-pkgs/src/registry_pkgs/vector/adapters/adapter.py	80	# ========================================	COMMENT
MEDIUM	…stry-pkgs/src/registry_pkgs/vector/adapters/adapter.py	82	# ========================================	COMMENT
MEDIUM	…stry-pkgs/src/registry_pkgs/vector/adapters/adapter.py	102	# ========================================	COMMENT
MEDIUM	…stry-pkgs/src/registry_pkgs/vector/adapters/adapter.py	104	# ========================================	COMMENT
MEDIUM	…stry-pkgs/src/registry_pkgs/vector/adapters/adapter.py	123	# ========================================	COMMENT
MEDIUM	…stry-pkgs/src/registry_pkgs/vector/adapters/adapter.py	126	# ========================================	COMMENT
MEDIUM⚡	…stry-pkgs/src/registry_pkgs/vector/adapters/adapter.py	249	# ========================================	COMMENT
MEDIUM⚡	…stry-pkgs/src/registry_pkgs/vector/adapters/adapter.py	252	# ========================================	COMMENT
MEDIUM	…stry-pkgs/src/registry_pkgs/vector/adapters/adapter.py	481	# ========================================	COMMENT
MEDIUM	…stry-pkgs/src/registry_pkgs/vector/adapters/adapter.py	483	# ========================================	COMMENT
MEDIUM	frontend/src/components/WorkflowCanvas/CanvasView.tsx	58	// ── ReadOnly Mode Filters ──────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/src/components/WorkflowCanvas/convert.ts	8	// ─── canvas type ↔ API nodeType maps ─────────────────────────────────────────	COMMENT
MEDIUM	frontend/src/components/WorkflowCanvas/convert.ts	62	// ─── canvas → API ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	frontend/src/components/WorkflowCanvas/convert.ts	397	// ─── API → canvas ─────────────────────────────────────────────────────────────	COMMENT
MEDIUM	…rc/components/WorkflowCanvas/PropsPanel/RunHistory.tsx	8	// ─── visual config ────────────────────────────────────────────────────────────	COMMENT
151 more matches not shown…

Docstring Block Structure124 hits · 588 pts

Severity	File	Line	Snippet	Context
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	53	Build a standardized JWT payload with common claims. Constructs a JWT payload dict with standard claims (sub, iss,	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	103	Encode a JWT using RS256 with an RSA private key. Args: payload: Claims dict to encode. Must contain at lea	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	131	Decode and verify a self-signed JWT using an RSA public key. Verifies the RS256 signature, expiry, and issuer. Audi	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	184	Decode a JWT without verifying its signature or any claims. Intended for inspecting the payload of externally-issue	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	209	Return the JWK entry whose ``kid`` matches the given key ID. Args: jwks: A JWKS dict with a ``"keys"`` arra	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	242	Decode and verify a JWT using a JSON Web Key (JWK). Used to verify tokens issued by external identity providers (Ke	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	299	Return the ``kid`` from the unverified JWT header. Args: token: Compact JWT string. The header is decoded w	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	318	Return the full unverified JWT header as a dict. Decodes the header segment without verifying the token's signature	STRING
HIGH	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	339	Build a JSON Web Key Set (JWKS) dict from an RSA public key PEM. Constructs a JWKS response body containing a singl	STRING
HIGH	registry-pkgs/src/registry_pkgs/workflows/runner.py	170	Execute a workflow definition and return the completed run + per-node results. Callers must pre-create a ``Work	STRING
HIGH	…-pkgs/src/registry_pkgs/workflows/executor_resolver.py	76	Resolve each executor key to an MCP server or A2A agent executor. Args: executor_keys: All ``executor_ke	STRING
HIGH	…istry-pkgs/src/registry_pkgs/workflows/mcp_executor.py	82	Wrap an MCP server as a workflow executor via a direct downstream call. Args: mcp_server: Active	STRING
HIGH	registry-pkgs/src/registry_pkgs/models/enums.py	367	Validate the directive against the current status and return the resulting status. Idempotent transitions (paus	STRING
HIGH	registry-pkgs/src/registry_pkgs/models/a2a_agent.py	530	Create A2AAgent from standard A2A agent card using SDK validation. Args: card_data: A2A ag	STRING
HIGH	…y-pkgs/src/registry_pkgs/models/extended_mcp_server.py	558	Create ExtendedMCPServer instance from server info dictionary. Args: server_info: Server i	STRING
HIGH	registry-pkgs/src/registry_pkgs/vector/repository.py	138	Save a model instance to vector database. Args: instance: Model instance to save	STRING
HIGH	…y-pkgs/src/registry_pkgs/vector/retrievers/reranker.py	21	Create reranker instance based on provider type. Args: reranker_type: Reranker provider (e.g., "bedroc	STRING
HIGH	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	305	Get Weaviate collection by name. Args: collection_name: Collection name (required, will us	STRING
HIGH	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	399	Check if collection exists in Weaviate. Args: collection_name: Collection name (required,	STRING
HIGH	…stry-pkgs/src/registry_pkgs/vector/adapters/factory.py	70	Create vector store adapter. Args: config: BackendConfig instance Returns: Vec	STRING
HIGH	cli/mcp_utils.py	163	Make HTTP request to MCP gateway. Args: payload: JSON-RPC payload Returns:	STRING
HIGH	cli/mcp_security_scanner.py	52	Retrieve LLM API key from CLI argument or environment variable. Args: cli_value: API key provided via comma	STRING
HIGH	cli/mcp_security_scanner.py	82	Run mcp-scanner command and return raw output. Args: server_url: URL of the MCP server to scan anal	STRING
HIGH	auth-server/src/auth_server/providers/factory.py	23	Factory function to get the appropriate auth provider. Args: settings_override: oauth2_config:	STRING
HIGH	auth-server/src/auth_server/providers/entra.py	112	Validate Entra ID JWT token. Args: token: The JWT access token to validate **kwargs: Ad	STRING
HIGH	auth-server/src/auth_server/providers/entra.py	315	Fetch user information from Microsoft Graph API. Args: access_token: OAuth2 access token R	STRING
HIGH	auth-server/src/auth_server/providers/entra.py	488	Refresh an access token using a refresh token. Args: refresh_token: The refresh token Retu	STRING
HIGH	auth-server/src/auth_server/providers/entra.py	525	Validate a machine-to-machine token. Args: token: The M2M access token to validate Returns	STRING
HIGH	auth-server/src/auth_server/providers/entra.py	541	Get machine-to-machine token using client credentials. This method is used for AI agent authentication using Az	STRING
HIGH	auth-server/src/auth_server/providers/base.py	16	Validate an access token and return user info. Args: token: The access token to validate	STRING
HIGH	auth-server/src/auth_server/providers/base.py	52	Exchange authorization code for access token. Args: code: Authorization code from OAuth2 flow	STRING
HIGH	auth-server/src/auth_server/providers/base.py	73	Get user information from access token. Args: access_token: OAuth2 access token (required for Graph	STRING
HIGH	auth-server/src/auth_server/providers/base.py	119	Refresh an access token using a refresh token. Args: refresh_token: The refresh token Retu	STRING
HIGH	auth-server/src/auth_server/providers/base.py	134	Validate a machine-to-machine token. Args: token: The M2M access token to validate Returns	STRING
HIGH	auth-server/src/auth_server/providers/base.py	151	Get a machine-to-machine token using client credentials. Args: client_id: Optional client ID (uses	STRING
HIGH	auth-server/src/auth_server/routes/oauth_flow.py	2111	Validate session cookie using itsdangerous serializer. Args: cookie_value: The session cookie value	STRING
HIGH	registry/src/registry/core/mcp_client.py	331	Perform MCP initialization using MCP client library and return the init_result. This is a pure transport layer	STRING
HIGH	registry/src/registry/auth/dependencies.py	49	Get current authenticated user from request state. Args: request: FastAPI request object Returns:	STRING
HIGH	registry/src/registry/auth/oauth/oauth_utils.py	5	Get default redirect URI for OAuth callback. Constructs redirect URI using registry_url from settings and the	STRING
HIGH	registry/src/registry/auth/oauth/oauth_client.py	277	Dynamically register OAuth client (RFC 7591). Args: server_url: Authorization server URL	STRING
HIGH	…gistry/src/registry/auth/oauth/reconnection/manager.py	101	Try to reconnect single server Notes: tryReconnect() Args: user_id: User ID	STRING
HIGH	registry/src/registry/utils/crypto_utils.py	70	Encrypts a value using AES-CBC with a random IV. This implementation is compatible with the TypeScript encrypt	STRING
HIGH	registry/src/registry/utils/crypto_utils.py	120	Decrypts an encrypted value using AES-CBC. This implementation is compatible with the TypeScript decryptV2 fun	STRING
HIGH	registry/src/registry/utils/keycloak_manager.py	120	Create a group in Keycloak. Args: group_name: Name of the group to create description: Optiona	STRING
HIGH	registry/src/registry/utils/keycloak_manager.py	170	Delete a group from Keycloak. Args: group_name: Name of the group to delete Returns: True	STRING
HIGH	registry/src/registry/utils/keycloak_manager.py	220	Get a group's details from Keycloak by name. Args: group_name: Name of the group to retrieve Retu	STRING
HIGH	registry/src/registry/mcpgw/tools/server.py	94	Make a tool call to downstream MCP. This function only handles making the HTTP POST request and parsing the respons	STRING
HIGH	registry/src/registry/mcpgw/tools/server.py	218	Execute a specific downstream MCP tool. Args: ctx: The mcp.server.fastmcp.Context object that can be D	STRING
HIGH	registry/src/registry/mcpgw/tools/utils.py	150	Use the ServerSession.send_notification() method to schedule the forwarding of a notification from downstre	STRING
HIGH	registry/src/registry/mcpgw/tools/utils.py	210	Parse the Server-Send Event and check if it's a notification, a response, or something we don't care about. Ref	STRING
HIGH	registry/src/registry/mcpgw/tools/utils.py	256	Build complete headers with authentication for MCP server requests. Consolidates auth logic used by all proxy e	STRING
HIGH	registry/src/registry/mcpgw/tools/utils.py	349	Get target MCP server URL for proxying to MCP server. Consolidates URL building logic used across all proxy end	STRING
HIGH	registry/src/registry/api/v1/mcp/oauth_router.py	390	Get OAuth tokens Notes: GET /oauth/tokens/:flowId TypeScript implementation: Get tokens via flowManager.ge	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	225	Fetch and validate agent card from URL using SDK. Args: url: Agent endpoint URL	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	451	Get agent by ID. Args: agent_id: Agent ID Returns: Agent document	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	523	Create a new agent. Automatically fetches agent card from provided URL. Args: data: Agent	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	614	Update an existing agent. If URL is updated, automatically fetches new agent card. Args: a	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	773	Delete an agent. Args: agent_id: Agent ID Returns: True if deleted su	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	809	Toggle agent enabled/disabled status. Args: agent_id: Agent ID enabled: New en	STRING
HIGH	registry/src/registry/services/a2a_agent_service.py	854	Refresh agent capabilities by fetching latest agent card from well-known endpoint. This method provide	STRING
64 more matches not shown…

Modern AI Meta-Vocabulary115 hits · 291 pts

Severity	File	Line	Snippet	Context
MEDIUM	README.md	101	Jarvis Registry builds upon the excellent foundational work of the [agentic-community/mcp-gateway-registry](https://gith	CODE
MEDIUM	docs/token-refresh-service.md	445	3. Search existing [GitHub Issues](https://github.com/agentic-community/mcp-gateway-registry/issues)	CODE
MEDIUM	docs/anthropic-registry-import.md	325	- GitHub Issues: [mcp-gateway-registry/issues](https://github.com/agentic-community/mcp-gateway-registry/issues)	CODE
MEDIUM	docs/complete-setup-guide.md	176	git clone https://github.com/agentic-community/mcp-gateway-registry.git	CODE
MEDIUM	docs/complete-setup-guide.md	1159	- GitHub Issues: https://github.com/agentic-community/mcp-gateway-registry/issues	CODE
MEDIUM	docs/complete-setup-guide.md	1160	- Discussions: https://github.com/agentic-community/mcp-gateway-registry/discussions	CODE
MEDIUM	docs/faq.md	21	→ Details: [Gateway & Proxy](FEATURES.md#1-gateway-proxy) · [A2A Agent Workflow](FEATURES.md#5-a2a-agent-workflow-orches	CODE
MEDIUM	docs/faq.md	27	→ See: [A2A Agent Workflow Orchestration](FEATURES.md#5-a2a-agent-workflow-orchestration) · [A2A Agent Registry](feature	CODE
MEDIUM	docs/faq.md	137	→ See: [A2A Agent Workflow](FEATURES.md#5-a2a-agent-workflow-orchestration) · [A2A Agent Management](a2a-agent-managemen	CODE
MEDIUM	docs/macos-setup-guide.md	71	git clone https://github.com/agentic-community/mcp-gateway-registry.git	CODE
MEDIUM	docs/macos-setup-guide.md	377	git clone https://github.com/agentic-community/mcp-gateway-registry.git	CODE
MEDIUM	docs/index.md	36	\| [AI Copilot & Custom Chatbot Integration](FEATURES.md#1-gateway-proxy) \| Connect any AI client to enterprise tools	CODE
MEDIUM	docs/index.md	38	\| [A2A Agent Workflow](FEATURES.md#5-a2a-agent-workflow-orchestration) \| Register and manage autonomous agents; orch	CODE
MEDIUM	docs/index.md	58	- Explore Agentic: [exploreagentic.ai](https://exploreagentic.ai/) — the field guide to enterprise agentic AI, publi	CODE
MEDIUM	docs/FEATURES.md	3	Jarvis Registry is the enterprise control plane for AI — connecting copilots, autonomous agents, and enterprise tools th	CODE
MEDIUM	docs/keycloak-integration.md	964	docker-compose.yml # Service orchestration	CODE
MEDIUM	docs/design/security-design.md	3	Security in the registry is layered. Each layer has a distinct responsibility, and they compose in a fixed order on ever	CODE
MEDIUM	docs/design/agentcore.md	71	git clone https://github.com/agentic-community/mcp-gateway-registry.git	CODE
MEDIUM	docs/features/a2a-gateway-registry.md	3	The A2A Agent Gateway & Registry is the central catalog for [autonomous agents](https://exploreagentic.ai/agentic-ai/) e	CODE
MEDIUM	docs/features/a2a-gateway-registry.md	9	An A2A agent is an autonomous service that exposes its capabilities through an agent card and a runtime endpoint. Unlike	CODE
MEDIUM	docs/features/auth-server.md	5	Rather than building its own identity store, the auth server is designed to federate with your existing enterprise Ident	CODE
MEDIUM	…s/explore-agentic/comparisons/agentspace-vs-copilot.md	31	Google launched Agentspace on December 13, 2024 <a href="#cite-3" class="cite-ref">[3]</a>, the company's enterprise-AI	CODE
MEDIUM	…s/explore-agentic/comparisons/agentspace-vs-copilot.md	88	Yes, the same product with a new label. Agentspace was folded into Gemini Enterprise at the October 9, 2025 launch <a hr	CODE
MEDIUM	…s/explore-agentic/comparisons/agentspace-vs-copilot.md	118	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/comparisons/moveworks-vs-glean.md	98	1. ServiceNow — ServiceNow to extend leading agentic AI with acquisition of Moveworks — https://newsroom.servicenow.	CODE
MEDIUM	docs/explore-agentic/comparisons/moveworks-vs-glean.md	116	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/comparisons/jarvis-vs-glean.md	72	Glean. The product was built for that exact shape. 100+ connectors on the catalog <a href="#cite-1" class="cite-ref">[1]	CODE
MEDIUM	docs/explore-agentic/comparisons/jarvis-vs-glean.md	106	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	…xplore-agentic/comparisons/jarvis-vs-copilot-studio.md	109	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	…re-agentic/comparisons/agentforce-vs-copilot-studio.md	31	Agentforce is Salesforce's agentic-AI platform, the successor to Einstein. Three dates, three releases. Announced Septem	CODE
MEDIUM	…re-agentic/comparisons/agentforce-vs-copilot-studio.md	31	Agentforce is Salesforce's agentic-AI platform, the successor to Einstein. Three dates, three releases. Announced Septem	CODE
MEDIUM	…re-agentic/comparisons/agentforce-vs-copilot-studio.md	89	Four dates matter. Agentforce announced September 12, 2024 <a href="#cite-1" class="cite-ref">[1]</a>. GA October 25, 20	CODE
MEDIUM	…re-agentic/comparisons/agentforce-vs-copilot-studio.md	89	Four dates matter. Agentforce announced September 12, 2024 <a href="#cite-1" class="cite-ref">[1]</a>. GA October 25, 20	CODE
MEDIUM	…re-agentic/comparisons/agentforce-vs-copilot-studio.md	119	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/comparisons/mcp-vs-rag.md	1	# MCP vs RAG: two protocols for two different problems	COMMENT
MEDIUM⚡	docs/explore-agentic/comparisons/mcp-vs-rag.md	25	## The MCP vs RAG framing mistake	COMMENT
MEDIUM⚡	docs/explore-agentic/comparisons/mcp-vs-rag.md	29	For reference: MCP was released by Anthropic as an open JSON-RPC specification on November 25, 2024 <a href="#cite-1" cl	CODE
MEDIUM⚡	docs/explore-agentic/comparisons/mcp-vs-rag.md	37	## What RAG actually does	COMMENT
MEDIUM⚡	docs/explore-agentic/comparisons/mcp-vs-rag.md	43	## How MCP and RAG fit together in production	COMMENT
MEDIUM	docs/explore-agentic/comparisons/mcp-vs-rag.md	68	Different layers. MCP (Model Context Protocol) is a wire protocol. It standardises how an AI client invokes tools and fe	CODE
MEDIUM	docs/explore-agentic/comparisons/mcp-vs-rag.md	76	Yes. And this is now the canonical enterprise pattern <a href="#cite-4" class="cite-ref">[4]</a>. Your RAG pipeline (ret	CODE
MEDIUM	docs/explore-agentic/comparisons/mcp-vs-rag.md	104	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/comparisons/jarvis-vs-moveworks.md	36	Jarvis is an agent platform and MCP gateway listed on AWS Marketplace and Azure Marketplace as "Jarvis: Simplifying AI A	CODE
MEDIUM	docs/explore-agentic/comparisons/jarvis-vs-moveworks.md	126	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM⚡	docs/explore-agentic/playbooks/ai-agent-roi.md	91	Rarely. Never as the primary metric. It has one honest use: internal steering. Which teams adopted the tool, where resis	CODE
MEDIUM⚡	docs/explore-agentic/playbooks/ai-agent-roi.md	95	Three layers, plus one human. Layer one: a workflow metric system finance can audit directly. Your ITSM, ERP, or CRM. No	CODE
MEDIUM⚡	docs/explore-agentic/playbooks/ai-agent-roi.md	103	1. Gartner — Gartner Predicts Over 40% of Agentic AI Projects Will Be Canceled by End of 2027 — https://www.gartner.	CODE
MEDIUM⚡	docs/explore-agentic/playbooks/ai-agent-roi.md	104	2. The Futurum Group — Enterprise AI ROI Shifts as Agentic Priorities Surge — https://futurumgroup.com/press-release	CODE
MEDIUM	docs/explore-agentic/playbooks/ai-agent-roi.md	116	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/pillars/mcp.md	35	The spec defines three participants <a href="#cite-1" class="cite-ref">[1]</a>. A <strong>client</strong> renders the co	CODE
MEDIUM⚡	docs/explore-agentic/pillars/mcp.md	118	4. Anthropic — Donating the Model Context Protocol and establishing the Agentic AI Foundation — https://www.anthropi	CODE
MEDIUM⚡	docs/explore-agentic/pillars/mcp.md	123	9. Linux Foundation — Linux Foundation Announces the Formation of the Agentic AI Foundation (AAIF) — https://www.lin	CODE
MEDIUM⚡	docs/explore-agentic/pillars/mcp.md	130	This article is mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — a curated reading list on agentic AI,	CODE
MEDIUM	docs/explore-agentic/pillars/index.md	51	The pillars are mirrored from [Explore Agentic](https://www.exploreagentic.ai/) — read the canonical versions at [www.ex	CODE
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	16	Two editorial positions up front. Chunk strategy matters more than model choice on most corpora. And evaluation, specifi	CODE
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	44	## 02. The embedding model landscape in April 2026	COMMENT
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	104	## 06. When agentic RAG earns its seat	COMMENT
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	104	## 06. When agentic RAG earns its seat	COMMENT
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	122	Three commercial defaults, plus open source for the air-gapped case. Voyage 4-large (January 15, 2026; MoE with a shared	CODE
MEDIUM	docs/explore-agentic/pillars/enterprise-rag.md	126	Almost certainly yes. It is the highest-ROI upgrade most RAG teams skip. Take the top 50 from your vector search, re-sco	CODE
55 more matches not shown…

Hallucination Indicators18 hits · 235 pts

Severity	File	Line	Snippet	Context
CRITICAL⚡	registry/tests/unit/mcpgw/test_agent.py	189	ctx.request_context.lifespan_context.consent_store.has_agent_consent.assert_called_once_with(	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_agent.py	194	ctx.request_context.lifespan_context.pending_consent_store.save.assert_called_once()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_agent.py	265	ctx.request_context.lifespan_context.consent_store.has_agent_consent.assert_called_once_with(	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_agent.py	270	ctx.request_context.lifespan_context.pending_consent_store.save.assert_not_called()	CODE
CRITICAL	registry/tests/unit/mcpgw/test_agent.py	220	ctx.request_context.lifespan_context.session_store.append.assert_called_once()	CODE
CRITICAL	registry/tests/unit/mcpgw/test_agent.py	245	ctx.request_context.lifespan_context.consent_store.has_agent_consent.assert_not_called()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	252	ctx.request_context.lifespan_context.server_service.get_server_by_id.assert_not_awaited()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	263	ctx.request_context.lifespan_context.server_service.get_server_by_id.assert_not_awaited()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	363	ctx.request_context.lifespan_context.pending_consent_store.save.assert_called_once()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	372	ctx.request_context.lifespan_context.consent_store.has_server_consent.assert_called_once_with(	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	394	ctx.request_context.lifespan_context.pending_consent_store.save.assert_called_once()	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	395	ctx.request_context.lifespan_context.consent_store.has_server_consent.assert_called_once_with(	CODE
CRITICAL⚡	registry/tests/unit/mcpgw/test_server.py	400	ctx.request_context.lifespan_context.session_store.append.assert_called_once()	CODE
CRITICAL	registry/tests/unit/mcpgw/test_server.py	291	ctx.request_context.lifespan_context.consent_store.has_server_consent.assert_not_called()	CODE
CRITICAL	registry/tests/unit/mcpgw/test_server.py	447	ctx.request_context.lifespan_context.consent_store.has_server_consent.assert_not_called()	CODE
CRITICAL	registry/src/registry/health/routes.py	105	return request.app.state.container.health_service.get_all_health_status()	CODE
CRITICAL	registry/src/registry/health/routes.py	111	return request.app.state.container.health_service.get_websocket_stats()	CODE
CRITICAL	registry/src/registry/api/proxy_routes.py	454	request.app.state.container.mcp_client_service.clear_session(session_key)	CODE

Unused Imports236 hits · 230 pts

Severity	File	Line	Context
LOW	…try-pkgs/tests/unit/models/test_federation_metadata.py	3	CODE
LOW	registry-pkgs/tests/unit/workflow/test_mcp_executor.py	1	CODE
LOW	…istry-pkgs/tests/unit/workflow/test_control_wrapper.py	1	CODE
LOW	registry-pkgs/tests/unit/workflow/test_helpers.py	3	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	3	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	3	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	3	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	3	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	4	CODE
LOW	registry-pkgs/src/registry_pkgs/__init__.py	4	CODE
LOW	registry-pkgs/src/registry_pkgs/database/__init__.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/database/__init__.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/database/__init__.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	8	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	8	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	8	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	8	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	8	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	44	CODE
LOW	…gistry-pkgs/src/registry_pkgs/workflows/persistence.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/compiler.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/a2a_client.py	1	CODE
LOW	…-pkgs/src/registry_pkgs/workflows/executor_resolver.py	11	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/types.py	1	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/a2a_executor.py	1	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/mcp_executor.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/prompt.py	17	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/helpers.py	1	CODE
LOW	…try-pkgs/src/registry_pkgs/workflows/media_snapshot.py	13	CODE
LOW	…stry-pkgs/src/registry_pkgs/workflows/serialization.py	7	CODE
LOW	…y-pkgs/src/registry_pkgs/workflows/hitl/field_types.py	1	CODE
LOW	…-pkgs/src/registry_pkgs/workflows/hitl/cancellation.py	1	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/hitl/serde.py	20	CODE
LOW	…stry-pkgs/src/registry_pkgs/workflows/hitl/__init__.py	1	CODE
LOW	…stry-pkgs/src/registry_pkgs/workflows/hitl/__init__.py	2	CODE
LOW	…stry-pkgs/src/registry_pkgs/workflows/hitl/__init__.py	3	CODE
LOW	…stry-pkgs/src/registry_pkgs/workflows/hitl/__init__.py	3	CODE
LOW	…y-pkgs/src/registry_pkgs/workflows/hitl/projections.py	1	CODE
LOW	…stry-pkgs/src/registry_pkgs/workflows/control/queue.py	21	CODE
LOW	…ry-pkgs/src/registry_pkgs/workflows/control/wrapper.py	30	CODE
LOW	…y-pkgs/src/registry_pkgs/workflows/control/__init__.py	1	CODE
LOW	…y-pkgs/src/registry_pkgs/workflows/control/__init__.py	2	CODE
LOW	…y-pkgs/src/registry_pkgs/workflows/control/__init__.py	2	CODE
LOW	…y-pkgs/src/registry_pkgs/workflows/control/__init__.py	2	CODE
LOW	registry-pkgs/src/registry_pkgs/models/a2a_agent.py	612	CODE
LOW	registry-pkgs/src/registry_pkgs/models/a2a_agent.py	612	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	10	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	10	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	10	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	10	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	10	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	10	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	18	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	19	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	20	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	21	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	22	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	23	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	24	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	25	CODE
176 more matches not shown…

Modern Structural Boilerplate196 hits · 197 pts

Severity	File	Line	Snippet	Context
LOW	registry-pkgs/src/registry_pkgs/__init__.py	7	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/database/__init__.py	3	__all__ = [	CODE
LOW	…gistry-pkgs/src/registry_pkgs/database/redis_client.py	9	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/core/scopes.py	21	logger = logging.getLogger(__name__)	CODE
LOW	…istry-pkgs/src/registry_pkgs/core/oauth_state_store.py	13	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_tokens.py	28	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/core/agentcore_jwt.py	11	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	18	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/core/jwt_utils.py	23	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/core/consent_store.py	12	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/runner.py	75	logger = logging.getLogger(__name__)	CODE
LOW	…gistry-pkgs/src/registry_pkgs/workflows/persistence.py	19	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/compiler.py	49	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/a2a_client.py	37	logger = logging.getLogger(__name__)	CODE
LOW	…-pkgs/src/registry_pkgs/workflows/executor_resolver.py	30	logger = logging.getLogger(__name__)	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/a2a_executor.py	30	logger = logging.getLogger(__name__)	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/mcp_executor.py	21	logger = logging.getLogger(__name__)	CODE
LOW	…-pkgs/src/registry_pkgs/workflows/hitl/cancellation.py	17	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/hitl/serde.py	27	logger = logging.getLogger(__name__)	CODE
LOW	…stry-pkgs/src/registry_pkgs/workflows/hitl/__init__.py	5	__all__ = [	CODE
LOW	…stry-pkgs/src/registry_pkgs/workflows/control/queue.py	28	logger = logging.getLogger(__name__)	CODE
LOW	…ry-pkgs/src/registry_pkgs/workflows/control/wrapper.py	46	logger = logging.getLogger(__name__)	CODE
LOW	…y-pkgs/src/registry_pkgs/workflows/control/__init__.py	4	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/models/a2a_agent.py	79	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/models/a2a_agent.py	614	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/models/__init__.py	37	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/models/workflow.py	24	logger = logging.getLogger(__name__)	CODE
LOW	…y-pkgs/src/registry_pkgs/models/extended_mcp_server.py	64	logger = logging.getLogger(__name__)	CODE
LOW	…y-pkgs/src/registry_pkgs/models/_generated/__init__.py	11	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	15	__all__ = [	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	24	logger = logging.getLogger(__name__)	CODE
LOW	…try-pkgs/src/registry_pkgs/telemetry/metrics_client.py	14	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/decorators.py	18	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/decorators.py	178	def set_success(self, success: bool) -> None:	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/client.py	10	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/__init__.py	13	__all__ = [	CODE
LOW	…-pkgs/src/registry_pkgs/vector/base_sync_repository.py	13	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/repository.py	15	logger = logging.getLogger(__name__)	CODE
LOW	…y-pkgs/src/registry_pkgs/vector/retrievers/reranker.py	8	logger = logging.getLogger(__name__)	CODE
LOW	…istry-pkgs/src/registry_pkgs/vector/config/__init__.py	14	__all__ = [	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	14	logger = logging.getLogger(__name__)	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/enum/__init__.py	4	__all__ = [	CODE
LOW	…stry_pkgs/vector/repositories/mcp_server_repository.py	12	logger = logging.getLogger(__name__)	CODE
LOW	…istry_pkgs/vector/repositories/a2a_agent_repository.py	12	logger = logging.getLogger(__name__)	CODE
LOW	…stry-pkgs/src/registry_pkgs/vector/adapters/adapter.py	10	logger = logging.getLogger(__name__)	CODE
LOW	…stry-pkgs/src/registry_pkgs/vector/adapters/factory.py	10	logger = logging.getLogger(__name__)	CODE
LOW	cli/mcp_utils.py	30	logger = logging.getLogger(__name__)	CODE
LOW	cli/test_anthropic_api.py	58	logger = logging.getLogger(__name__)	CODE
LOW	cli/mcp_security_scanner.py	26	logger = logging.getLogger(__name__)	CODE
LOW	cli/scan_all_servers.py	38	logger = logging.getLogger(__name__)	CODE
LOW	cli/agent_mgmt.py	67	logger = logging.getLogger(__name__)	CODE
LOW	cli/registry_cli_wrapper.py	30	logger = logging.getLogger(__name__)	CODE
LOW	cli/test_a2a_agents.py	44	logger = logging.getLogger(__name__)	CODE
LOW	cli/anthropic_transformer.py	21	logger = logging.getLogger(__name__)	CODE
LOW	auth-server/cognito_utils.py	9	logger = logging.getLogger(__name__)	CODE
LOW	auth-server/src/auth_server/server.py	29	logger = logging.getLogger(__name__)	CODE
LOW	auth-server/src/auth_server/providers/cognito.py	21	logger = logging.getLogger(__name__)	CODE
LOW	auth-server/src/auth_server/providers/__init__.py	9	__all__ = [	CODE
LOW	auth-server/src/auth_server/providers/factory.py	15	logger = logging.getLogger(__name__)	CODE
LOW	auth-server/src/auth_server/providers/entra.py	23	logger = logging.getLogger(__name__)	CODE
136 more matches not shown…

