Cyberpanel MCP Server
cyberpanel-mcp
npm
v1.0.5
Published by elwizard33 — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP Server for CyberPanel - Control your CyberPanel server through Model Context Protocol with 200+ tools
Trust
A · 96/100
Adoption risk for you: the threat score, then adjusted down for blast radius, publisher verification and how much the scan could see. Deterministic; every point is auditable.
Capability
Moderate
Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.
Coverage
Source
How much the scan could actually inspect. Shallow coverage is stated, never hidden.
A
Why this grade
threat 100 − adoption risk = 96/100
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 4 = 96. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
✓ No findings. The scan raised nothing on this surface — see Coverage for how deep it could look.
Tools 200
Each tool and what it can reach — statically extracted from the published source.
delete_ssh_keyreads sensitive datafetch_acl_detailsingests untrusted inputfetch_aclsingests untrusted inputfetch_all_sitesingests untrusted inputfetch_child_bootstrap_statusingests untrusted inputfetch_master_bootstrap_statusingests untrusted inputfetch_ramingests untrusted inputfetch_ssh_keyingests untrusted inputfetch_swarm_tokensingests untrusted inputfetch_website_limitsingests untrusted input
Show 190 more tools ↓
read_reportreads sensitive dataadd_firewall_ruleno sensitive capabilityadd_minio_nodeno sensitive capabilityadd_ssh_keyno sensitive capabilityadd_swarm_workerno sensitive capabilityapply_mysql_changesno sensitive capabilityboot_childno sensitive capabilityboot_masterno sensitive capabilitychange_database_passwordno sensitive capabilitychange_email_passwordno sensitive capabilitychange_ftp_passwordno sensitive capabilitychange_linux_user_passwordno sensitive capabilitychange_open_basedirno sensitive capabilitychange_php_versionno sensitive capabilitychange_user_aclno sensitive capabilitycheck_master_nodeno sensitive capabilityconnect_aws_s3no sensitive capabilityconnect_do_spacesno sensitive capabilitycreate_aclno sensitive capabilitycreate_backupno sensitive capabilitycreate_child_domainno sensitive capabilitycreate_databaseno sensitive capabilitycreate_dns_recordno sensitive capabilitycreate_do_backup_planno sensitive capabilitycreate_email_accountno sensitive capabilitycreate_email_forwardingno sensitive capabilitycreate_ftp_accountno sensitive capabilitycreate_minio_backup_planno sensitive capabilitycreate_packageno sensitive capabilitycreate_pending_vhostsno sensitive capabilitycreate_s3_backup_planno sensitive capabilitycreate_userno sensitive capabilitycreate_websiteno sensitive capabilitycreate_wordpress_stagingno sensitive capabilitydebug_clusterno sensitive capabilitydebug_email_for_siteno sensitive capabilitydelete_aclno sensitive capabilitydelete_backupno sensitive capabilitydelete_child_domainno sensitive capabilitydelete_cloud_backupno sensitive capabilitydelete_databaseno sensitive capabilitydelete_dns_recordno sensitive capabilitydelete_do_backup_planno sensitive capabilitydelete_email_accountno sensitive capabilitydelete_email_forwardingno sensitive capabilitydelete_firewall_ruleno sensitive capabilitydelete_ftp_accountno sensitive capabilitydelete_minio_backup_planno sensitive capabilitydelete_minio_nodeno sensitive capabilitydelete_mysql_tableno sensitive capabilitydelete_packageno sensitive capabilitydelete_s3_backupno sensitive capabilitydelete_s3_backup_planno sensitive capabilitydelete_userno sensitive capabilitydelete_websiteno sensitive capabilitydelete_wordpress_pluginsno sensitive capabilitydelete_wordpress_themesno sensitive capabilitydetach_clusterno sensitive capabilityedit_cluster_resourcesno sensitive capabilityfind_all_aclsno sensitive capabilityfix_mail_sslno sensitive capabilitygenerate_dkim_keysno sensitive capabilityget_access_logsno sensitive capabilityget_application_install_statusno sensitive capabilityget_backup_statusno sensitive capabilityget_cloud_backup_settingsno sensitive capabilityget_container_statusno sensitive capabilityget_dkim_keysno sensitive capabilityget_do_backup_logsno sensitive capabilityget_do_plan_websitesno sensitive capabilityget_error_logsno sensitive capabilityget_extension_statusno sensitive capabilityget_minio_backup_logsno sensitive capabilityget_minio_plan_websitesno sensitive capabilityget_mysql_configno sensitive capabilityget_mysql_statusno sensitive capabilityget_mysql_table_datano sensitive capabilityget_mysql_table_structureno sensitive capabilityget_n8n_install_statusno sensitive capabilityget_operation_statusno sensitive capabilityget_php_configno sensitive capabilityget_php_extensionsno sensitive capabilityget_php_settings_advancedno sensitive capabilityget_s3_backup_logsno sensitive capabilityget_s3_plan_websitesno sensitive capabilityget_server_infono sensitive capabilityget_server_logsno sensitive capabilityget_server_public_keyno sensitive capabilityget_server_typeno sensitive capabilityget_ssh_configsno sensitive