# Nittim MCP server

Source: https://glimind.com/server/mcp-registry%2Fcom.nittim%2Fnittim
Registry id: `mcp-registry/com.nittim/nittim`
Status: live (checked 2026-10-27T16:07:59.473Z)

## Verdict

Nittim MCP server answered 99.97% of Glimind's liveness checks over 30 days, better than 38% of MCP servers, with 427 ms median handshake and 1 outage in 90 days. Its agent-readiness grade is A (96/100) across 15 tools, costing an agent about 6,297 tokens to load. Checked every few minutes; no tool is ever called.

## Measurements (30 days)

| Metric | Value | Better than |
|---|---|---|
| Uptime, 30 days | 99.97% | 38% of MCP servers |
| Median handshake latency | 427 ms | 50% of MCP servers |
| p95 handshake latency | 2581 ms | — |
| Checks in 30 days | 4,993 | — |
| Outages, 90 days | 1 | — |
| Median recovery | 7 min | — |
| Agent-readiness score | 96/100 (A) | 82% of MCP servers |
| Tools | 15 | — |
| Tool-list size for an agent | ~6,297 tokens | 35% of MCP servers |
| Days observed | 29 | — |

## Install

```json
{
  "mcpServers": {
    "nittim-mcp-server": {
      "type": "http",
      "url": "https://nittim.com/api/mcp"
    }
  }
}
```

Claude Code:

```sh
claude mcp add --transport http nittim-mcp-server https://nittim.com/api/mcp
```

## Tools (19)

- `audit_repo`: Paid nittim AI audit of a GitHub repository: one structured pass over the highest-signal source; the only tool here that returns scores and a verdict. Answers w
- `audit_source`: Paid nittim AI audit of source files you post, for a project with no GitHub remote. Send SOURCE files, not build output — no node_modules or dist. On nittim's o
- `describe_protocol`: How this server works, in full: how a paid call quotes and charges, the two audit tiers, the Nittim Loop and its reward rules and caps, and dispute guidance. Fr
- `dispute_finding`: NEEDS A KEY: mint one at https://nittim.com/keys. Records that a finding from a prior audit is wrong (stance:'dispute') or genuinely real (stance:'confirm'), ba
- `estimate_audit`: Price an audit before buying one: give a GitHub repository URL, or a manifest of paths and byte sizes — no file content, nothing uploaded — and get the tier (Au
- `flag_finding`: Flag a finding that looks wrong for a person to review
- `get_audit`: Retrieve a nittim audit by its UUID, at any stage: the finished markdown digest (verdict, scores, top findings) plus its report link, or — no error, nothing cha
- `get_loop`: Returns the current text of nittim's free, tool-agnostic self-review checklist — the same content served at https://nittim.com/selfcheck.md. Reviews a codebase 
- `get_second_opinion`: Get a second opinion on any piece of work from an independent judge
- `judge_output`: Run a cross-vendor judge model over any text you post: code, a document, another model's output, anything. Returns findings + rationale ONLY — never a score, ne
- `list_modules`: List every audit module nittim can run: the two deterministic scanners (secret scan + OSV dependency CVE check) and the LLM-reasoned checks. Returns each module
- `mint_key`: For a client that cannot sign in over OAuth: a short, one-time link to https://nittim.com/keys/claim/<token>. Opening it, signed in, mints a real nittim API key
- `preview_upload`: NEEDS A KEY: mint one at https://nittim.com/keys. Send the paths and sizes of the files you would post — no content leaves your machine to ask this — and get ba
- `price_audit`: Price a GitHub repo or a set of files before running an audit
- `report_loop`: NEEDS A KEY: mint one at https://nittim.com/keys. Records anonymised counts from a Nittim Loop the developer has finished and agreed to send: pass numbers, a fi
- `run_audit`: Run a full audit and get back a verdict with security, privacy, reliability, and architecture findings
- `run_module`: Run ONE nittim audit module against a GitHub repository, never producing scores or a verdict. The two deterministic modules (secret-scan, dependency-cve) return
- `scan_source`: Free nittim look: committed secrets and known CVEs over posted source files. No account, no key, no nittim credits. Hard evidence only: never scores, never a pr
- `verify_fix`: NEEDS A KEY: mint one at https://nittim.com/keys. Re-checks ONE finding from a finished audit against the repository's current code, or a commit named in the ca

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.