Pugi

Install

Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install connector/pugi-io-pugi

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

5 read · 1 write · 0 delete

Secrets

1 (API keys, tokens or passwords)

Install scripts

Nothing to install (hosted)

Runs as

Hosted (remote endpoint)

Tools (6)

As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• buy_credits_linkGet a link to add creditread-only

  Returns a card checkout link for this account. A person opens it and pays there. This tool never charges anything by itself. Tax, where it applies, is added at checkout.

• catalog_searchSearch the Pugi catalogueread-only

  Free. Searches the public Pugi catalogue of published sites and apps people built with Pugi. Filter by words in the title or description, tags (a card must carry all of them) and one category. Each result has a title, a short description, tags, a preview image, its public page on pugi.io and a start_from_this_url: the Pugi console with a brief for a new project like it (a person signs in there; it does not copy the code).

• get_balanceGet credit balanceread-only

  Shows the credit balance of this account in USD, what this key spent today, its daily spend cap, and the price of each tool. Paid tools spend this balance; when it runs out, ask a person to add credit with buy_credits_link, or pay with add_credit (a business purchase).

• publish_statusGet publish statusread-only

  Lists the apps this account has published, newest first, with their status and live address. Pass project_id to see one project.

• scan_repoCheck a GitHub repository for security issues

  Checks a public GitHub repository branch for leaked secrets, vulnerable or malicious dependencies and risky code, and returns each finding with its severity, rule, file and line (or package) and a short fix hint, plus a summary. No code is run. $1 from prepaid credit, charged only when the check finishes; a failed check costs nothing. Pass an idempotency_key: a check can take a few minutes, and when the answer is state "running", call again with the same idempotency_key and repo_url to collect the result (never charged twice). Private repositories, other hosts, tags and commit SHAs are not sup…

• scan_urlCheck a website for security issuesread-only

  A free, passive, read-only check of a public website: HTTPS and the redirect to it, five security headers, cookie flags, and the page's own scripts read for leaked keys. Returns a grade from A+ to F, counts by severity and the most serious finding. 10 checks a day per key. It is not a pentest and does not prove a site is secure.

Signals

Stars

0

Forks

0

Open issues

0

Last commit

Oct 24, 2026 (7 days ago)

Last release

Oct 24, 2026 (7 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name

io.pugi/pugi

Version

0.1.0

Auth

Bearer token

License

MIT

Repository

github.com/pugi-io/skills

Website

pugi.io/agents.md

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql