B10cks MCP Server
@b10cks/mcp-server
npm
v0.14.4
Source verified
Published by b10cks — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.
MCP server for the b10cks headless CMS Management API — block definitions, content, redirects, data sources, releases, automations and more
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 3 = 97. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 2
high Reads a sensitive credential path or dumps the environment (dist/server-2IxEwton.js)MTC-SRC-006
In the server's implementation (`dist/server-2IxEwton.js:24`): Reading private keys / cloud credentials, or serializing the whole environment, is a sensitive-data source that becomes exfiltration when combined with any egress. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: "HOME"], i = t.join(r, ".netrc"), a = e.readFileSync(i, "utf8"), o = null, s; for (let e of a.split(/\r?\n/)) { le
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server dist/server-2IxEwton.js
high Reads a sensitive credential path or dumps the environment (dist/server-BTdNl8rr.cjs)MTC-SRC-006
In the server's implementation (`dist/server-BTdNl8rr.cjs:2`): Reading private keys / cloud credentials, or serializing the whole environment, is a sensitive-data source that becomes exfiltration when combined with any egress. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: ME`],n=l.default.join(t,`.netrc`),r=c.default.readFileSync(n,`utf8`),i=null,a;for(let t of r.split(/\r?\n/)){let n=t.tri
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server dist/server-BTdNl8rr.cjs
Tools 200
Each tool and what it can reach — statically extracted from the published source.
assetPackages.downloadingests untrusted inputassetShares.createingests untrusted inputdataSources.exportEntriesreads sensitive datashares.downloadingests untrusted inputshares.downloadAssetingests untrusted inputai.availableModelsno sensitive capabilityai.contentInteractionno sensitive capabilityai.contentTreeInteractionno sensitive capabilityai.metaTagsno sensitive capabilityai.modelsno sensitive capability
Show 190 more tools ↓
ai.translateno sensitive capabilityassetCollections.addAssetsno sensitive capabilityassetCollections.createno sensitive capabilityassetCollections.deleteno sensitive capabilityassetCollections.getno sensitive capabilityassetCollections.listno sensitive capabilityassetCollections.listAssetsno sensitive capabilityassetCollections.removeAssetsno sensitive capabilityassetCollections.reorderAssetsno sensitive capabilityassetCollections.updateno sensitive capabilityassetPackages.createno sensitive capabilityassetPackages.deleteno sensitive capabilityassetPackages.getno sensitive capabilityassetPackages.listno sensitive capabilityassets.exportno sensitive capabilityassets.linkedContentsno sensitive capabilityassets.listVersionsno sensitive capabilityassets.restoreVersionno sensitive capabilityassetShares.deleteno sensitive capabilityassetShares.getno sensitive capabilityassetShares.listno sensitive capabilityassetShares.revokeno sensitive capabilityassetShares.updateno sensitive capabilityassetTags.assignno sensitive capabilityautomations.createno sensitive capabilityautomations.createActionno sensitive capabilityautomations.deleteno sensitive capabilityautomations.deleteActionno sensitive capabilityautomations.getno sensitive capabilityautomations.getActionno sensitive capabilityautomations.getTriggerCatalogno sensitive capabilityautomations.listno sensitive capabilityautomations.listActionsno sensitive capabilityautomations.listExecutionsno sensitive capabilityautomations.replayExecutionno sensitive capabilityautomations.statsExecutionsno sensitive capabilityautomations.statsStatisticsno sensitive capabilityautomations.statsSummaryno sensitive capabilityautomations.statsTrendsno sensitive capabilityautomations.triggerno sensitive capabilityautomations.updateno sensitive capabilityautomations.updateActionno sensitive capabilityblocks.createno sensitive capabilityblocks.createTemplateno sensitive capabilityblocks.deleteno sensitive capabilityblocks.deleteTemplateno sensitive capabilityblocks.deleteVersionno sensitive capabilityblocks.getno sensitive capabilityblocks.getTemplateno sensitive capabilityblocks.getVersionno sensitive capabilityblocks.listno sensitive capabilityblocks.listTemplatesno sensitive capabilityblocks.listVersionsno sensitive capabilityblocks.restoreVersionno sensitive capabilityblocks.syncno sensitive capabilityblocks.updateno sensitive capabilityblocks.updateTemplateno sensitive capabilityblocks.updateVersionno sensitive capabilitycomments.addReactionno sensitive capabilitycomments.createno sensitive capabilitycomments.deleteno sensitive capabilitycomments.getno sensitive capabilitycomments.listno sensitive capabilitycomments.listReactionsno sensitive capabilitycomments.removeReactionno sensitive capabilitycomments.resolveno sensitive capabilitycomments.unresolveno sensitive capabilitycomments.updateno sensitive capabilitycontents.bulkCreateno sensitive capabilitycontents.createno sensitive capabilitycontents.deleteno sensitive capabilitycontents.exportno sensitive capabilitycontents.getno sensitive capabilitycontents.getVersionno sensitive capabilitycontents.listno sensitive capabilitycontents.listVersionsno sensitive capabilitycontents.moveno sensitive capabilitycontents.publishno sensitive capabilitycontents.publishVersionno