Back to search
D
40 /100

@unclick/mcp-server

Author malamutemayhem
Scanned 48d ago

MCP server for the UnClick tool marketplace — lets AI agents discover and use every UnClick tool

npm

Versions

No versions found.

Trust breakdown

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 19

autopilot_record_event
annotations: none low

Writes one sanitized AutoPilot proof event to the tenant ledger. Use this for claim, check, merge, close, proof, and blocker receipts before claiming zero-touch proof.

get_startup_context
annotations: none low

Load persistent memory at session start. Returns business context (standing rules), recent session summaries, and hot extracted facts. Call this FIRST in every new session.

num_sessions number
search_memory
annotations: none low

Full-text search across conversation logs. Returns matching results ranked by relevance.

query string max_results number
search_facts
annotations: none low

Search extracted facts (Layer 4). Only returns active (non-superseded) facts.

query string
search_library
annotations: none low

Search the Knowledge Library (Layer 2) for versioned reference documents.

query string
get_library_doc
annotations: none low

Get the full content of a Knowledge Library document by its slug. Returns the latest version.

slug string
list_library
annotations: none low

List all documents in the Knowledge Library. Returns slug, title, category, and last updated date for each.

write_session_summary
annotations: none low

Write a session summary at the end of a session. Critical for cross-session continuity. Include key decisions, open loops, and topics discussed.

summary string platform string session_id string duration_minutes number
add_fact
annotations: none low

Add a new extracted fact to memory. Facts are atomic, searchable pieces of knowledge. Examples:

fact string category string confidence number source_session_id string
supersede_fact
annotations: none low

Replace an outdated fact with a new version. The old fact is marked

old_fact_id string new_category string new_fact_text string new_confidence number
log_conversation
annotations: none low

Log a conversation exchange to the persistent conversation log (Layer 5). Use for important exchanges you want to be able to search later.

content string has_code boolean session_id string
store_code
annotations: none low

Store a code block in the code dump layer (Layer 6). Code is stored separately from conversations to keep search fast. Only loaded on demand.

code string filename string language string session_id string description string
get_business_context
annotations: none low

Get all business context entries (Layer 1). These are standing rules, client info, and preferences that are always relevant.

set_business_context
annotations: none low

Add or update a business context entry (Layer 1). Business context is always loaded at session start. Use for standing rules, preferences, and important reference info.

key string value string category string priority number
upsert_library_doc
annotations: none low

Create or update a Knowledge Library document (Layer 2). Documents are auto-versioned on update. Use for vendor profiles, client briefs, specs, CVs, etc.

slug string title string content string category string
manage_decay
annotations: none low

Run the memory decay manager. Promotes/demotes items between hot/warm/cold tiers based on access patterns. Run nightly or on-demand.

get_conversation_detail
annotations: none low

Retrieve the full conversation log for a specific session. Includes all messages in chronological order.

session_id string
embedding_state
annotations: none low

Inspect memory embedding backend state: disabled, local open-source, or OpenAI missing credentials/ready.

memory_status
annotations: none low

Get a quick overview of memory usage: storage mode (local/supabase), counts per layer, decay tier distribution.

Permissions 5

network Server uses network capabilities via: fetch(), urllib
medium
filesystem Server uses filesystem capabilities via: fs, fs sync ops, os, pathlib
low
shell Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
high
database Server uses database capabilities via: drizzle-orm
medium
env_vars Server uses env_vars capabilities via: os.environ, process.env
low

