Feagi MCP Server
feagi-mcp
PyPI
v0.0.6
Published by neuraville — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 2
high Shell/command execution in server code (setup.py)MTC-SRC-002
In the server's implementation (`setup.py:56`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: nvironment...") subprocess.run([sys.executable, "-m", "venv", "venv"], check=True) print("✓ Virtual envi
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server setup.py
low Dynamic module load from a non-literal in packaging/dev tooling (scripts/verify_install.py)MTC-SRC-005
In a packaging/dev/install script (shipped, but not the server runtime) (`scripts/verify_install.py:25`): Loading a module chosen at runtime (from a variable) can pull in and run attacker-influenced code paths. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: ed.""" try: __import__(module) print(f"✓ {description}") return True except ImportError
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server scripts/verify_install.py
Tools 98
Each tool and what it can reach — statically extracted from the published source.
composer_download_simulator_pack_bundleingests untrusted inputcomposer_get_simulator_pack_resolvedingests untrusted inputdownload_genomeingests untrusted inputdownload_region_genomeingests untrusted inputauto_polarity_probeno sensitive capabilitybrain_visualizer_apino sensitive capabilitybuild_reflex_mappingno sensitive capabilityclone_cortical_areano sensitive capabilitycomposer_get_simulator_pack_versionsno sensitive capabilitycomposer_list_simulator_packsno sensitive capability
Show 88 more tools ↓
compute_io_cortical_idno sensitive capabilityconfirm_amalgamation_destinationno sensitive capabilitycontrol_burst_engineno sensitive capabilitycreate_brain_regionno sensitive capabilitycreate_cortical_areano sensitive capabilitycreate_io_area_for_unitno sensitive capabilitycreate_morphologyno sensitive capabilitydelete_cortical_areano sensitive capabilitydelete_cortical_mappingno sensitive capabilitydelete_genome_snapshotno sensitive capabilityembodiment_discover_introspection_endpointno sensitive capabilityembodiment_get_physics_stateno sensitive capabilityembodiment_reset_simulation_time_statsno sensitive capabilityembodiment_set_joint_stateno sensitive capabilityget_agent_connection_endpointsno sensitive capabilityget_agent_device_registrationsno sensitive capabilityget_agent_joint_mapno sensitive capabilityget_agent_propertiesno sensitive capabilityget_area_parametersno sensitive capabilityget_area_semantic_infono sensitive capabilityget_brain_regionsno sensitive capabilityget_burst_counterno sensitive capabilityget_burst_engine_configno sensitive capabilityget_burst_engine_statusno sensitive capabilityget_connectivityno sensitive capabilityget_connectivity_summaryno sensitive capabilityget_controller_lifecycle_eventsno sensitive capabilityget_cortical_area_geometryno sensitive capabilityget_cortical_id_name_mappingno sensitive capabilityget_cortical_map_detailedno sensitive capabilityget_cortical_mappingno sensitive capabilityget_cortical_synapse_countsno sensitive capabilityget_cortical_templateno sensitive capabilityget_embodiment_statusno sensitive capabilityget_experiment_stop_causeno sensitive capabilityget_feagi_link_healthno sensitive capabilityget_genome_file_nameno sensitive capabilityget_genome_infono sensitive capabilityget_log_tailno sensitive capabilityget_motor_snapshot_lastno sensitive capabilityget_neuron_state_by_idno sensitive capabilityget_registered_agentsno sensitive capabilityget_runtime_metricsno sensitive capabilityget_sensor_snapshot_lastno sensitive capabilityget_voxel_neuronsno sensitive capabilityhealth_checkno sensitive capabilityinspect_cortical_areano sensitive capabilityinspect_cortical_areas_batchno sensitive capabilityinspect_cortical_areas_minimalno sensitive capabilityinspect_neuron_state_atno sensitive capabilityinterpret_cortical_idno sensitive capabilitylist_agent_capabilities_allno sensitive capabilitylist_area_synapsesno sensitive capabilitylist_brain_visualizer_operationsno sensitive capabilitylist_controller_bridgesno sensitive capabilitylist_cortical_area_namesno sensitive capabilitylist_cortical_areasno sensitive capabilitylist_genome_snapshotsno sensitive capabilitylist_ipu_areasno sensitive capabilitylist_ipu_areas_with_metadatano sensitive capabilitylist_morphologiesno sensitive capabilitylist_morphologies_summaryno sensitive capabilitylist_opu_areasno sensitive capabilitylist_opu_areas_with_metadatano sensitive capabilityload_barebones_genomeno sensitive capabilityload_genome_from_fileno sensitive capabilitymonitor_activityno sensitive capabilitymonitor_activity_batchno sensitive capabilitypause_burst_engineno sensitive capabilityprobe_area_responseno sensitive capabilityqueue_amalgamation_by_payloadno sensitive capabilityreset_cortical_neural_stateno sensitive capabilityresolve_cortical_area_by_nameno sensitive capabilityrestore_genome_snapshotno sensitive capabilityresume_burst_engineno sensitive capabilitysave_genome_to_filesystemno sensitive capabilitysend_motor_commandno sensitive capabilityset_burst_engine_frequencyno sensitive capabilitysnapshot_genomeno sensitive capabilitystimulate_areano sensitive capabilitystimulate_area_batchno sensitive capabilitysuggest_cortical_anchor_positionsno sensitive capabilitytrace_signal_pathno sensitive capabilityupdate_cortical_areano sensitive capabilityupdate_cortical_mappingno sensitive capabilityupload_genomeno sensitive capabilityvalidate_brain_region_hierarchyno sensitive capabilityvalidate_genomeno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (98 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.0.6 latest |
A 93/100 | 2 | 1.8.0 | 2026-07-23 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan feagi-mcp --online --registry pypiMore in Learning & Documentation
Security scan results for the Agentmail MCP server.
Security scan results for the Alfahq MCP server.
Security scan results for the Alpine MCP server.
Security scan results for the Atag MCP server.
Security scan results for the Aurais Mcp Research Reader MCP server.
Security scan results for the Bookstack MCP server.