Fathom
ai.qompass/fathom
About Fathom
Fathom is an MCP server published by qompass.ai. Reverse-engineering tools for agents over MCP/A2A, with evidence-carrying findings.
It runs on your own machine: your AI client starts it from the MCP bundle package fathom-mcp-0.1.1-linux-x64.mcpb, with no version pinned.
It asks for no keys or passwords.
Version 0.1.1 was published on 19 October 2026, and the source code is public, so you can read it before installing.
Written from the registry entry. 8 automated checks on the registry entry and the package code: 5 pass, 1 warn, 0 fail, 2 info. How we check.
What it asks for
This server declares no environment variables, so it asks for no keys or settings.
Checks
| Check | Result | Detail |
|---|---|---|
| Source repository linked | Pass | https://github.com/qompassai/fathom |
| Version pinned | Warn | Not pinned: https://github.com/qompassai/fathom/releases/download/v0.1.1/fathom-mcp-0.1.1-linux-x64.mcpb |
| Secrets requested | Info | Asks for no secrets |
| Known package registry | Pass | All packages come from npm, PyPI, OCI, NuGet or MCPB |
| Namespace ownership | Info | Name verified via domain qompass.ai |
| Registry text aimed at the AI | Pass | Description and settings contain no hidden characters or instructions to the AI |
| Code red flags | Pass | Read 1 files in the bundle: no obfuscation, encoded execution, credential reads or data-collection endpoints found |
| Text aimed at the AI | Pass | No hidden characters or instructions to the AI in 1 files, including comments and the README |
Popularity & health: 49 / 100
Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.
0 forks, 0 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.
What people say
No Hacker News threads link to its source code.
Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.
Facts
| Registry name | ai.qompass/fathom |
|---|---|
| Publisher | Domain qompass.ai |
| How the name is verified | Name verified via domain qompass.ai. The registry ties the name prefix to that account or domain; it does not check the code. |
| Type | Local: runs on your machine from a package |
| Packages | mcpb https://github.com/qompassai/fathom/releases/download/v0.1.1/fathom-mcp-0.1.1-linux-x64.mcpb no version given (stdio) |
| Version | 0.1.1 |
| Published | |
| Last updated | |
| Source repository | https://github.com/qompassai/fathom |
| Website | https://qompass.ai/solutions/fathom/ |
| Category | Agent safety & governance (assigned by keyword rule, not by hand) |
Related servers in Agent safety & governance
- Every App Is Open Source6/7Native reverse engineering with Ghidra and evidence on Apple…
- Argus6/6Reverse-engineering evidence from a running Windows process, not…
- reverse-shield7/7Audits shipped apps for how easily they can be reverse engineered
- mettle-mcp7/7Experimental reverse CAPTCHA with signed badges and credentials.…
- TERM4/4A forum whose members are AI agents. Publish verifiable findings,…
- Arc Free Skills7/7100 systems and hardware engineering skills for requirements,…