Scan Findings 132

low
Tool 'autopilot_record_event' has no annotations annotation_checker · 100%
low
Tool 'get_startup_context' has no annotations annotation_checker · 100%
low
Tool 'search_memory' has no annotations annotation_checker · 100%
low
Tool 'search_facts' has no annotations annotation_checker · 100%
low
Tool 'search_library' has no annotations annotation_checker · 100%
low
Tool 'get_library_doc' has no annotations annotation_checker · 100%
low
Tool 'list_library' has no annotations annotation_checker · 100%
low
Tool 'write_session_summary' has no annotations annotation_checker · 100%
low
Tool 'add_fact' has no annotations annotation_checker · 100%
low
Tool 'supersede_fact' has no annotations annotation_checker · 100%
low
Tool 'log_conversation' has no annotations annotation_checker · 100%
low
Tool 'store_code' has no annotations annotation_checker · 100%
low
Tool 'get_business_context' has no annotations annotation_checker · 100%
low
Tool 'set_business_context' has no annotations annotation_checker · 100%
low
Tool 'upsert_library_doc' has no annotations annotation_checker · 100%
low
Tool 'manage_decay' has no annotations annotation_checker · 100%
low
Tool 'get_conversation_detail' has no annotations annotation_checker · 100%
low
Tool 'embedding_state' has no annotations annotation_checker · 100%
low
Tool 'memory_status' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in malamutemayhem-unclick-2374b85/api/oauth-state.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 178 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.15.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.2.0 (GHSA-2883-xcg3-v3hh) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.2.0 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.2.0 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: pdfjs-dist@6.1.200 (GHSA-hq66-cqwq-w95j) dependency_analyzer · 95%
medium
Vulnerable dependency: brace-expansion@1.1.15 (GHSA-3jxr-9vmj-r5cp) dependency_analyzer · 95%
medium
Vulnerable dependency: brace-expansion@1.1.15 (GHSA-mh99-v99m-4gvg) dependency_analyzer · 95%
medium
Vulnerable dependency: brace-expansion@1.1.15 (GHSA-rgw5-rvv9-x895) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.4.2 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.4.2 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.9 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-54fx-42gc-7vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-79qm-7rj5-m7r9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-crvj-82cr-hjcx) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-g6gw-c38x-mqfc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-gqvv-2mrq-wpjv) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-hvrm-45r6-mjfj) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-w62v-xxxg-mg59) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-xgm2-5f3f-mvvc) dependency_analyzer · 95%
medium
Vulnerable dependency: csv-parse@6.2.1 (GHSA-8cw4-87c7-c6xx) dependency_analyzer · 95%
medium
Vulnerable dependency: nodemailer@9.0.1 (GHSA-2x7j-588g-ccc2) dependency_analyzer · 95%
medium
Vulnerable dependency: nodemailer@9.0.1 (GHSA-8m3c-c648-2xjj) dependency_analyzer · 95%
medium
Vulnerable dependency: nodemailer@9.0.1 (GHSA-cc9r-2j5m-2m83) dependency_analyzer · 95%
medium
Vulnerable dependency: nodemailer@9.0.1 (GHSA-wmmp-3585-3rmp) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@1.19.14 (GHSA-frvp-7c67-39w9) dependency_analyzer · 95%
medium
Vulnerable dependency: sharp@0.34.5 (GHSA-f88m-g3jw-g9cj) dependency_analyzer · 95%
medium
Vulnerable dependency: sharp@0.34.5 (GHSA-rgj7-g3m4-5g8c) dependency_analyzer · 95%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/api/memory-admin.ts:1180 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/api/memory-admin.ts:1381 entropy_analyzer · 75%
medium
High-entropy string (5.95 bits/char) in malamutemayhem-unclick-2374b85/packages/mcp-server/src/local-catalog-handlers.ts:1010 entropy_analyzer · 54%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/packages/mcp-server/src/local-catalog-handlers.ts:440 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/packages/mcp-server/src/local-tools.ts:117 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in malamutemayhem-unclick-2374b85/packages/mcp-server/src/hashgen-tool.test.ts:8 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in malamutemayhem-unclick-2374b85/packages/mcp-server/src/hashgen-tool.test.ts:18 entropy_analyzer · 70%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/packages/mcp-server/src/base64-tool.ts:18 entropy_analyzer · 75%
medium
