Dversum MCP Server
@dversum/mcp-server
npm
v2.9.1
Published by @dversum — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
Official MCP server for the dVersum business management platform
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 5
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: browse_folder → get_datev_export → create_comment. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow browse_folder → get_datev_export → create_comment
medium Tool "delete_file" can modify the filesystemMTC-CAP-002
Tool "delete_file" can write, overwrite or delete files (keyword "delete_file" in tool name). Verify it is scoped to a safe directory.
Fix: Constrain file operations to an explicit, non-sensitive root; reject path traversal.
Location: tool delete_file
medium Tool "move_file" can modify the filesystemMTC-CAP-002
Tool "move_file" can write, overwrite or delete files (keyword "move_file" in tool name). Verify it is scoped to a safe directory.
Fix: Constrain file operations to an explicit, non-sensitive root; reject path traversal.
Location: tool move_file
low Mutating tool "delete_file" declares no destructiveHintMTC-CAP-005
Tool "delete_file" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool delete_file
low Mutating tool "move_file" declares no destructiveHintMTC-CAP-005
Tool "move_file" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool move_file
Tools 186
Each tool and what it can reach — statically extracted from the published source.
get_datev_exportingests untrusted inputreads sensitive datalist_filesingests untrusted inputreads sensitive databrowse_folderingests untrusted inputcreate_commentnetwork egressdelete_filewrites filesget_file_download_urlingests untrusted inputget_pageingests untrusted inputget_page_treeingests untrusted inputmove_filewrites filesadd_chart_to_whiteboardno sensitive capability
Show 176 more tools ↓
add_charts_to_whiteboardno sensitive capabilityadd_elements_to_whiteboardno sensitive capabilityadd_form_fieldno sensitive capabilityadd_icon_to_whiteboardno sensitive capabilityadd_image_to_whiteboardno sensitive capabilityadd_invoice_line_itemno sensitive capabilityadd_project_memberno sensitive capabilityadd_quote_line_itemno sensitive capabilityadd_tag_to_taskno sensitive capabilityapprove_received_invoiceno sensitive capabilityarchive_taskno sensitive capabilityassign_taskno sensitive capabilityblog_create_postno sensitive capabilityblog_delete_postno sensitive capabilityblog_get_postno sensitive capabilityblog_list_categoriesno sensitive capabilityblog_list_postsno sensitive capabilityblog_publish_postno sensitive capabilityblog_unpublish_postno sensitive capabilityblog_update_postno sensitive capabilityconvert_quote_to_invoiceno sensitive capabilitycreate_absenceno sensitive capabilitycreate_areano sensitive capabilitycreate_cancellationno sensitive capabilitycreate_clientno sensitive capabilitycreate_columnno sensitive capabilitycreate_contactno sensitive capabilitycreate_credit_noteno sensitive capabilitycreate_dashboard_noteno sensitive capabilitycreate_eventno sensitive capabilitycreate_folderno sensitive capabilitycreate_formno sensitive capabilitycreate_invoiceno sensitive capabilitycreate_invoice_from_timeno sensitive capabilitycreate_pageno sensitive capabilitycreate_projectno sensitive capabilitycreate_quoteno sensitive capabilitycreate_recurring_invoiceno sensitive capabilitycreate_reminderno sensitive capabilitycreate_share_linkno sensitive capabilitycreate_subtaskno sensitive capabilitycreate_supplierno sensitive capabilitycreate_tagno sensitive capabilitycreate_taskno sensitive capabilitycreate_time_entryno sensitive capabilitycreate_whiteboardno sensitive capabilitycreate_whiteboard_from_templateno sensitive capabilitydelete_absenceno sensitive capabilitydelete_areano sensitive capabilitydelete_clientno sensitive capabilitydelete_contactno sensitive capabilitydelete_dashboard_noteno sensitive capabilitydelete_eventno sensitive capabilitydelete_folderno sensitive capabilitydelete_invoiceno sensitive capabilitydelete_invoice_line_itemno sensitive capabilitydelete_pageno sensitive capabilitydelete_projectno sensitive capabilitydelete_quoteno sensitive capabilitydelete_quote_line_itemno sensitive capabilitydelete_recurring_invoiceno sensitive capabilitydelete_reminderno sensitive capabilitydelete_supplierno sensitive capabilitydelete_tagno sensitive capabilitydelete_taskno sensitive capabilitydelete_time_entryno sensitive capabilitydelete_whiteboardno sensitive capabilitydismiss_dashboard_noteno sensitive capabilityduplicate_quoteno sensitive capabilityduplicate_whiteboardno sensitive capabilitygenerate_recurring_invoice_nowno sensitive capabilityget_activity_feedno sensitive capabilityget_clientno sensitive capabilityget_contactno sensitive capabilityget_eventno sensitive capabilityget_fileno sensitive capabilityget_finance_overviewno sensitive