AgentIndex icon
AgentIndex
repo-forensics logo
repo-forensics
★ 195
vs
toolhive logo
toolhive
★ 2.3k

repo-forensics vs toolhive

repo-forensics: Repo Forensics audits untrusted repositories, agent skills, plugins and MCP servers before they reach your agent, running 28 scanners and a correlation engine locally with zero dependencies and no telemetry. Installed as a plugin, it also watches installs and updates and blocks known-malicious packages.; toolhive: ToolHive simplifies and secures the deployment of Model Context Protocol (MCP) servers, offering a comprehensive solution for managing AI toolchains in production. It provides a modular architecture with a Gateway, Registry Server, Runtime, and Portal for instant, secure, and scalable operations across various environments.

01

TL;DR

repo-forensics logo
repo-forensicsSecurity & Safety · ★ 195

Vet an MCP server or Claude Code skill before installing it

Read repo-forensics full review →
toolhive logo
toolhiveSecurity & Safety · ★ 2.3k
When to choose:
  • You want MCP servers to run in isolated containers with scoped permissions and managed secrets, on Docker, Podman or Kubernetes.
  • You want the same tooling from a laptop (desktop app or CLI) to a Kubernetes Operator.
  • Your team needs a registry with provenance verification, an SSO-capable gateway and audit logging.
When to skip:
  • You just want to run one MCP server: it needs Docker, Podman or Kubernetes and is heavier than starting the server directly.
  • You want a single component: the Runtime, Registry, Gateway and Portal take time to understand, and parts live in separate repositories.
  • You expect container isolation to replace reviewing what each server can reach.
Read toolhive full review →
02

Side-by-Side Comparison

Field
repo-forensics logorepo-forensics
toolhive logotoolhive
Category
Security & Safety
Security & Safety
Stars
★ 195
★ 2.3k
License
NOASSERTION
Apache-2.0
Install Command
git clone https://github.com/alexgreensh/repo-forensics.git
git clone https://github.com/stacklok/toolhive.git
Updated
1d ago
1d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
agent-security, agent-skill, agent-skills
Model Context Protocol, Server Management, Security
03

Features

repo-forensics logorepo-forensics
0128 parallel scanners covering prompt injection, supply chain, credential theft and more
02Correlation engine with 41 rules to detect compound threats
03Fully local: no cloud API, no telemetry, zero dependencies
04Monitors git pull, npm/pnpm/uv updates and blocks known-malicious packages
05Exit codes for CI and SARIF 2.1.0 output for GitHub Security
toolhive logotoolhive
01Instant deployment with one click or command using Docker or Kubernetes.
02Secure by default, running servers in isolated containers with managed secrets.
03Works everywhere, available as a desktop app, web app, CLI, and Kubernetes Operator.
04Seamless integration with popular AI clients like GitHub Copilot, Cursor, and VS Code.
05Modular architecture comprising Gateway, Registry Server, Runtime, and Portal for comprehensive management.
04

Use Cases

repo-forensics logorepo-forensics
↳Vet an MCP server or Claude Code skill before installing it
↳Check existing projects for traces of known supply chain attacks
↳Gate pull requests in CI on agent-ecosystem security findings
toolhive logotoolhive
↳Individual developers quickly deploying and testing MCP servers locally using the desktop UI or CLI.
↳Organizations centrally managing and orchestrating a fleet of MCP servers in Kubernetes for production and scale.
↳Enterprises building hybrid solutions, integrating MCP servers into custom internal tools and agentic workflows with unified access controls.
05

Best For

repo-forensics logorepo-forensics
—
toolhive logotoolhive
EssentialTrending
FAQ

FAQ

What is the difference between repo-forensics and toolhive?
Both repo-forensics and toolhive are in the Security & Safety category. repo-forensics has 195 stars, while toolhive has 2.3k stars.
Which is better, repo-forensics or toolhive?
The best choice depends on your use case. Choose repo-forensics if Vet an MCP server or Claude Code skill before installing it, and toolhive if Individual developers quickly deploying and testing MCP servers locally using the desktop UI or CLI..
Is repo-forensics free or open source?
Yes, repo-forensics is open source on GitHub (NOASSERTION).
Is toolhive free or open source?
Yes, toolhive is open source on GitHub (Apache-2.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to repo-forensics →Alternatives to toolhive →repo-forensics details →toolhive details →