Redundant / Tautological Comments123 hits · 185 pts

Severity	File	Line	Snippet	Context
LOW	test-keycloak-mcp.sh	21	# Check if token file exists	COMMENT
LOW	registry-pkgs/src/registry_pkgs/vector/repository.py	311	# Check if only safe metadata fields are being updated	COMMENT
LOW	cli/agent_mgmt.sh	119	# Check if no arguments provided	COMMENT
LOW	cli/agent_mgmt.sh	129	# Check if help is requested	COMMENT
LOW	cli/mcp_utils.py	62	# Check if token is expired	COMMENT
LOW	cli/bootstrap_user_and_m2m_setup.sh	116	# Check if group already exists	COMMENT
LOW	cli/bootstrap_user_and_m2m_setup.sh	362	# Check if registry_management.py exists	COMMENT
LOW	cli/mcp_security_scanner.py	411	# Output result	COMMENT
LOW	cli/mcp_security_scanner.py	459	# Output result	COMMENT
LOW	cli/agent_mgmt.py	231	# Check if token is expired	COMMENT
LOW⚡	cli/mcp_client.py	259	# Print result	STRING
LOW	cli/import_from_anthropic_registry.sh	75	# Check if NPM package exists (simplified check)	COMMENT
LOW	cli/import_from_anthropic_registry.sh	79	# Check if PyPI package exists (simplified check)	COMMENT
LOW	cli/import_from_anthropic_registry.sh	132	# Check if LLM analyzer is requested and API key is available	COMMENT
LOW	cli/anthropic_transformer.py	116	# Check if remote has authentication headers	COMMENT
LOW	auth-server/src/auth_server/core/config.py	71	# Set keycloak_external_url to keycloak_url if not provided	COMMENT
LOW	auth-server/src/auth_server/providers/cognito.py	126	# Check if cache is still valid	COMMENT
LOW	auth-server/src/auth_server/providers/entra.py	159	# Check if issuer is valid (v1.0 or v2.0)	COMMENT
LOW	auth-server/src/auth_server/providers/entra.py	206	# Check if cache is still valid	COMMENT
LOW	auth-server/src/auth_server/providers/keycloak.py	156	# Check if cache is still valid	COMMENT
LOW	auth-server/src/auth_server/utils/config_loader.py	87	# Check if it has a default value	COMMENT
LOW	auth-server/src/auth_server/routes/oauth_flow.py	1893	# Check if user has any scopes - if not, deny access (fail closed)	COMMENT
LOW	auth-server/src/auth_server/routes/oauth_flow.py	2020	# Check if all methods are allowed (wildcard support)	COMMENT
LOW	auth-server/src/auth_server/routes/oauth_flow.py	2036	# Check if all tools are allowed (wildcard support)	COMMENT
LOW	credentials-provider/token_refresher.py	931	# Check if process exists and is a token refresher	COMMENT
LOW	credentials-provider/token_refresher.py	937	# Check if it's actually our token refresher process	COMMENT
LOW	credentials-provider/add_noauth_services.py	194	# Check if this server should skip the /mcp suffix (e.g., atlassian)	COMMENT
LOW	credentials-provider/add_noauth_services.py	237	# Check if this server should skip the /mcp suffix (e.g., atlassian)	COMMENT
LOW	credentials-provider/check_and_refresh_creds.sh	12	# Check if token is valid using Python	COMMENT
LOW	credentials-provider/oauth/ingress_oauth.py	404	# Check if token is expired	COMMENT
LOW	credentials-provider/oauth/generic_oauth_flow.py	353	# Check if provider requires cloud ID from user info	COMMENT
LOW	credentials-provider/oauth/generic_oauth_flow.py	972	# Check if provider requires template variables	COMMENT
LOW	credentials-provider/oauth/generic_oauth_flow.py	1104	# Check if this is an M2M provider	COMMENT
LOW	credentials-provider/oauth/generic_oauth_flow.py	1191	# Check if token exchange already happened in the callback	COMMENT
LOW	credentials-provider/oauth/generic_oauth_flow.py	1293	# Check if we should use interactive mode	COMMENT
LOW	credentials-provider/oauth/egress_oauth.py	81	# Check if all required variables for this config set exist	COMMENT
LOW	credentials-provider/oauth/egress_oauth.py	331	# Check if token is expired	COMMENT
LOW	scripts/publish_containers.sh	103	# Check if already logged in	COMMENT
LOW	scripts/publish_containers.sh	176	# Check if Dockerfile exists	COMMENT
LOW	scripts/publish_containers.sh	470	# Check if any action is specified	COMMENT
LOW	scripts/setup-atlassian-env.sh	8	# Check if required environment variables are set	COMMENT
LOW	scripts/docs-dev.sh	26	# Check if we're in the right directory	COMMENT
LOW	scripts/migrate_encrypt_oauth_client_secrets.py	72	# Check if server has oauth config with client_secret	COMMENT
LOW	scripts/migrate_encrypt_oauth_client_secrets.py	83	# Check if already encrypted	COMMENT
LOW	scripts/seed_mongodb.py	70	# Check if group already exists	COMMENT
LOW	scripts/seed_mongodb.py	141	# Check if user already exists	COMMENT
LOW	scripts/seed_mongodb.py	188	# Check if key already exists	COMMENT
LOW	scripts/seed_mongodb.py	253	# Check if token already exists	COMMENT
LOW	scripts/seed_mongodb.py	613	# Check if server already exists	COMMENT
LOW	scripts/run-oauth-setup.sh	63	# Check if this line sets one of our variables	COMMENT
LOW	scripts/refresh_m2m_token.sh	14	# Check if client name provided	COMMENT
LOW	scripts/refresh_m2m_token.sh	31	# Check if client file exists	COMMENT
LOW	scripts/refresh_m2m_token.sh	71	# Check if request was successful	COMMENT
LOW	registry/tests/unit/health/test_health_routes.py	205	# Check if both WebSocket and HTTP routes exist for same path	COMMENT
LOW	registry/src/registry/auth/oauth/token_manager.py	32	# Check if tokens are expired	COMMENT
LOW	…gistry/src/registry/auth/oauth/reconnection/manager.py	138	# Check if connection is valid	COMMENT
LOW⚡	…gistry/src/registry/auth/oauth/reconnection/manager.py	248	# Check if failed or timed out	COMMENT
LOW⚡	…gistry/src/registry/auth/oauth/reconnection/manager.py	250	# Check if it was cancelled	COMMENT
LOW⚡	…gistry/src/registry/auth/oauth/reconnection/manager.py	259	# Check if pending (active)	COMMENT
LOW⚡	registry/src/registry/health/service.py	524	# Check if we get any valid response (even auth errors indicate server is up)	COMMENT
63 more matches not shown…

Structural Annotation Overuse104 hits · 180 pts

Severity	File	Line	Snippet	Context
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	627	# Step 1: Get candidate documents	COMMENT
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	642	# Step 2: Rerank candidates via Bedrock (AWS config injected from store config)	COMMENT
LOW	docs/entra-id-setup.md	11	## Step 1: Create App Registration in Azure Portal	COMMENT
LOW	docs/entra-id-setup.md	34	## Step 2: Configure Authentication	COMMENT
LOW	docs/entra-id-setup.md	43	## Step 3: Create Client Secret	COMMENT
LOW	docs/entra-id-setup.md	56	## Step 4: Environment Configuration	COMMENT
LOW	docs/entra-id-setup.md	116	## Step 5: Test the Setup	COMMENT
LOW	docs/entra-id-setup.md	127	## Step 6: Optional Configurations	COMMENT
LOW	docs/complete-setup-guide.md	366	# Step 1: Run the Keycloak initialization	COMMENT
LOW	docs/complete-setup-guide.md	381	#Step 2: Disable SSL for Application Realm	COMMENT
LOW	docs/complete-setup-guide.md	395	# Step 3: Retrieve and save all client credentials (REQUIRED)	COMMENT
LOW	docs/quick-start.md	19	## Step 1: Clone and Configure	COMMENT
LOW	docs/quick-start.md	34	## Step 2: Configure Authentication Provider	COMMENT
LOW	docs/quick-start.md	55	## Step 3: Generate Secret Keys	COMMENT
LOW	docs/quick-start.md	64	## Step 4: Launch Services	COMMENT
LOW	docs/quick-start.md	76	## Step 5: Verify Installation	COMMENT
LOW	docs/service-management.md	342	# Step 1: Create a new access group	COMMENT
LOW	docs/service-management.md	349	# Step 2: Add servers to the group	COMMENT
LOW	docs/service-management.md	364	# Step 3: Create M2M service account	COMMENT
LOW	docs/service-management.md	376	# Step 4: Create human user	COMMENT
LOW	docs/service-management.md	387	# Step 5: Verify setup	COMMENT
LOW	docs/cognito.md	31	#### Step 1: Create User Pool	COMMENT
LOW	docs/cognito.md	56	#### Step 2: Configure App Client for Users	COMMENT
LOW	docs/cognito.md	83	#### Step 3: Create Users and Groups	COMMENT
LOW	docs/cognito.md	107	#### Step 1: Create M2M App Client	COMMENT
LOW	docs/cognito.md	117	#### Step 2: Create Resource Server and Custom Scopes	COMMENT
LOW	docs/cognito.md	135	#### Step 3: Assign Scopes to Agent App Client	COMMENT
LOW	docs/cognito.md	538	### Step 1: Copy Template to Environment File	COMMENT
LOW	docs/cognito.md	547	### Step 2: Configure Client Credentials	COMMENT
LOW	docs/cognito.md	579	### Step 3: Replace Placeholder Values	COMMENT
LOW	docs/cognito.md	590	### Step 4: Verify Configuration	COMMENT
LOW	docs/auth.md	42	### Step 1: Configure Environment	COMMENT
LOW	docs/auth.md	87	### Step 2: Run OAuth Setup	COMMENT
LOW	docs/auth.md	110	### Step 3: Use Generated Configuration	COMMENT
LOW	docs/auth.md	208	### Step 4: Test Your Connection	COMMENT
LOW	docs/auth.md	881	#### Step 1: Access the Admin Console	COMMENT
LOW	docs/auth.md	895	#### Step 2: Navigate to the Correct Realm	COMMENT
LOW	docs/auth.md	904	#### Step 3: Create the Required Groups	COMMENT
LOW	docs/auth.md	924	#### Step 4: Verify Group Creation	COMMENT
LOW⚡	docs/keycloak-integration.md	505	# Step 1: Create service account with appropriate permissions	COMMENT
LOW⚡	docs/keycloak-integration.md	510	# Step 2: Generate initial token	COMMENT
LOW⚡	docs/keycloak-integration.md	513	# Step 3: Validate setup	COMMENT
LOW⚡	docs/keycloak-integration.md	516	# Step 4: Document agent in inventory	COMMENT
LOW	docs/design/agentcore.md	59	## Step 1: Set Up the MCP Gateway Registry	COMMENT
LOW	docs/design/agentcore.md	95	## Step 2: Set Up Your AgentCore Gateway	COMMENT
LOW	docs/design/agentcore.md	151	## Step 3: Register the AgentCore Gateway with MCP Registry	COMMENT
LOW	docs/design/agentcore.md	305	## Step 4: Test the Registered Gateway	COMMENT
LOW	docs/design/federation.md	124	### Step 1: Get OAuth Token	COMMENT
LOW	docs/design/federation.md	145	### Step 2: Environment Configuration	COMMENT
LOW	docs/design/federation.md	151	### Step 3: Federation Configuration	COMMENT
LOW	cli/test_mcp_gateway.sh	7	# Step 1: Get M2M token from Keycloak	COMMENT
LOW	cli/test_mcp_gateway.sh	27	# Step 2: Test ping endpoint	COMMENT
LOW	cli/test_mcp_gateway.sh	38	# Step 3: Test initialize	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	85	# Step 1: Fetch all agents	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	94	# Step 2: Check for conflicts	COMMENT
LOW	scripts/migrate_a2a_agent_path_slug.py	123	# Step 3: Update all agent documents	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	146	# Step 4: Drop slug index	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	155	# Step 5: Remove slug field from all documents	COMMENT
LOW	registry/src/registry/health/service.py	638	# Step 1: Initialize session to get session ID	COMMENT
LOW	registry/src/registry/health/service.py	651	# Step 2: Add session ID to headers for ping	COMMENT
44 more matches not shown…