capabilityget_folder_treeno sensitive capabilityget_formno sensitive capabilityget_gantt_datano sensitive capabilityget_invoiceno sensitive capabilityget_organizationno sensitive capabilityget_projectno sensitive capabilityget_project_boardno sensitive capabilityget_project_time_statsno sensitive capabilityget_quoteno sensitive capabilityget_received_invoiceno sensitive capabilityget_recurring_invoiceno sensitive capabilityget_reminderno sensitive capabilityget_reminder_suggestionno sensitive capabilityget_running_timerno sensitive capabilityget_supplierno sensitive capabilityget_taskno sensitive capabilityget_time_statsno sensitive capabilityget_unread_countno sensitive capabilityget_vacation_statsno sensitive capabilityget_vat_summaryno sensitive capabilityget_whiteboardno sensitive capabilityglobal_searchno sensitive capabilityimport_excalidrawno sensitive capabilityinvite_memberno sensitive capabilitylist_absencesno sensitive capabilitylist_areasno sensitive capabilitylist_clientsno sensitive capabilitylist_contactsno sensitive capabilitylist_dashboard_notesno sensitive capabilitylist_eventsno sensitive capabilitylist_foldersno sensitive capabilitylist_form_submissionsno sensitive capabilitylist_formsno sensitive capabilitylist_invoicesno sensitive capabilitylist_membersno sensitive capabilitylist_notificationsno sensitive capabilitylist_pagesno sensitive capabilitylist_project_membersno sensitive capabilitylist_projectsno sensitive capabilitylist_quotesno sensitive capabilitylist_received_invoicesno sensitive capabilitylist_recurring_invoicesno sensitive capabilitylist_remindersno sensitive capabilitylist_report_templatesno sensitive capabilitylist_share_linksno sensitive capabilitylist_suppliersno sensitive capabilitylist_tagsno sensitive capabilitylist_task_commentsno sensitive capabilitylist_time_entriesno sensitive capabilitylist_whiteboardsno sensitive capabilitymark_all_notifications_readno sensitive capabilitymark_notification_readno sensitive capabilitymove_folderno sensitive capabilitymove_pageno sensitive capabilitymove_taskno sensitive capabilitymove_task_to_projectno sensitive capabilitypause_recurring_invoiceno sensitive capabilityrecord_paymentno sensitive capabilityremove_assigneeno sensitive capabilityremove_form_fieldno sensitive capabilityremove_memberno sensitive capabilityremove_project_memberno sensitive capabilityremove_tag_from_taskno sensitive capabilityrestore_taskno sensitive capabilityresume_recurring_invoiceno sensitive capabilityrevoke_share_linkno sensitive capabilitysend_invoice_emailno sensitive capabilitysend_quote_emailno sensitive capabilitysend_reminder_emailno sensitive capabilityset_whiteboard_contentno sensitive capabilitystart_timerno sensitive capabilitystop_timerno sensitive capabilitytoggle_task_doneno sensitive capabilityupdate_absenceno sensitive capabilityupdate_areano sensitive capabilityupdate_clientno sensitive capabilityupdate_contactno sensitive capabilityupdate_dashboard_noteno sensitive capabilityupdate_eventno sensitive capabilityupdate_folderno sensitive capabilityupdate_formno sensitive capabilityupdate_form_fieldno sensitive capabilityupdate_invoiceno sensitive capabilityupdate_invoice_line_itemno sensitive capabilityupdate_invoice_statusno sensitive capabilityupdate_member_roleno sensitive capabilityupdate_organizationno sensitive capabilityupdate_pageno sensitive capabilityupdate_page_contentno sensitive capabilityupdate_projectno sensitive capabilityupdate_quoteno sensitive capabilityupdate_quote_line_itemno sensitive capabilityupdate_quote_statusno sensitive capabilityupdate_recurring_invoiceno sensitive capabilityupdate_supplierno sensitive capabilityupdate_tagno sensitive capabilityupdate_taskno sensitive capabilityupdate_time_entryno sensitive capabilityupdate_whiteboardno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (186 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 6
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v2.9.1 latest |
A 93/100 | 5 | 1.13.0 | 2026-09-07 |
v2.8.0 |
A 93/100 | 5 | 1.13.0 | 2026-08-27 |
v2.7.1 |
A 93/100 | 5 | 1.12.1 | 2026-08-07 |
v2.7.0 |
A 93/100 | 5 | 1.12.1 | 2026-08-03 |
v2.6.0 |
A 93/100 | 5 | 1.12.1 | 2026-08-01 |
Show 1 more version ↓
v2.5.0 |
A 93/100 | 3 | 1.12.1 | 2026-07-31 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @dversum/mcp-server --onlineMore in Productivity & Workflow
MCP AgentChat - 让 AI Agent 通过 Telegram 与用户实时交互：发送消息、图片，等待用户回复
A Model Context Protocol (MCP) server for Airthings Air Quality Monitor devices.
MCP server for Anki
TypeScript package for reading and searching Apple Notes on macOS via direct SQLite access. Includes markdown conversion, attachment support, and offers a local MCP server!
Verified biotech catalyst calendar (PDUFA/AdComm/trial readouts) anchored to official sources.
Appointment booking platform letting agents check provider availability and create bookings.