TAR Engine

Audit AI skill safety before you ship. Static, semantic, adversarial, supply chain scans.

stdiocommunityservice

Package Details

Transportstdio
Runtimeuvx

Package Arguments

Positional
Position 0
tar-engineInstall the tar-engine wheel that provides the tar-engine-mcp executable.
Position 1
tar-engine-mcpRun the MCP server entry point exposed by the tar-engine wheel.

Environment Variables

TAR_ENGINE_URL

Override the audit backend. Default is the hosted playground at https://tarai.dev. Set to http://localhost:8765 (or your own tar-engine deployment) to self-host and keep SKILL.md content on your machine.

TAR_ENGINE_BYOK_OPENAI_KEY
Secret

OpenAI API key that unlocks the semantic LLM and adversarial prompt-fuzz layers. Static and supply-chain layers run without it.

TAR_ENGINE_BYOK_ANTHROPIC_KEY
Secret

Anthropic API key alternative to the OpenAI key for the semantic and adversarial layers.