Self-Referential Comments36 hits · 121 pts

Severity	File	Line	Snippet	Context
MEDIUM	registry-pkgs/tests/unit/test_mongodb.py	152	# Create a mock client	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_scopes.py	261	# Create a temp file in a subdirectory of tmp_path (which is under project)	COMMENT
MEDIUM⚡	registry-pkgs/tests/unit/test_scopes.py	268	# Create a relative path from current directory	COMMENT
MEDIUM	cli/bootstrap_user_and_m2m_setup.sh	126	# Create the group	COMMENT
MEDIUM	auth-server/tests/unit/test_oauth_callback_session.py	169	# Create a state with resource	COMMENT
MEDIUM	auth-server/tests/unit/test_oauth_callback_session.py	203	# Create a state with resource	COMMENT
MEDIUM	…er/tests/integration/test_oauth_callback_token_flow.py	116	# Create a valid session cookie	COMMENT
MEDIUM	credentials-provider/oauth/oauth_providers.yaml	2	# This file contains OAuth provider configurations for various services	COMMENT
MEDIUM	credentials-provider/oauth/generic_oauth_flow.py	483	# Create the VS Code MCP configuration	COMMENT
MEDIUM	credentials-provider/oauth/generic_oauth_flow.py	534	# Create the Roocode MCP configuration	COMMENT
MEDIUM	scripts/seed_mongodb.py	648	# Create a public entry	COMMENT
MEDIUM	.github/workflows/utils/generate_k8s_registry_env.py	32	# Create the YAML structure	COMMENT
MEDIUM	registry/tests/unit/core/test_mcp_client.py	1029	# Create a mock 401 response	COMMENT
MEDIUM	registry/tests/unit/core/test_mcp_client.py	1054	# Create a mock 401 response	COMMENT
MEDIUM	registry/tests/unit/core/test_mcp_client.py	1079	# Create a mock 403 response	COMMENT
MEDIUM	registry/tests/unit/health/test_health_service.py	44	# Create a real task that can be cancelled	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_oauth_router.py	17	# Create a mock MCP service	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_oauth_router.py	20	# Create a mock OAuth service and attach it to MCP service	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_oauth_router.py	24	# Create a mock Connection service and attach it to MCP service	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_connection_router.py	18	# Create a mock MCP service	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_connection_router.py	21	# Create a mock OAuth service and attach it to MCP service	COMMENT
MEDIUM⚡	registry/tests/unit/api/test_connection_router.py	25	# Create a mock Connection service and attach it to MCP service	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	765	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	826	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	886	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	946	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	1003	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	…gistry/tests/unit/services/test_federation_sync_acl.py	1053	# Create a mock class that has both class methods and constructor	COMMENT
MEDIUM	registry/tests/unit/services/test_oauth_service.py	305	# Create a proper metadata mock with required attributes	COMMENT
MEDIUM	registry/src/registry/health/service.py	252	# This method is kept for compatibility but delegates to the optimized manager	COMMENT
MEDIUM	registry/src/registry/services/oauth/oauth_service.py	82	# Create a copy to avoid mutating the original	COMMENT
MEDIUM	api/registry_management.py	104	# Create a new IAM group	STRING
MEDIUM⚡	api/test-management-api-e2e.sh	442	# Create the JSON file with timestamped path	COMMENT
MEDIUM⚡	api/test-management-api-e2e.sh	472	# Create the JSON file with timestamped path	COMMENT
MEDIUM	keycloak/setup/setup-agent-service-account.sh	159	# Create the M2M client	COMMENT
MEDIUM	keycloak/setup/get-all-client-credentials.sh	65	# Create the main credentials file	COMMENT

Verbosity Indicators51 hits · 98 pts

Severity	File	Line	Snippet	Context
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	627	# Step 1: Get candidate documents	COMMENT
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	642	# Step 2: Rerank candidates via Bedrock (AWS config injected from store config)	COMMENT
LOW	cli/test_mcp_gateway.sh	7	# Step 1: Get M2M token from Keycloak	COMMENT
LOW	cli/test_mcp_gateway.sh	27	# Step 2: Test ping endpoint	COMMENT
LOW	cli/test_mcp_gateway.sh	38	# Step 3: Test initialize	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	85	# Step 1: Fetch all agents	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	94	# Step 2: Check for conflicts	COMMENT
LOW	scripts/migrate_a2a_agent_path_slug.py	123	# Step 3: Update all agent documents	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	146	# Step 4: Drop slug index	COMMENT
LOW⚡	scripts/migrate_a2a_agent_path_slug.py	155	# Step 5: Remove slug field from all documents	COMMENT
LOW	registry/src/registry/health/service.py	638	# Step 1: Initialize session to get session ID	COMMENT
LOW	registry/src/registry/health/service.py	651	# Step 2: Add session ID to headers for ping	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	48	# Step 1: Disconnect existing connection	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	53	# Step 2: Get server config	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	62	# Step 3: Handle OAuth authentication	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	67	# Step 4: Create connection if tokens are valid	COMMENT
LOW	…istry/src/registry/services/federation_sync_service.py	1376	# Step 1: Batch query existing ACL entries for all resources using $in over resourceId	COMMENT
LOW	…istry/src/registry/services/federation_sync_service.py	1424	# Step 2: Compute new ACL entries to INSERT	COMMENT
LOW	…istry/src/registry/services/federation_sync_service.py	1470	# Step 3: Batch insert new ACL entries in chunks	COMMENT
LOW	api/get-m2m-token.sh	128	# Step 1: Try to get cached token from SSM Parameter Store	COMMENT
LOW	api/get-m2m-token.sh	188	# Step 2: Get new token from Keycloak	COMMENT
LOW	api/get-m2m-token.sh	283	# Step 3: Store token in SSM Parameter Store	COMMENT
LOW⚡	api/test-management-api-e2e.sh	440	# Step 4: Register server	COMMENT
LOW⚡	api/test-management-api-e2e.sh	470	# Step 5: Register agent	COMMENT
LOW	api/test-management-api-e2e.sh	335	# Step 1: Create IAM group	COMMENT
LOW	api/test-management-api-e2e.sh	380	# Step 2: Create human user	COMMENT
LOW	api/test-management-api-e2e.sh	411	# Step 3: Create M2M service account	COMMENT
LOW	api/test-management-api-e2e.sh	550	# Step 6: List users	COMMENT
LOW	api/test-management-api-e2e.sh	577	# Step 7: List groups	COMMENT
LOW	api/test-management-api-e2e.sh	604	# Step 8: List servers	COMMENT
LOW	api/test-management-api-e2e.sh	631	# Step 9: List agents	COMMENT
LOW	api/test-management-api-e2e.sh	658	# Step 10: Search for test users	COMMENT
LOW⚡	keycloak/setup/setup-agent-service-account.sh	461	# Step 0: Validate group exists in Keycloak	COMMENT
LOW⚡	keycloak/setup/setup-agent-service-account.sh	464	# Step 1: Create agent-specific M2M client	COMMENT
LOW⚡	keycloak/setup/setup-agent-service-account.sh	467	# Step 2: Get agent client secret	COMMENT
LOW⚡	keycloak/setup/setup-agent-service-account.sh	470	# Step 3: Create service account linked to agent client	COMMENT
LOW⚡	keycloak/setup/setup-agent-service-account.sh	475	# Step 4: Ensure target group exists	COMMENT
LOW⚡	keycloak/setup/setup-agent-service-account.sh	478	# Step 5: Assign service account to group	COMMENT
LOW⚡	keycloak/setup/setup-agent-service-account.sh	481	# Step 6: Ensure groups mapper exists on agent client	COMMENT
LOW⚡	keycloak/setup/setup-agent-service-account.sh	484	# Step 7: Verify everything is set up correctly	COMMENT
LOW⚡	keycloak/setup/setup-agent-service-account.sh	487	# Step 8: Generate agent-specific token configuration	COMMENT
LOW⚡	keycloak/setup/clean-keycloak.sh	187	# Step 1: Try to delete realm via API (graceful cleanup)	COMMENT
LOW⚡	keycloak/setup/clean-keycloak.sh	190	# Step 2: Stop and remove containers	COMMENT
LOW⚡	keycloak/setup/clean-keycloak.sh	193	# Step 3: Remove database volume (nuclear option)	COMMENT
LOW⚡	keycloak/setup/clean-keycloak.sh	196	# Step 4: Clean environment secrets	COMMENT
LOW⚡	keycloak/setup/setup-m2m-service-account.sh	265	# Step 1: Ensure service account exists	COMMENT
LOW⚡	keycloak/setup/setup-m2m-service-account.sh	270	# Step 2: Ensure target group exists	COMMENT
LOW⚡	keycloak/setup/setup-m2m-service-account.sh	273	# Step 3: Assign service account to group	COMMENT
LOW⚡	keycloak/setup/setup-m2m-service-account.sh	276	# Step 4: Get M2M client ID	COMMENT
LOW⚡	keycloak/setup/setup-m2m-service-account.sh	279	# Step 5: Add groups mapper	COMMENT
LOW⚡	keycloak/setup/setup-m2m-service-account.sh	282	# Step 6: Verify everything is set up correctly	COMMENT

