Entire vs GitMCP

Entire 83

Read as a hosted service with an open-source client. CLI 0.12.2 shipped on 26 October 2026, the day of the forge launch, and is still the newest stable release on 1 November, with nightlies to 31 October (30). Sixteen stable CLI releases since 12 August 2026 (0.10.0 to 0.12.2), plus nightlies and weekly Dispatch posts (20). The changelog thanks outside contributors by release and Discord and GitHub issues are the support channels, but the issue tracker couldn't be read through our GitHub access (13 of 25). Not in the official MCP registry (a search for "entire" returns only unrelated servers). An official Go SDK is documented with a services table, but its version couldn't be read from a permitted source (10 of 15). The CLI repository runs CI, end-to-end, Windows, CodeQL, govulncheck and licence-check workflows (10).

GitMCP 8

The last commit on main is 8 May 2026, 182 days before this check, and there are no tags or releases (0). Nothing in the last 90 days (0). Since May, outside issues and pull requests (#244 to #271, among them the security report #249 and fixes #256, #267 and #250) have gone without a maintainer reply or merge (3). Not found in the official MCP registry under any namespace (0). A run-tests workflow with vitest and a Playwright end-to-end workflow exist on push and pull request (5). 0 + 0 + 3 + 0 + 5 = 8.

Entire 84

The editorial half. A closed hosted service under dated terms naming Entire Inc and Delaware law, with the previous version linked; the CLI, entire-graph, entire-brain and ForgeMark are MIT (20 of 30). The privacy policy gives retention periods (repository data while the repository exists, accounts up to 24 months after closure), a DPA and a subprocessor list are public, the terms rule out training general models on customer content, and the security docs list every place the CLI writes or sends data. The region lists disagree across the regions page, the launch post and the repositories guide (25 of 30). No deprecation policy for the API, which the guide says may change without notice; CLI removals and deprecations are dated in the changelog, some with warnings first (6 of 20). Subprocessors with processing and corporate locations, hosting regions with data-centre cities, and CLI telemetry disclosed field by field with three opt-outs (20).

GitMCP 36

Apache-2.0, with the whole service in the public repository (30). The README says the service stores no personal data or queries and keeps no repository content permanently, but there is no privacy policy or terms page (8). No deprecation policy or dated notices; SSE was removed on 8 May 2026 while the README still shows an SSE config for VS Code (0). The hosting stack (Cloudflare Workers, Workers AI, Vectorize, an Analytics Engine dataset) is visible in wrangler.jsonc but no processor is named for users, and invocation logs were turned off on 8 May (5). 30 + 8 + 0 + 5 = 43.

Entire 61

Graded with the hosted lines, on the forge an agent reaches through the CLI and the HTTP API. A public status page at status.entire.io on incident.io, with components for the website, control plane, GitHub mirroring and each region's Git service and API, and 90 days of history (20). Three incidents in the 90 days to 1 November 2026, all degraded performance and none a full outage (the 29 July mirror-sync incident has left the window, and the feed shows nothing after 20 October). India metadata delays on 14 and 15 August (about 9 hours 40 minutes), website errors on 25 September (6 minutes), and a configuration error on 20 October that added unrequested non-blocking checks and a link to pull requests on some mirrored GitHub repositories, reverted the same day (20). No rate limit is published with numbers; the terms only refer to "any rate or usage limits we set" (0). The OpenAPI contracts document 429 on 277 of 309 region operations, with Retry-After and "retry after it with bounded backoff", and a required Idempotency-Key on run creation (15). No SLA was found in the terms or docs (0). The forge is called available to every developer, but CI integrations are a public preview, entire runner is experimental, the region API is version 0.1.0 and the API guide says endpoints may change without notice (6 of 10).

GitMCP 15

Scored as a hosted MCP server. No status page found (0) and so no readable incident history (5). The maintainer confirmed on issue #245 that gitmcp.io was throttled by Cloudflare for a few hours in May 2026, outside the 90-day window. No rate limits are documented (0) and nothing on 429 or retries (0). No SLA (0). The service is live with no beta or preview label (10). 0 + 5 + 0 + 0 + 0 + 10 = 15.