capabilityget_switch_statusno sensitive capabilityget_system_statusno sensitive capabilityget_usage_datano sensitive capabilityget_website_creation_datano sensitive capabilityget_website_datano sensitive capabilityget_website_limitsno sensitive capabilityget_website_modify_datano sensitive capabilityget_website_usageno sensitive capabilityget_wordpress_detailsno sensitive capabilityget_wordpress_pluginsno sensitive capabilityget_wordpress_themesno sensitive capabilityinstall_containerno sensitive capabilityinstall_joomlano sensitive capabilityinstall_n8nno sensitive capabilityinstall_php_extensionno sensitive capabilityinstall_prestashopno sensitive capabilityinstall_wordpressno sensitive capabilityissue_hostname_sslno sensitive capabilityissue_mail_sslno sensitive capabilityissue_sslno sensitive capabilitykill_processno sensitive capabilityleave_swarmno sensitive capabilitylist_all_mysql_databasesno sensitive capabilitylist_backupsno sensitive capabilitylist_child_domainsno sensitive capabilitylist_cloud_backupsno sensitive capabilitylist_databasesno sensitive capabilitylist_dns_recordsno sensitive capabilitylist_do_backup_plansno sensitive capabilitylist_do_spacesno sensitive capabilitylist_email_accountsno sensitive capabilitylist_email_forwardingsno sensitive capabilitylist_firewall_rulesno sensitive capabilitylist_ftp_accountsno sensitive capabilitylist_minio_backup_plansno sensitive capabilitylist_minio_nodesno sensitive capabilitylist_mysql_tablesno sensitive capabilitylist_n8n_installationsno sensitive capabilitylist_packagesno sensitive capabilitylist_resellersno sensitive capabilitylist_s3_backup_plansno sensitive capabilitylist_s3_backupsno sensitive capabilitylist_s3_bucketsno sensitive capabilitylist_usersno sensitive capabilitylist_websitesno sensitive capabilitymodify_aclno sensitive capabilitymodify_packageno sensitive capabilitymodify_userno sensitive capabilityput_ssh_keyno sensitive capabilityread_dns_reportno sensitive capabilityread_ftp_reportno sensitive capabilityremove_domain_from_do_planno sensitive capabilityremove_domain_from_minio_planno sensitive capabilityremove_domain_from_s3_planno sensitive capabilityremove_n8n_installationno sensitive capabilityreset_dns_configno sensitive capabilityreset_email_configno sensitive capabilityreset_ftp_configno sensitive capabilityrestart_mysqlno sensitive capabilityrestore_cloud_backupno sensitive capabilityrestore_s3_backupno sensitive capabilityrun_do_backupno sensitive capabilityrun_email_checksno sensitive capabilityrun_minio_backupno sensitive capabilityrun_s3_backupno sensitive capabilitysave_cloud_backup_settingsno sensitive capabilitysave_php_config_advancedno sensitive capabilitysave_php_config_basicno sensitive capabilitysave_reseller_changesno sensitive capabilitysave_ssh_configsno sensitive capabilitysave_website_limitsno sensitive capabilitysave_website_modificationsno sensitive capabilitysave_wordpress_auto_updatesno sensitive capabilityset_website_limitsno sensitive capabilitysetup_clusterno sensitive capabilitysetup_cluster_nodeno sensitive capabilitysetup_data_nodeno sensitive capabilitysetup_uptime_monitorno sensitive capabilitysubmit_cloud_backupno sensitive capabilitysubmit_php_changeno sensitive capabilitysubmit_public_keyno sensitive capabilitysuspend_websiteno sensitive capabilityswitch_cluster_dnsno sensitive capabilityswitch_serverno sensitive capabilityswitch_webserverno sensitive capabilitysync_to_masterno sensitive capabilitysync_wordpress_stagingno sensitive capabilitytoggle_wordpress_pluginno sensitive capabilitytoggle_wordpress_themeno sensitive capabilitytune_settingsno sensitive capabilityuninstall_php_extensionno sensitive capabilityupdate_do_backup_planno sensitive capabilityupdate_minio_backup_planno sensitive capabilityupdate_s3_backup_planno sensitive capabilityupdate_wordpress_pluginsno sensitive capabilityupdate_wordpress_settingsno sensitive capabilityupdate_wordpress_themesno sensitive capabilityupgrade_cyberpanelno sensitive capabilityverify_wordpress_installationno sensitive capabilitywordpress_auto_loginno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.0.5 latest |
A 96/100 | 0 | 1.13.0 | 2026-09-07 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan cyberpanel-mcp --onlineMore in Cloud & DevOps
Adguard
Source verified
npm
A
@solomonneas/adguard-mcp
Operator control CLI for AdGuard Home with an MCP adapter
Aliyun
Source verified
npm
A
aliyun-mcp-server
interacting with Aliyun (Alibaba Cloud) services through This MCP server provides tools.
Aspro
Source verified
npm
A
aspro-mcp
MCP server for the Aspro.Cloud REST API
Atlassian
Source verified
npm
A
@xuandev/atlassian-mcp
MCP server for Atlassian Confluence and Jira Cloud APIs
Auroradocs
Source verified
npm
A
@henrikogard/auroradocs-mcp
AuroraCloud-first MCP server that exposes AuroraDocs workspace data to Claude Desktop and other AI agents
AWS KB Retrieval (official)
Official
npm
A
@modelcontextprotocol/server-aws-kb-retrieval
The official AWS Knowledge Base retrieval server using Bedrock Agent Runtime.