Deep Nesting125 hits · 96 pts

Severity	File	Line	Context
LOW	…gistry-pkgs/src/registry_pkgs/workflows/persistence.py	243	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/compiler.py	111	CODE
LOW	registry-pkgs/src/registry_pkgs/workflows/compiler.py	120	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/a2a_executor.py	108	CODE
LOW	…istry-pkgs/src/registry_pkgs/workflows/a2a_executor.py	202	CODE
LOW	…y-pkgs/src/registry_pkgs/models/extended_mcp_server.py	409	CODE
LOW	registry-pkgs/src/registry_pkgs/telemetry/__init__.py	107	CODE
LOW	registry-pkgs/src/registry_pkgs/vector/repository.py	295	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	209	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	426	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	564	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	659	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	220	CODE
LOW	…gs/src/registry_pkgs/vector/backends/weaviate_store.py	257	CODE
LOW	…stry_pkgs/vector/repositories/mcp_server_repository.py	37	CODE
LOW	…istry_pkgs/vector/repositories/a2a_agent_repository.py	29	CODE
LOW	…stry-pkgs/src/registry_pkgs/vector/adapters/factory.py	110	CODE
LOW	cli/test_anthropic_api.py	312	CODE
LOW	cli/mcp_security_scanner.py	79	CODE
LOW	cli/mcp_security_scanner.py	206	CODE
LOW	cli/scan_all_servers.py	47	CODE
LOW	cli/scan_all_servers.py	182	CODE
LOW	cli/agent_mgmt.py	215	CODE
LOW	cli/agent_mgmt.py	351	CODE
LOW	cli/agent_mgmt.py	393	CODE
LOW	cli/agent_mgmt.py	428	CODE
LOW	cli/agent_mgmt.py	475	CODE
LOW	cli/agent_mgmt.py	537	CODE
LOW	cli/agent_mgmt.py	605	CODE
LOW	cli/agent_mgmt.py	653	CODE
LOW	cli/agent_mgmt.py	742	CODE
LOW	cli/agent_mgmt.py	797	CODE
LOW	cli/agent_mgmt.py	832	CODE
LOW	cli/agent_mgmt.py	873	CODE
LOW	cli/registry_cli_wrapper.py	263	CODE
LOW	cli/test_a2a_agents.py	613	CODE
LOW	cli/test_asor_complete.py	65	CODE
LOW	cli/mcp_client.py	95	CODE
LOW	cli/mcp_client.py	163	CODE
LOW	cli/anthropic_transformer.py	95	CODE
LOW	auth-server/src/auth_server/utils/config_loader.py	60	CODE
LOW	auth-server/src/auth_server/utils/security_mask.py	46	CODE
LOW	auth-server/src/auth_server/routes/oauth_flow.py	783	CODE
LOW	auth-server/src/auth_server/routes/oauth_flow.py	1347	CODE
LOW	auth-server/src/auth_server/routes/oauth_flow.py	1582	CODE
LOW	auth-server/src/auth_server/routes/oauth_flow.py	1641	CODE
LOW	auth-server/src/auth_server/routes/oauth_flow.py	1965	CODE
LOW	credentials-provider/token_refresher.py	40	CODE
LOW	credentials-provider/token_refresher.py	493	CODE
LOW	credentials-provider/token_refresher.py	689	CODE
LOW	credentials-provider/token_refresher.py	761	CODE
LOW	credentials-provider/token_refresher.py	914	CODE
LOW	credentials-provider/token_refresher.py	990	CODE
LOW	credentials-provider/add_noauth_services.py	26	CODE
LOW	credentials-provider/oauth/generic_oauth_flow.py	907	CODE
LOW	credentials-provider/oauth/generic_oauth_flow.py	1097	CODE
LOW	credentials-provider/oauth/generic_oauth_flow.py	1252	CODE
LOW	credentials-provider/oauth/generic_oauth_flow.py	351	CODE
LOW	credentials-provider/oauth/generic_oauth_flow.py	609	CODE
LOW	credentials-provider/oauth/egress_oauth.py	308	CODE
65 more matches not shown…

Cross-File Repetition13 hits · 65 pts

Severity	File	Snippet	Context
HIGH	registry-pkgs/tests/conftest.py	this pytest configuration suppresses the green dots and yellow skip letters for passed and skipped tests. in the age of	STRING
HIGH	auth-server/tests/conftest.py	this pytest configuration suppresses the green dots and yellow skip letters for passed and skipped tests. in the age of	STRING
HIGH	registry/tests/conftest.py	this pytest configuration suppresses the green dots and yellow skip letters for passed and skipped tests. in the age of	STRING
HIGH	auth-server/src/auth_server/providers/cognito.py	exchange authorization code for access token using authlib.	STRING
HIGH	auth-server/src/auth_server/providers/entra.py	exchange authorization code for access token using authlib.	STRING
HIGH	auth-server/src/auth_server/providers/keycloak.py	exchange authorization code for access token using authlib.	STRING
HIGH	registry/tests/unit/api/v1/test_agent_routes.py	an acl/db outage (runtimeerror from get_accessible_resource_ids) must surface as 503, not 500.	STRING
HIGH	registry/tests/unit/api/v1/test_federation_routes.py	an acl/db outage (runtimeerror from get_accessible_resource_ids) must surface as 503, not 500.	STRING
HIGH	registry/tests/unit/api/v1/test_server_routes.py	an acl/db outage (runtimeerror from get_accessible_resource_ids) must surface as 503, not 500.	STRING
HIGH	…try/tests/unit/api/v1/workflow/test_workflow_routes.py	an acl/db outage (runtimeerror from get_accessible_resource_ids) must surface as 503, not 500.	STRING
HIGH	registry/src/registry/schemas/a2a_agent_api_schemas.py	pydantic schemas for server management api v1 these schemas define the request and response models for the server manage	STRING
HIGH	registry/src/registry/schemas/acl_schema.py	pydantic schemas for server management api v1 these schemas define the request and response models for the server manage	STRING
HIGH	registry/src/registry/schemas/server_api_schemas.py	pydantic schemas for server management api v1 these schemas define the request and response models for the server manage	STRING

Magic Placeholder Names6 hits · 30 pts

Severity	File	Line	Snippet	Context
HIGH	frontend/src/pages/TokenGeneration.tsx	505	Authorization: Bearer YOUR_TOKEN_HERE	CODE
HIGH	frontend/src/pages/TokenGeneration.tsx	508	Replace YOUR_TOKEN_HERE with the token above.	CODE
HIGH	docs/security-scanner.md	80	export MCP_SCANNER_LLM_API_KEY=sk-your-api-key	CODE
HIGH	docs/security-scanner.md	653	echo "MCP_SCANNER_LLM_API_KEY=sk-your-api-key" >> .env	CODE
HIGH	docs/anthropic-registry-import.md	155	SMITHERY_API_KEY=your-api-key-here	CODE
HIGH	cli/scan_all_servers.py	492	export MCP_SCANNER_LLM_API_KEY=sk-your-api-key	CODE