High-entropy string (5.70 bits/char) in malamutemayhem-unclick-2374b85/packages/mcp-server/src/random-tool.ts:70 entropy_analyzer · 50%
medium
High-entropy string (6.46 bits/char) in malamutemayhem-unclick-2374b85/packages/mcp-server/src/random-tool.ts:73 entropy_analyzer · 61%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/packages/mcp-server/src/seat-bridge.ts:486 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/packages/mcp-server/src/fidelitycopy-tool.ts:424 entropy_analyzer · 75%
medium
High-entropy string (5.95 bits/char) in malamutemayhem-unclick-2374b85/packages/mcp-server/src/passwordgen-tool.ts:15 entropy_analyzer · 54%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/api/lib/git-proxy.ts:10 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/api/lib/crypto-helpers.ts:179 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/api/lib/crypto-helpers.ts:180 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/api/lib/crypto-helpers.ts:181 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/api/lib/crypto-helpers.test.ts:97 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/api/lib/crypto-helpers.test.ts:129 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in malamutemayhem-unclick-2374b85/apps/jobsmith/src/lib/cvChecklistSources.ts:35 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in malamutemayhem-unclick-2374b85/apps/jobsmith/src/lib/cvChecklistSources.ts:45 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in malamutemayhem-unclick-2374b85/apps/jobsmith/src/lib/cvChecklistSources.ts:55 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in malamutemayhem-unclick-2374b85/apps/jobsmith/src/lib/cvChecklistSources.ts:65 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in malamutemayhem-unclick-2374b85/apps/jobsmith/src/lib/cvChecklistSources.ts:75 entropy_analyzer · 70%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/apps/api/src/__tests__/image.test.ts:119 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/apps/api/src/__tests__/image.test.ts:155 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/apps/api/src/__tests__/image.test.ts:214 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/apps/api/src/__tests__/image.test.ts:269 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/apps/api/src/routes/encode.ts:73 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/apps/api/src/routes/secret.ts:50 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/apps/api/src/routes/secret.ts:51 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/apps/api/src/routes/secret.ts:52 entropy_analyzer · 75%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/apps/api/src/routes/secret.ts:54 entropy_analyzer · 75%
medium
High-entropy string (5.95 bits/char) in malamutemayhem-unclick-2374b85/apps/api/src/routes/shorten.ts:11 entropy_analyzer · 54%
medium
Buffer.from base64 in malamutemayhem-unclick-2374b85/apps/api/src/routes/image.ts:90 entropy_analyzer · 75%
medium
High-entropy string (5.95 bits/char) in malamutemayhem-unclick-2374b85/apps/api/src/routes/random.ts:79 entropy_analyzer · 54%
info
package.json metadata manifest_parser · 100%
info
Tool: autopilot_record_event manifest_parser · 75%
info
Tool: get_startup_context manifest_parser · 70%
info
Tool: search_memory manifest_parser · 70%
info
Tool: search_facts manifest_parser · 70%
info
Tool: search_library manifest_parser · 70%
info
Tool: get_library_doc manifest_parser · 70%
info
Tool: list_library manifest_parser · 70%
info
Tool: write_session_summary manifest_parser · 70%
info
Tool: add_fact manifest_parser · 70%
info
Tool: supersede_fact manifest_parser · 70%
info
Tool: log_conversation manifest_parser · 70%
info
Tool: store_code manifest_parser · 70%
info
Tool: get_business_context manifest_parser · 70%
info
Tool: set_business_context manifest_parser · 70%
info
Tool: upsert_library_doc manifest_parser · 70%
info
Tool: manage_decay manifest_parser · 70%
info
Tool: get_conversation_detail manifest_parser · 70%
info
Tool: embedding_state manifest_parser · 70%
info
Tool: memory_status manifest_parser · 70%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (646) manifest_parser · 80%
high
High-risk OAuth scope: https://www.googleapis.com/auth/drive oauth_scope_analyzer · 80%
high
High-risk OAuth scope: https://www.googleapis.com/auth/calendar oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1340 components sbom_generator · 100%
high
Authorization Bearer Token found in malamutemayhem-unclick-2374b85/scripts/check-app-connection-readiness.mjs secret_scanner · 70%
critical
AWS Access Key ID found in malamutemayhem-unclick-2374b85/api/lib/xgate/gates/secret-gate.ts secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%