Livepilot MCP Server
livepilot
npm
v1.30.0
Published by dreamrec — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
Agentic production system for Ableton Live 12 — 467 tools, 56 domains, 44 semantic moves. Device atlas (5264 devices, 120 enriched, 7 indexes), Splice intelligence (gRPC + GraphQL describe-a-sound + preview + collections + presets), 9-band spectral percep
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 4
high Shell/command execution in server code (bin/livepilot.js)MTC-SRC-002
In the server's implementation (`bin/livepilot.js:4`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: ync, spawn } = require("child_process"); const fs = require("fs"); const net = require("net"); const path = require("pat
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server bin/livepilot.js
high Shell/command execution in server code (mcp_server/connection.py)MTC-SRC-002
In the server's implementation (`mcp_server/connection.py:95`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: try: out = subprocess.check_output( ["lsof", "-nP", f"-iTCP:{port}"], text=True,
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server mcp_server/connection.py
high Shell/command execution in server code (mcp_server/server.py)MTC-SRC-002
In the server's implementation (`mcp_server/server.py:31`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: try: out = subprocess.check_output( ["lsof", "-t", "-i", f"UDP:{port}"], text=True,
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server mcp_server/server.py
high Shell/command execution in server code (mcp_server/user_corpus/plugin_engine/detector.py)MTC-SRC-002
In the server's implementation (`mcp_server/user_corpus/plugin_engine/detector.py:249`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: try: proc = subprocess.run( [auval_bin, "-a"], capture_output=True, text=True, timeo
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server mcp_server/user_corpus/plugin_engine/detector.py
Tools 200
Each tool and what it can reach — statically extracted from the published source.
atlas_auditionreads sensitive dataextension_atlas_getingests untrusted inputget_splice_creditsingests untrusted inputsplice_download_presetingests untrusted inputsplice_download_sampleingests untrusted inputsplice_generate_variationingests untrusted inputsplice_pack_infoingests untrusted inputsplice_preview_sampleingests untrusted inputadd_drum_rack_padno sensitive capabilityadd_session_memoryno sensitive capability
Show 190 more tools ↓
add_warp_markerno sensitive capabilityanalyze_loop_for_extensionno sensitive capabilityanalyze_loudness_liveno sensitive capabilityanalyze_mixno sensitive capabilityanalyze_outcomesno sensitive capabilityanalyze_phrase_arcno sensitive capabilityanalyze_reference_gapsno sensitive capabilityanalyze_sampleno sensitive capabilityanalyze_sound_designno sensitive capabilityanalyze_synth_patchno sensitive capabilityapply_creative_constraint_setno sensitive capabilityapply_semantic_moveno sensitive capabilityatlas_chain_suggestno sensitive capabilityatlas_compareno sensitive capabilityatlas_cross_pack_chainno sensitive capabilityatlas_demo_storyno sensitive capabilityatlas_describe_chainno sensitive capabilityatlas_device_infono sensitive capabilityatlas_exploreno sensitive capabilityatlas_extract_chainno sensitive capabilityatlas_macro_fingerprintno sensitive capabilityatlas_pack_aware_composeno sensitive capabilityatlas_pack_infono sensitive capabilityatlas_searchno sensitive capabilityatlas_substituteno sensitive capabilityatlas_suggestno sensitive capabilityatlas_techniques_for_deviceno sensitive capabilityatlas_transplantno sensitive capabilityaudit_layerno sensitive capabilityaugment_with_samplesno sensitive capabilitybuild_project_brainno sensitive capabilitybuild_reference_profileno sensitive capabilitybuild_song_brainno sensitive capabilitybuild_world_modelno sensitive capabilitycapture_audiono sensitive capabilitycapture_stopno sensitive capabilitycheck_brief_complianceno sensitive capabilitycheck_flucomano sensitive capabilitycheck_safetyno sensitive capabilityclassify_simpler_slicesno sensitive capabilitycommit_experimentno sensitive capabilitycommit_preview_variantno sensitive capabilitycompare_experimentsno sensitive capabilitycompare_phrase_impactno sensitive capabilitycompare_phrase_rendersno sensitive capabilitycompare_preview_variantsno sensitive capabilitycompile_goal_vectorno sensitive capabilitycompile_hybrid_briefno sensitive capabilitycomposeno sensitive capabilitycompose_fast_applyno sensitive capabilitycompose_full_applyno sensitive capabilitycompressor_set_sidechainno sensitive capabilityconsult_ableton_knowledgeno sensitive capabilitycreate_experimentno sensitive capabilitycreate_preview_setno sensitive capabilitycrop_simplerno sensitive capabilitydetect_hook_neglectno sensitive capabilitydetect_identity_driftno sensitive capabilitydetect_payoff_failureno sensitive capabilitydetect_repetition_fatigueno sensitive