Affine (DAWNCR0W) MCP Server
affine-mcp-server
npm
v3.5.1
Source verified
Published by dawncr0w — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.
Model Context Protocol server for AFFiNE - enables AI assistants to interact with AFFiNE workspaces, documents, and collaboration features.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 3 = 97. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 97
Each tool and what it can reach — statically extracted from the published source.
create_commentnetwork egressupdate_commentnetwork egressadd_database_columnno sensitive capabilityadd_database_rowno sensitive capabilityadd_doc_to_collectionno sensitive capabilityadd_organize_linkno sensitive capabilityadd_surface_elementno sensitive capabilityadd_tag_to_docno sensitive capabilityanalyze_doc_fidelityno sensitive capabilityappend_blockno sensitive capability
Show 87 more tools ↓
append_markdownno sensitive capabilityappend_semantic_sectionno sensitive capabilitycleanup_blobsno sensitive capabilityclear_doc_propertyno sensitive capabilitycompose_database_from_intentno sensitive capabilitycreate_collectionno sensitive capabilitycreate_custom_propertyno sensitive capabilitycreate_docno sensitive capabilitycreate_doc_from_markdownno sensitive capabilitycreate_folderno sensitive capabilitycreate_semantic_pageno sensitive capabilitycreate_tagno sensitive capabilitycreate_workspaceno sensitive capabilitycreate_workspace_blueprintno sensitive capabilitycurrent_userno sensitive capabilitydelete_blobno sensitive capabilitydelete_blockno sensitive capabilitydelete_collectionno sensitive capabilitydelete_commentno sensitive capabilitydelete_custom_propertyno sensitive capabilitydelete_database_rowno sensitive capabilitydelete_docno sensitive capabilitydelete_folderno sensitive capabilitydelete_organize_linkno sensitive capabilitydelete_surface_elementno sensitive capabilitydelete_tagno sensitive capabilitydelete_workspaceno sensitive capabilityexport_doc_markdownno sensitive capabilityexport_with_fidelity_reportno sensitive capabilityfind_doc_by_titleno sensitive capabilityget_capabilitiesno sensitive capabilityget_collectionno sensitive capabilityget_docno sensitive capabilityget_doc_iconno sensitive capabilityget_edgeless_canvasno sensitive capabilityget_folder_iconno sensitive capabilityget_orphan_docsno sensitive capabilityget_workspaceno sensitive capabilityinspect_template_structureno sensitive capabilityinstantiate_template_nativeno sensitive capabilitylist_childrenno sensitive capabilitylist_collectionsno sensitive capabilitylist_commentsno sensitive capabilitylist_doc_propertiesno sensitive capabilitylist_docsno sensitive capabilitylist_docs_by_tagno sensitive capabilitylist_historiesno sensitive capabilitylist_notificationsno sensitive capabilitylist_organize_nodesno sensitive capabilitylist_surface_elementsno sensitive capabilitylist_tagsno sensitive capabilitylist_workspace_treeno sensitive capabilitylist_workspacesno sensitive capabilitymove_blockno sensitive capabilitymove_docno sensitive capabilitymove_organize_nodeno sensitive capabilitypublish_docno sensitive capabilityread_all_notificationsno sensitive capabilityread_database_cellsno sensitive capabilityread_database_columnsno sensitive capabilityread_docno sensitive capabilityremove_doc_from_collectionno sensitive capabilityremove_tag_from_docno sensitive capabilityrename_folderno sensitive capabilityreplace_doc_with_markdownno sensitive capabilityresolve_commentno sensitive capabilityrestore_docno sensitive capabilityrevoke_docno sensitive capabilitysearch_docsno sensitive capabilityset_doc_propertyno sensitive capabilitysign_inno sensitive capabilitytrash_docno sensitive capabilityupdate_blockno sensitive capabilityupdate_collectionno sensitive capabilityupdate_collection_rulesno sensitive capabilityupdate_database_rowno sensitive capabilityupdate_doc_iconno sensitive capabilityupdate_doc_titleno sensitive capabilityupdate_edgeless_blockno sensitive capabilityupdate_folder_iconno sensitive capabilityupdate_frame_childrenno sensitive capabilityupdate_profileno sensitive capabilityupdate_settingsno sensitive capabilityupdate_surface_elementno sensitive capabilityupdate_table_cellno sensitive capabilityupdate_workspaceno sensitive capabilityupload_blobno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (97 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 9
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v3.5.1 latest |
A 97/100 | 0 | 1.13.0 | 2026-09-07 |
v3.5.0 |
A 97/100 | 0 | 1.13.0 | 2026-09-06 |
v3.4.1 |
A 97/100 | 0 | 1.13.0 | 2026-08-31 |
v3.3.0 |
A 97/100 | 0 | 1.13.0 | 2026-08-27 |
v3.2.2 |
A 97/100 | 0 | 1.12.1 | 2026-08-24 |
Show 4 more versions ↓
v3.2.1 |
A 97/100 | 0 | 1.12.1 | 2026-08-18 |
v3.2.0 |
A 97/100 | 0 | 1.12.1 | 2026-08-06 |
v3.1.0 |
A 97/100 | 0 | 1.12.1 | 2026-08-03 |
v3.0.1 |
A 97/100 | 0 | 1.10.0 | 2026-07-27 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan affine-mcp-server --onlineOther implementations of Affine 1
Independent packages implementing the same tool, scanned with the same engine. Compare all 2 side by side →
More in Security & Testing
The Stripe Agent Toolkit enables popular agent frameworks including LangChain and Vercel's AI SDK to integrate with Stripe APIs through function calling.
MCP (Model Context Protocol) server for AgentGate. Enables Claude and other MCP-compatible AI assistants to request approvals.
Scan any website for AI agent readiness, payment protocols, and discovery endpoints
MCP server for aigently security guardrails — reads static catalog-data JSON, zero API dependency
Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.
Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.