Kolbo MCP Server
@kolbo/mcp
npm
v1.87.13
Source verified
Published by zoharvan12 — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.
Kolbo AI MCP Server - Generate images, videos, music, speech, and sound effects from Claude Code
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 10 = 90. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −10 | capability blast radius (critical) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 4
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: acquire_clean_music_track → blender_execute_python → chat_send_message. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow acquire_clean_music_track → blender_execute_python → chat_send_message
high Shell/command execution in server code (src/auth.js)MTC-SRC-002
In the server's implementation (`src/auth.js:18`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: nst { exec } = require('child_process'); const fs = require('fs'); const path = require('path'); const os = require('os'
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server src/auth.js
medium Tool "unlink_project_asset" can modify the filesystemMTC-CAP-002
Tool "unlink_project_asset" can write, overwrite or delete files (keyword "unlink" in tool name). Verify it is scoped to a safe directory.
Fix: Constrain file operations to an explicit, non-sensitive root; reject path traversal.
Location: tool unlink_project_asset
low Mutating tool "unlink_project_asset" declares no destructiveHintMTC-CAP-005
Tool "unlink_project_asset" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool unlink_project_asset
Tools 171
Each tool and what it can reach — statically extracted from the published source.
chat_send_messageingests untrusted inputnetwork egressacquire_clean_music_trackingests untrusted inputblender_execute_pythonreads sensitive datablender_search_docsingests untrusted inputbrowse_music_libraryingests untrusted inputchat_get_messagesingests untrusted inputget_moodboardingests untrusted inputget_review_assetingests untrusted inputget_stock_assetingests untrusted inputget_visual_dnaingests untrusted input
Show 161 more tools ↓
transcribe_audioingests untrusted inputunlink_project_assetwrites filesactivate_color_paletteno sensitive capabilityadd_media_to_folderno sensitive capabilityadd_project_contextno sensitive capabilityadd_review_versionno sensitive capabilityanalyze_color_paletteno sensitive capabilityanalyze_script_for_musicno sensitive capabilityanalyze_script_for_stockno sensitive capabilityanalyze_videono sensitive capabilityarchive_projectno sensitive capabilityblender_apply_operationsno sensitive capabilityblender_capture_viewportno sensitive capabilityblender_file_operationno sensitive capabilityblender_get_command_statusno sensitive capabilityblender_get_sceneno sensitive capabilityblender_import_mediano sensitive capabilityblender_list_sessionsno sensitive capabilityblender_renderno sensitive capabilityblender_undono sensitive capabilitybulk_delete_mediano sensitive capabilitybulk_move_mediano sensitive capabilitybulk_move_sessionsno sensitive capabilitybulk_permanently_delete_mediano sensitive capabilitybulk_restore_mediano sensitive capabilitycancel_generationno sensitive capabilitychat_list_conversationsno sensitive capabilitycheck_creditsno sensitive capabilityclean_dialogue_leftoversno sensitive capabilityclone_voiceno sensitive capabilitycreate_agentno sensitive capabilitycreate_color_paletteno sensitive capabilitycreate_docno sensitive capabilitycreate_media_folderno sensitive capabilitycreate_moodboardno sensitive capabilitycreate_projectno sensitive capabilitycreate_review_assetno sensitive capabilitycreate_review_collectionno sensitive capabilitycreate_review_commentno sensitive capabilitycreate_review_share_linkno sensitive capabilitycreate_upload_ticketno sensitive capabilitycreate_visual_dnano sensitive capabilitycreate_visual_dna_folderno sensitive capabilitydeactivate_color_paletteno sensitive capabilitydelete_agentno sensitive capabilitydelete_color_paletteno sensitive capabilitydelete_docno sensitive capabilitydelete_mediano sensitive capabilitydelete_media_folderno sensitive capabilitydelete_moodboardno sensitive capabilitydelete_project_contextno sensitive capabilitydelete_review_assetno sensitive capabilitydelete_review_collectionno sensitive capabilitydelete_review_commentno sensitive capabilitydelete_sessionno sensitive capabilitydelete_visual_dnano sensitive capabilitydelete_visual_dna_folderno sensitive capabilitydelete_voiceno sensitive capabilityduplicate_projectno sensitive capabilityedit_imageno sensitive capabilityedit_review_commentno sensitive capabilityedit_videono sensitive capabilityfavorite_mediano sensitive capabilitygenerate_3dno sensitive capabilitygenerate_character_sheetno sensitive capabilitygenerate_creative_directorno sensitive capabilitygenerate_elementsno sensitive capabilitygenerate_first_last_frameno sensitive capabilitygenerate_imageno sensitive capabilitygenerate_image_editno