Entire 84

Two public OpenAPI 3.1 contracts, 309 operations on the region API and 140 on Core, linked from llms.txt (25). llms.txt, a 664 KB llms-full.txt and a Markdown copy of every docs page, though the API guide pages aren't in llms.txt or the sitemap (10). Every region operation has a summary and 198 of 309 a description; on Core 32 of 140 have a description. The CLI reference says when to use each command and entire agent-help is generated from the installed binary (14 of 20). 3,632 of 3,704 region schema properties are typed, 579 of 628 schemas list required fields, 128 enums, length limits and patterns, nine free-form objects (13 of 15). Error responses are listed on nearly every operation, many with specific descriptions, but the error body is a single error string and only two operations carry examples; the CLI docs are full of worked commands (9 of 15). A dated CLI changelog with a "Breaking changes and migrations" heading per release, weekly Dispatch posts and a versioned /api/v1 path, but no API changelog of its own (13 of 15).

GitMCP 56

Every tool registers a zod input schema, so inputs are typed JSON Schema (25). There is no llms.txt for GitMCP itself; the README on GitHub is the only Markdown documentation (5). Descriptions are generated per repository and say what each tool reads and when it helps ("Useful for general questions. Always call this tool first if asked about owner/repo"), but not when to avoid one (12). Inputs are a query string and an optional page number, with no enums or constraints beyond types (9). The README has three worked examples and no documented error responses (5). No versioning, tags, releases or changelog (0). 25 + 5 + 12 + 9 + 5 + 0 = 56.

Entire 66

OAuth authorisation code with PKCE S256 and the RFC 8628 device flow, short-lived JWTs (8 hours for a login token, 30 minutes by default for a service account's workload-identity session) and tokens in the OS keyring. Service accounts take grants on one repository or project. OAuth scopes are only openid and offline_access, so a user token carries all of that user's access, and long-lived API keys don't exist. No credential travels in a query string (24 of 30). Repository roles reader, writer and admin; gates for human approval, agent findings, freshness and checks; --force needs bypass permission, a --yes without a terminal, and is recorded on the trail. The MCP server is read-only (15 of 20). Review agents run in Daytona and E2B sandboxes, transcripts are redacted for secrets (and for personal data when enabled) before they are written, and entire investigate requires --allow-untrusted-seed because GitHub issue text is "attacker-influenced". No general guidance on injected content in transcripts or findings (7 of 15). Core's GET /audit lists the caller's recent audit events and trail timelines record approvals and bypasses; no organisation-wide audit log was found (8 of 15). A valid security.txt to 27 March 2027 and a disclosure policy with a 48-hour acknowledgement and 90-day target for criticals, CodeQL and govulncheck in CI. No bug bounty, and no SOC 2 or ISO 27001 for Entire itself; the DPA cites only its providers' certifications. GitHub advisories couldn't be read (12 of 20).

GitMCP 42

No credentials at all, so nothing to leak or scope (20). Every tool is a read of public content (15). Repository docs, code and fetched URLs reach the model unmarked, and fetch_generic_url_content fetches any absolute URL a document mentions, with no prompt-injection guidance in the README (2). No per-call visibility for the caller (0). SECURITY.md routes reports to a Google Form, but the server-side request forgery report in issue #249 (12 June 2026) and its proposed fix #256 have had no maintainer reply in almost five months. No certifications or bounty (5). 20 + 15 + 2 + 0 + 5 = 42.

Entire 40

No x402, MPP or L402, and no 402 response in either contract (0). Hosting and the CLI are free, and Agents usage is priced per million tokens at each listed model's provider rate in the public billing docs (20). Everything except Agents is free with no card. The one-time $100 Agents trial credit now needs a verified card on file, and on 1 November the billing docs said new trials were "temporarily paused"; the free functions alone hold the line (20). A person signs in with GitHub or Google in a browser, or approves a device code; there is no keyless or programmatic sign-up (0).

GitMCP 60

Nothing to buy, so no payment protocol (0). Free, stated in the README FAQ (20). No account or card (20). An agent connects with a URL and no signup or key (20). 0 + 20 + 20 + 20 = 60.