sensitive capabilitycontents.scheduleno sensitive capabilitycontents.setVersionAsCurrentno sensitive capabilitycontents.treeOperationsno sensitive capabilitycontents.unpublishno sensitive capabilitycontents.updateno sensitive capabilitycontents.updateVersionno sensitive capabilitydataSources.entries.createno sensitive capabilitydataSources.entries.deleteno sensitive capabilitydataSources.entries.getno sensitive capabilitydataSources.entries.listno sensitive capabilitydataSources.entries.updateno sensitive capabilitydataSources.importEntriesno sensitive capabilitydataSources.translateMissingDimensionsno sensitive capabilityicons.tagsno sensitive capabilitynotifications.deleteno sensitive capabilitynotifications.deleteAllno sensitive capabilitynotifications.deleteReadno sensitive capabilitynotifications.listno sensitive capabilitynotifications.markAllReadno sensitive capabilitynotifications.markReadno sensitive capabilitynotifications.markUnreadno sensitive capabilitynotifications.unreadCountno sensitive capabilityprovider.createNoteno sensitive capabilityprovider.deleteNoteno sensitive capabilityprovider.getNoteno sensitive capabilityprovider.getStatsno sensitive capabilityprovider.listNotesno sensitive capabilityprovider.updateNoteno sensitive capabilityredirects.exportDatano sensitive capabilityredirects.importDatano sensitive capabilityredirects.resetno sensitive capabilityreleases.assignVersionno sensitive capabilityreleases.cancelno sensitive capabilityreleases.commitno sensitive capabilityreleases.createno sensitive capabilityreleases.deleteno sensitive capabilityreleases.getno sensitive capabilityreleases.listno sensitive capabilityreleases.publishno sensitive capabilityreleases.removeVersionno sensitive capabilityreleases.updateno sensitive capabilityshares.getno sensitive capabilityshares.listAssetsno sensitive capabilityshares.unlockno sensitive capabilityspaces.aiUsageno sensitive capabilityspaces.archiveno sensitive capabilityspaces.cancelSubscriptionno sensitive capabilityspaces.checkoutSubscriptionno sensitive capabilityspaces.contentMenuno sensitive capabilityspaces.createno sensitive capabilityspaces.createAiConfigno sensitive capabilityspaces.createBackupno sensitive capabilityspaces.createInviteno sensitive capabilityspaces.createMigrationno sensitive capabilityspaces.deleteno sensitive capabilityspaces.deleteAiConfigno sensitive capabilityspaces.deleteBackupno sensitive capabilityspaces.deleteInviteno sensitive capabilityspaces.deleteMigrationno sensitive capabilityspaces.getno sensitive capabilityspaces.getAiConfigno sensitive capabilityspaces.getAiSettingsno sensitive capabilityspaces.getAuditLogsno sensitive capabilityspaces.getBackupno sensitive capabilityspaces.getCurrentSubscriptionno sensitive capabilityspaces.getMigrationno sensitive capabilityspaces.listno sensitive capabilityspaces.listAiConfigsno sensitive capabilityspaces.listBackupsno sensitive capabilityspaces.listInvitesno sensitive capabilityspaces.listInvoicesno sensitive capabilityspaces.listMembersno sensitive capabilityspaces.listMigrationsno sensitive capabilityspaces.listSubscriptionsno sensitive capabilityspaces.reindexSearchno sensitive capabilityspaces.reinitSubscriptionno sensitive capabilityspaces.removeMemberno sensitive capabilityspaces.resendInviteno sensitive capabilityspaces.statsno sensitive capabilityspaces.updateno sensitive capabilityspaces.updateAiConfigno sensitive capabilityspaces.updateAiSettingsno sensitive capabilityspaces.updateBackupno sensitive capabilityspaces.updateIconno sensitive capabilityspaces.updateMemberno sensitive capabilityspaces.updateOnboardingno sensitive capabilityspaces.updateSearchno sensitive capabilityspaces.usageno sensitive capabilityspaces.usageHistoryno sensitive capabilityspaces.usageTimeseriesno sensitive capabilitysystem.authorizationno sensitive capabilitysystem.configno sensitive capabilitysystem.getInviteno sensitive capabilitysystem.healthno sensitive capabilitysystem.plansno sensitive capabilitysystem.spaceBlueprintsno sensitive capabilityteams.addUserno sensitive capabilityteams.createno sensitive capabilityteams.deleteno sensitive capabilityteams.getno sensitive capabilityteams.hierarchyno sensitive capabilityteams.listno sensitive capabilityteams.listMembersno sensitive capabilityteams.removeUserno sensitive capabilityteams.updateno sensitive capabilityteams.updateMemberno sensitive capabilitytokens.createno sensitive capabilitytokens.deleteno sensitive capabilitytokens.listno sensitive capabilityusers.meno sensitive capabilityusers.updateMeno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 4
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.14.4 latest |
A 97/100 | 2 | 1.13.0 | 2026-09-07 |
v0.14.3 |
A 97/100 | 2 | 1.12.1 | 2026-08-24 |
v0.14.1 |
A 96/100 | 2 | 1.12.1 | 2026-07-28 |
v0.14.0 |
A 96/100 | 2 | 1.12.1 | 2026-07-27 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @b10cks/mcp-server --onlineMore in Content Management
Apify MCP Server
Model Context Protocol (MCP) Server for the *@inkeep/agents-mcp* API.
Medicare spending, chronic conditions, hospital quality, readmissions, and enrollment
Public read-only MCP for products, frameworks, guides, methodology, and blog metadata.
Community-maintained MCP server for Atlassian Confluence Data Center. Not affiliated with Atlassian.
MCP server for Contentful Content Management API integration