sensitive capabilitygenerate_lipsyncno sensitive capabilitygenerate_musicno sensitive capabilitygenerate_soundno sensitive capabilitygenerate_speechno sensitive capabilitygenerate_videono sensitive capabilitygenerate_video_from_imageno sensitive capabilitygenerate_video_from_videono sensitive capabilityget_creative_director_statusno sensitive capabilityget_docno sensitive capabilityget_generation_statusno sensitive capabilityget_mediano sensitive capabilityget_media_statsno sensitive capabilityget_music_library_facetsno sensitive capabilityget_music_track_audiono sensitive capabilityget_music_track_lyricsno sensitive capabilityget_music_track_relatedno sensitive capabilityget_projectno sensitive capabilityget_project_profileno sensitive capabilityget_review_storage_usageno sensitive capabilityget_session_usageno sensitive capabilityget_stock_categoriesno sensitive capabilityget_stock_collectionsno sensitive capabilityget_stock_sourcesno sensitive capabilityimport_elevenlabs_voiceno sensitive capabilityimport_music_track_to_libraryno sensitive capabilityimport_stock_assetno sensitive capabilitylink_project_assetno sensitive capabilitylist_agentsno sensitive capabilitylist_cinematic_presetsno sensitive capabilitylist_color_palettesno sensitive capabilitylist_docsno sensitive capabilitylist_mediano sensitive capabilitylist_media_foldersno sensitive capabilitylist_modelsno sensitive capabilitylist_moodboardsno sensitive capabilitylist_presetsno sensitive capabilitylist_project_assetsno sensitive capabilitylist_project_contextno sensitive capabilitylist_projectsno sensitive capabilitylist_review_assetsno sensitive capabilitylist_review_collectionsno sensitive capabilitylist_review_commentsno sensitive capabilitylist_review_share_linksno sensitive capabilitylist_session_generationsno sensitive capabilitylist_sessionsno sensitive capabilitylist_visual_dna_foldersno sensitive capabilitylist_visual_dnasno sensitive capabilitylist_voicesno sensitive capabilitymedia_upload_widgetno sensitive capabilitymove_folder_contentsno sensitive capabilitymove_generations_to_sessionno sensitive capabilitymove_mediano sensitive capabilitymove_sessionno sensitive capabilitymove_visual_dna_to_folderno sensitive capabilitypermanently_delete_mediano sensitive capabilitypublish_html_artifactno sensitive capabilityregenerate_project_profileno sensitive capabilityremove_media_from_folderno sensitive capabilityrename_sessionno sensitive capabilityreply_review_commentno sensitive capabilityresolve_review_commentno sensitive capabilityrestore_mediano sensitive capabilityrestore_sessionno sensitive capabilityrevoke_review_share_linkno sensitive capabilitysearch_music_libraryno sensitive capabilitysearch_stock_mediano sensitive capabilityseparate_ambienceno sensitive capabilityseparate_audio_stemsno sensitive capabilityset_review_statusno sensitive capabilityshare_docno sensitive capabilityshare_media_folderno sensitive capabilityshow_plansno sensitive capabilitysplit_sessionno sensitive capabilitytrim_videono sensitive capabilityunarchive_projectno sensitive capabilityundo_session_organizationno sensitive capabilityunfavorite_mediano sensitive capabilityunresolve_review_commentno sensitive capabilityunshare_media_folderno sensitive capabilityupdate_agentno sensitive capabilityupdate_color_paletteno sensitive capabilityupdate_docno sensitive capabilityupdate_media_folderno sensitive capabilityupdate_moodboardno sensitive capabilityupdate_projectno sensitive capabilityupdate_project_assetno sensitive capabilityupdate_review_assetno sensitive capabilityupdate_review_collectionno sensitive capabilityupdate_visual_dnano sensitive capabilityupdate_visual_dna_folderno sensitive capabilityupload_mediano sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (171 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 10
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.87.13 latest |
A 90/100 | 4 | 1.13.0 | 2026-09-07 |
v1.87.2 |
A 90/100 | 4 | 1.13.0 | 2026-09-06 |
v1.86.4 |
A 90/100 | 4 | 1.13.0 | 2026-09-05 |
v1.84.1 |
A 90/100 | 4 | 1.13.0 | 2026-09-01 |
v1.84.0 |
A 90/100 | 4 | 1.13.0 | 2026-08-31 |
Show 5 more versions ↓
v1.83.4 |
A 94/100 | 4 | 1.13.0 | 2026-08-30 |
v1.83.1 |
A 94/100 | 4 | 1.13.0 | 2026-08-29 |
v1.82.6 |
A 94/100 | 4 | 1.13.0 | 2026-08-28 |
v1.82.3 |
A 94/100 | 4 | 1.13.0 | 2026-08-27 |
v1.81.9 |
A 94/100 | 4 | 1.13.0 | 2026-08-25 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @kolbo/mcp --onlineMore in Analytics & Monitoring
Public-safe MCP admin discovery contract descriptors and response builders.
Pokemon Champions battle advisor MCP server
Airflow MCP server — DAG list, runs, task instances, log tails, trigger and clear over the Airflow REST API
MCP analytics wrapper SDK that instruments MCP tool declarations with telemetry.
AI-ready GIS, geofencing, DataSynch, CRM, inventory, routing, APIs, telemetry and workflows.
AI-native social listening. Monitor buying signals and run GTM workflows via natural language.