Synthetic Comment Markers4 hits · 28 pts

Severity	File	Line	Snippet	Context
HIGH	docs/explore-agentic/glossary/guardian-agent.md	16	The phrase is Gartner's, but the pattern is older. Every production agent deployment eventually grows a second agent (or	CODE
HIGH	credentials-provider/add_noauth_services.py	102	# Skip server_state.json as requested	COMMENT
HIGH	.github/workflows/create_release.yaml	20	# ── AI-generated GitHub Release via github/copilot-release-notes ─────────────	COMMENT
HIGH	registry/src/registry/health/service.py	614	# Skip health checks for stdio transport (as requested)	COMMENT

Over-Commented Block24 hits · 24 pts

Severity	File	Line	Snippet	Context
LOW	registry-pkgs/src/registry_pkgs/scopes.yml	1	# Pure new RBAC scopes for registry server/agent/federation APIs.	COMMENT
LOW	registry-pkgs/src/registry_pkgs/models/workflow.py	221	# into this node's prompt at runtime. The compiler wraps the executor with	COMMENT
LOW	…y-pkgs/src/registry_pkgs/models/extended_mcp_server.py	141	"author": ObjectId("..."),	COMMENT
LOW	docs/complete-setup-guide.md	361		COMMENT
LOW	docs/complete-setup-guide.md	401	# - Save credentials to .oauth-tokens/keycloak-client-secrets.txt	COMMENT
LOW	docs/complete-setup-guide.md	461	# Note: The script does not display the credentials at the end.	COMMENT
LOW	docs/complete-setup-guide.md	481		COMMENT
LOW	docs/complete-setup-guide.md	541	# Activate the virtual environment if not already active	COMMENT
LOW	docs/complete-setup-guide.md	621		COMMENT
LOW	docs/quick-start.md	81		COMMENT
LOW	docs/macos-setup-guide.md	201	2. Go to Settings > Resources > Virtual file shares	COMMENT
LOW	docs/keycloak-integration.md	781	```bash	COMMENT
LOW	docs/dynamic-tool-discovery.md	81		COMMENT
LOW	cli/import_server_list.txt	1	# MCP Servers to Import from Anthropic Registry	COMMENT
LOW	cli/import_from_anthropic_registry.sh	1	#!/bin/bash	COMMENT
LOW	auth-server/src/auth_server/oauth2_providers.yml	41	# client_id: "${GITHUB_CLIENT_ID}"	COMMENT
LOW	auth-server/src/auth_server/oauth2_providers.yml	61	# token_url: "https://oauth2.googleapis.com/token"	COMMENT
LOW	credentials-provider/generate_creds.sh	1	#!/bin/bash	COMMENT
LOW	registry/tests/unit/auth/test_auth_routes.py	141	assert providers == []	COMMENT
LOW	registry/tests/unit/auth/test_auth_routes.py	161	# }	COMMENT
LOW	registry/src/registry/health/service.py	661	if response.status_code in [401, 403]:	COMMENT
LOW	…istry/src/registry/services/search/external_service.py	281		COMMENT
LOW	api/get-m2m-token.sh	1	#!/bin/bash	COMMENT
LOW	keycloak/setup/disable-ssl.sh	1	#!/bin/bash	COMMENT

AI Slop Vocabulary8 hits · 21 pts

Severity	File	Line	Snippet	Context
LOW⚡	registry-pkgs/tests/unit/test_scopes.py	272	# If tmp_path is not under cwd, just use the absolute path for this test	COMMENT
MEDIUM	frontend/src/components/WorkflowCanvas/convert.ts	692	// A more robust check is to just see if the backend provided any `position` object at all on the first node.	COMMENT
MEDIUM	cli/mcp_security_scanner.py	147	# This is more robust than just finding first '[' or '{'	COMMENT
MEDIUM	credentials-provider/oauth/oauth_providers.yaml	18	# Expanded comprehensive scopes for full Atlassian access	COMMENT
LOW⚡	registry/src/registry/api/v1/mcp/connection_router.py	196	# For now, just return OAuth token status	COMMENT
MEDIUM	registry/src/registry/services/server_service.py	1358	# This is a more comprehensive health check than just HTTP GET	COMMENT
LOW	registry/src/registry/services/server_service.py	834	# If capabilities retrieval fails, just use empty capabilities	COMMENT
MEDIUM	api/registry_management.py	385	# If any parameters are missing, raise comprehensive error	COMMENT

Fake / Example Data16 hits · 16 pts

Severity	File	Line	Snippet	Context
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	238	subject="user@example.com",	CODE
LOW⚡	registry-pkgs/tests/unit/test_jwt_utils.py	243	assert payload["sub"] == "user@example.com"	CODE
LOW	docs/registry-auth-detailed.md	1946	log_auth_event('OAUTH2_LOGIN_SUCCESS', username='user@example.com',	CODE
LOW	docs/api-reference.md	1002	"email": "admin@example.com",	CODE
LOW	docs/design/mcp_db_persistence_design.md	1780	"email": "user@example.com",	CODE
LOW	docs/design/mcp_db_persistence_design.md	1801	"email": "user@example.com",	CODE
LOW	docs/design/workflow-api-design.md	701	"customerName": "John Doe",	CODE
LOW	docs/design/workflow-api-design.md	716	"customerName": "John Doe",	CODE
LOW	cli/import_from_anthropic_registry.sh	134	if [ -z "$MCP_SCANNER_LLM_API_KEY" ] \|\| [[ "$MCP_SCANNER_LLM_API_KEY" == "your_" ]] \|\| [[ "$MCP_SCANNER_LLM_API_KE	CODE
LOW	auth-server/tests/integration/test_oauth_flow_routes.py	176	"contacts": ["admin@example.com"],	CODE
LOW	scripts/seed_mongodb.py	92	"email": "admin@example.com",	CODE
LOW	registry/tests/unit/auth/test_auth_routes.py	314	"email": "test@test.com",	CODE
LOW	registry/tests/unit/auth/test_auth_routes.py	536	"email": "admin@example.com",	CODE
LOW	registry/tests/unit/auth/test_auth_routes.py	558	assert call_kwargs["email"] == "admin@example.com"	CODE
LOW	registry/tests/unit/auth/test_auth_routes.py	573	"email": "admin@example.com",	CODE
LOW	keycloak/import/realm-config.json	234	"email": "admin@example.com",	CODE

AI Structural Patterns15 hits · 12 pts

Severity	File	Line	Context
LOW	…-pkgs/src/registry_pkgs/testing/federation_metadata.py	39	CODE
LOW	auth-server/src/auth_server/providers/entra.py	29	CODE
LOW	auth-server/src/auth_server/routes/oauth_flow.py	1049	CODE
LOW	auth-server/src/auth_server/routes/oauth_flow.py	1347	CODE
LOW	registry/tests/unit/api/test_oauth_router.py	97	CODE
LOW	registry/tests/unit/api/test_connection_router.py	90	CODE
LOW	registry/src/registry/utils/crypto_utils.py	515	CODE
LOW	registry/src/registry/api/redirect_routes.py	231	CODE
LOW	registry/src/registry/api/v1/server/server_routes.py	87	CODE
LOW	registry/src/registry/api/v1/mcp/oauth_router.py	304	CODE
LOW	registry/src/registry/api/v1/mcp/oauth_router.py	798	CODE
LOW	registry/src/registry/api/v1/mcp/oauth_router.py	1068	CODE
LOW	…ry/src/registry/api/v1/federation/federation_routes.py	333	CODE
LOW	…istry/src/registry/services/federation_crud_service.py	129	CODE
LOW	registry/src/registry/services/workflow_service.py	608	CODE

Example Usage Blocks4 hits · 6 pts

Severity	File	Line	Snippet	Context
LOW	docker/registry-entrypoint.sh	5	# Usage:	COMMENT
LOW	cli/import_from_anthropic_registry.sh	8	# Usage:	COMMENT
LOW	credentials-provider/generate_creds.sh	15	# Usage:	COMMENT
LOW	keycloak/setup/disable-ssl.sh	6	# Usage:	COMMENT

Overly Generic Function Names2 hits · 2 pts

Severity	File	Line	Snippet	Context
LOW	registry-pkgs/tests/unit/telemetry/test_decorators.py	220	def my_function():	CODE
LOW	…istry-pkgs/tests/unit/telemetry/test_metrics_client.py	140	def my_function():	CODE

Analysis Overview

What These Metrics Mean

Score History

Severity Breakdown

Directory Score Breakdown

Pattern Findings