Orca Bridge

Constrained MCP bridge: let an outside assistant (Grok Bot, Cursor, Claude Code, Codex) send typed requests to an allowlisted Orca coordinator and read its replies.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 62/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
23
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
62/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/18 matched
No executable scripts0/111 script file(s) of 23
Pinned source1/1commit/SHA-256 recorded
Named author1/1ogarciarevett
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • reads environment variables (where API keys live) in orca_bridge/bridge.py: "… if path is None: root = Path(os.environ.get('XDG_CONFIG_HOME', Path.home() / '.…"
  • reads environment variables (where API keys live) in orca_bridge/http.py: "… if path is None: path = Path(os.environ.get('XDG_CONFIG_HOME', Path.home() / '.…"
  • reads environment variables (where API keys live) in tests/test_board.py: "…': 'synthetic'} with patch.dict(os.environ, service), \ patch('orc…"
  • reads environment variables (where API keys live) in tests/test_bridge.py: "…defaults(self): with patch.dict(os.environ, {'XDG_CONFIG_HOME': str(self.root)}): …"
Content SHA-256
58d114569babe347…
Commit
db4c58e01a
Files
.gitignore
CONTRIBUTING.md
LICENSE
README.md
config.example.json
mcp.json
+17

About

Author
ogarciarevett ↗
Listed on
github ↗
Category (approx.)
agentops
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill