Businys MCP Server
@businys/mcp-server
npm
v1.0.1
Published by @businys — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
Official MCP server for Businys — 221 tools across 26 practices for independent professionals
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: get_asset_url → list_delivery_files ⇒ bulk_send_notification. Untrusted input is ingested, private data is read, and it can be sent to an external sink — and at least one leg is a direct schema wire (⇒), where a producer's output drops straight into a free-text parameter of the next tool, so the chain needs little agent cooperation. Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow get_asset_url → list_delivery_files → bulk_send_notification
Tools 200
Each tool and what it can reach — statically extracted from the published source.
bulk_send_notificationnetwork egressget_asset_urlingests untrusted inputget_media_kitingests untrusted inputlist_delivery_filesreads sensitive dataweb_searchingests untrusted inputactivate_templateno sensitive capabilityadd_gear_itemno sensitive capabilityadd_makeup_creditno sensitive capabilityadd_workout_setno sensitive capabilityai_generate_brand_contentno sensitive capability
Show 190 more tools ↓
archive_contractno sensitive capabilityarchive_deliveryno sensitive capabilityarchive_invoiceno sensitive capabilityassess_brand_guide_completenessno sensitive capabilitybulk_create_clientsno sensitive capabilitybulk_enrollno sensitive capabilitybulk_update_statusno sensitive capabilitycancel_bookingno sensitive capabilitycancel_recurring_billingno sensitive capabilityclaim_flash_designno sensitive capabilitycomplete_and_invoice_milestoneno sensitive capabilityconvert_booking_to_invoiceno sensitive capabilityconvert_lead_to_clientno sensitive capabilityconvert_proposal_to_contractno sensitive capabilityconvert_proposal_to_projectno sensitive capabilitycreate_aftercare_templateno sensitive capabilitycreate_api_keyno sensitive capabilitycreate_automationno sensitive capabilitycreate_blackoutno sensitive capabilitycreate_brand_dealno sensitive capabilitycreate_brand_guide_from_templateno sensitive capabilitycreate_checkout_pageno sensitive capabilitycreate_clientno sensitive capabilitycreate_contractno sensitive capabilitycreate_credit_packno sensitive capabilitycreate_deliverableno sensitive capabilitycreate_deliveryno sensitive capabilitycreate_deposit_invoiceno sensitive capabilitycreate_design_moodboardno sensitive capabilitycreate_engagementno sensitive capabilitycreate_exerciseno sensitive capabilitycreate_flash_designno sensitive capabilitycreate_follow_up_bookingno sensitive capabilitycreate_invoiceno sensitive capabilitycreate_leadno sensitive capabilitycreate_programno sensitive capabilitycreate_proposal_from_intakeno sensitive capabilitycreate_recurring_billingno sensitive capabilitycreate_resourceno sensitive capabilitycreate_session_typeno sensitive capabilitycreate_sponsor_dealno sensitive capabilitycreate_sub_profileno sensitive capabilitycreate_workoutno sensitive capabilitydeduct_creditno sensitive capabilitydelete_accountno sensitive capabilitydelete_assetno sensitive capabilitydelete_automationno sensitive capabilitydelete_blackoutno sensitive capabilitydelete_exerciseno sensitive capabilitydelete_gear_itemno sensitive capabilitydelete_programno sensitive capabilitydelete_sub_profileno sensitive capabilitydelete_workoutno sensitive capabilitydelete_workout_setno sensitive capabilityduplicate_programno sensitive capabilityexport_accountno sensitive capabilityexport_client_datano sensitive capabilityexport_leadsno sensitive capabilityexport_workoutsno sensitive capabilityforfeit_depositno sensitive capabilityget_availabilityno sensitive capabilityget_bookingno sensitive capabilityget_brand_guide_versionsno sensitive capabilityget_business_overviewno sensitive capabilityget_capabilitiesno sensitive capabilityget_capacity_overviewno sensitive capabilityget_checkout_pageno sensitive capabilityget_clientno sensitive capabilityget_client_historyno sensitive capabilityget_client_lifetime_valueno sensitive capabilityget_contractno sensitive capabilityget_credit_balanceno sensitive capabilityget_custom_domain_statusno sensitive capabilityget_deliveryno sensitive capabilityget_delivery_approval_statusno sensitive capabilityget_engagementno sensitive capabilityget_exerciseno sensitive capabilityget_gear_itemno sensitive capabilityget_gear_summaryno sensitive capabilityget_invoiceno sensitive capabilityget_leadno sensitive capabilityget_manifestno sensitive capabilityget_master_scheduleno sensitive capabilityget_nexus_statusno sensitive capabilityget_notification_preferencesno sensitive capabilityget_nurture_statusno sensitive capabilityget_profile_pageno sensitive capabilityget_programno sensitive capabilityget_proposal_feedbackno sensitive capabilityget_rate_analysisno sensitive capabilityget_revenue_summaryno sensitive capabilityget_sub_profileno sensitive capabilityget_subscription_statusno sensitive capabilityget_tech_stackno sensitive capabilityget_time_summaryno sensitive capabilityget_workoutno sensitive capabilityglobal_searchno sensitive capabilityimport_csvno sensitive capabilityjoin_waitlistno sensitive capabilitylink_booking_to_sub_profileno sensitive capabilitylist_ad_inventoryno sensitive capabilitylist_aftercare_templatesno sensitive capabilitylist_ai_auditsno sensitive capabilitylist_ai_consulting_engagementsno sensitive capabilitylist_api_keysno sensitive capabilitylist_assetsno sensitive capabilitylist_automation_historyno sensitive capabilitylist_automation_templatesno sensitive capabilitylist_automationsno sensitive capabilitylist_blackoutsno sensitive capabilitylist_bookingsno sensitive capabilitylist_brand_dealsno sensitive capabilitylist_campaign_deliverablesno sensitive capabilitylist_capacity_overridesno sensitive capabilitylist_checkout_pagesno sensitive capabilitylist_clientsno sensitive capabilitylist_compliance_logsno sensitive capabilitylist_content_deliverablesno sensitive capabilitylist_contractsno sensitive capabilitylist_credit_historyno sensitive capabilitylist_credit_packsno sensitive capabilitylist_deliverablesno sensitive capabilitylist_deliveriesno sensitive capabilitylist_dormant_clientsno sensitive capabilitylist_engagementsno sensitive capabilitylist_episode_adsno sensitive capabilitylist_exercisesno sensitive capabilitylist_expensesno sensitive capabilitylist_flash_designsno sensitive capabilitylist_gearno sensitive capabilitylist_implementationsno sensitive capabilitylist_invoicesno sensitive capabilitylist_leadsno sensitive capabilitylist_portal_usersno sensitive capabilitylist_programsno sensitive capabilitylist_project_milestonesno sensitive capabilitylist_recurring_billingno sensitive capabilitylist_resourcesno sensitive capabilitylist_retainersno sensitive capabilitylist_review_candidatesno sensitive capabilitylist_session_typesno sensitive capabilitylist_sow_documentsno sensitive capabilitylist_sponsor_dealsno sensitive capabilitylist_sub_profilesno sensitive capabilitylist_time_entriesno sensitive capabilitylist_transactionsno sensitive capabilitylist_waitlistno sensitive capabilitylist_workout_setsno sensitive capabilitylist_workoutsno sensitive capabilitylog_expenseno sensitive capabilitylog_ink_usageno sensitive capabilitylog_needle_batchno sensitive capabilitylog_sterilization_cycleno sensitive capabilitylog_time_entryno sensitive capabilitypause_recurring_billingno sensitive capabilityprocess_refundno sensitive capabilityresume_recurring_billingno sensitive capabilityrevoke_api_keyno sensitive capabilityrevoke_portal_accessno sensitive capabilitysell_credit_packno sensitive capabilitysend_aftercareno sensitive capabilitysend_deliveryno sensitive capabilitysend_delivery_for_approvalno sensitive capabilitysend_portal_linkno sensitive capabilityset_capacity_overrideno sensitive capabilityset_custom_domainno sensitive capabilityset_notification_preferenceno sensitive capabilitysign_contractno sensitive capabilityskip_nurtureno sensitive capabilityTool Catalogno sensitive capabilityupdate_automationno sensitive capabilityupdate_availabilityno sensitive capabilityupdate_checkout_pageno sensitive capabilityupdate_clientno sensitive capabilityupdate_contractno sensitive capabilityupdate_deliverable_statusno sensitive capabilityupdate_deliveryno sensitive capabilityupdate_engagementno sensitive capabilityupdate_exerciseno sensitive capabilityupdate_gear_itemno sensitive capabilityupdate_invoiceno sensitive capabilityupdate_lead_statusno sensitive capabilityupdate_profile_pageno sensitive capabilityupdate_programno sensitive capabilityupdate_session_typeno sensitive capabilityupdate_sub_profileno sensitive capabilityupdate_workoutno sensitive capabilityupdate_workout_setno sensitive capabilityupload_assetno sensitive capabilityweb_extractno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.0.1 latest |
A 93/100 | 1 | 1.13.0 | 2026-09-07 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @businys/mcp-server --onlineMore in Productivity & Workflow
MCP AgentChat - 让 AI Agent 通过 Telegram 与用户实时交互：发送消息、图片，等待用户回复
A Model Context Protocol (MCP) server for Airthings Air Quality Monitor devices.
MCP server for Anki
TypeScript package for reading and searching Apple Notes on macOS via direct SQLite access. Includes markdown conversion, attachment support, and offers a local MCP server!
Verified biotech catalyst calendar (PDUFA/AdComm/trial readouts) anchored to official sources.
Appointment booking platform letting agents check provider availability and create bookings.