capabilitydetect_role_conflictsno sensitive capabilitydetect_stucknessno sensitive capabilitydevelop_applyno sensitive capabilitydevelop_hookno sensitive capabilitydiscard_experimentno sensitive capabilitydiscard_preview_setno sensitive capabilitydistill_reference_principlesno sensitive capabilityevaluate_mix_moveno sensitive capabilityevaluate_moveno sensitive capabilityevaluate_sample_fitno sensitive capabilityevaluate_with_fabricno sensitive capabilityexplain_preference_vs_identityno sensitive capabilityexplain_song_identityno sensitive capabilityexplain_taste_inferenceno sensitive capabilityextension_atlas_listno sensitive capabilityextension_atlas_searchno sensitive capabilityextract_timbre_fingerprintno sensitive capabilityfind_primary_hookno sensitive capabilitygenerate_constrained_variantsno sensitive capabilitygenerate_m4l_effectno sensitive capabilitygenerate_reference_inspired_variantsno sensitive capabilityget_action_ledger_summaryno sensitive capabilityget_anti_preferencesno sensitive capabilityget_automation_stateno sensitive capabilityget_capability_stateno sensitive capabilityget_chromano sensitive capabilityget_clip_file_pathno sensitive capabilityget_composition_planno sensitive capabilityget_detected_keyno sensitive capabilityget_display_valuesno sensitive capabilityget_hidden_parametersno sensitive capabilityget_last_moveno sensitive capabilityget_masking_reportno sensitive capabilityget_master_rmsno sensitive capabilityget_master_spectrumno sensitive capabilityget_mel_spectrumno sensitive capabilityget_mix_issuesno sensitive capabilityget_mix_summaryno sensitive capabilityget_momentary_loudnessno sensitive capabilityget_noveltyno sensitive capabilityget_onsetsno sensitive capabilityget_patch_modelno sensitive capabilityget_performance_safe_movesno sensitive capabilityget_performance_stateno sensitive capabilityget_project_brain_summaryno sensitive capabilityget_promotion_candidatesno sensitive capabilityget_sample_opportunitiesno sensitive capabilityget_session_kernelno sensitive capabilityget_session_memoryno sensitive capabilityget_session_storyno sensitive capabilityget_simpler_slicesno sensitive capabilityget_sound_design_issuesno sensitive capabilityget_spectral_shapeno sensitive capabilityget_taste_dimensionsno sensitive capabilityget_taste_graphno sensitive capabilityget_taste_profileno sensitive capabilityget_technique_cardno sensitive capabilityget_turn_budgetno sensitive capabilityget_warp_markersno sensitive capabilitygrader_evaluateno sensitive capabilitygrader_evaluate_allno sensitive capabilitygrader_list_rubricsno sensitive capabilityinfer_section_purposesno sensitive capabilityinstall_m4l_deviceno sensitive capabilityiterate_toward_goalno sensitive capabilitylist_genexpr_templatesno sensitive capabilitylist_open_creative_threadsno sensitive capabilitylist_semantic_movesno sensitive capabilitylisten_abno sensitive capabilitylisten_captureno sensitive capabilityload_sample_to_simplerno sensitive capabilitymap_reference_principles_to_songno sensitive capabilitymeasure_hook_salienceno sensitive capabilitymove_warp_markerno sensitive capabilityopen_creative_threadno sensitive capabilityplan_mix_moveno sensitive capabilityplan_reference_movesno sensitive capabilityplan_sample_workflowno sensitive capabilityplan_scene_handoffno sensitive capabilityplan_slice_workflowno sensitive capabilityplan_sound_design_moveno sensitive capabilitypreview_semantic_moveno sensitive capabilityprobe_link_audiono sensitive capabilityprobe_stem_workflowno sensitive capabilitypropose_composer_branchesno sensitive capabilitypropose_next_best_moveno sensitive capabilitypropose_synth_branchesno sensitive capabilityrank_by_taste_and_identityno sensitive capabilityrank_hook_candidatesno sensitive capabilityrank_moves_by_tasteno sensitive capabilityreconnect_bridgeno sensitive capabilityrecord_anti_preferenceno sensitive capabilityrecord_positive_preferenceno sensitive capabilityrecord_turn_resolutionno sensitive capabilityreload_atlasno sensitive capabilityremove_warp_markerno sensitive capabilityrender_preview_variantno sensitive capabilityreplace_simpler_sampleno sensitive capabilityresume_last_intentno sensitive capabilityreverse_simplerno sensitive capabilityroute_requestno sensitive capabilityrun_experimentno sensitive capabilityscan_full_libraryno sensitive capabilityscore_emotional_arcno sensitive capabilityscore_phrase_impactno sensitive capabilityscrub_clipno sensitive capabilitysearch_samplesno sensitive capabilitysimpler_set_warpno sensitive capabilitysplice_add_to_collectionno sensitive capabilitysplice_catalog_huntno sensitive capabilitysplice_create_collectionno sensitive capabilitysplice_describe_soundno sensitive capabilitysplice_http_diagnoseno sensitive capabilitysplice_list_collectionsno sensitive capabilitysplice_list_presetsno sensitive capabilitysplice_preset_infono sensitive capabilitysplice_remove_from_collectionno sensitive capabilitysplice_search_in_collectionno sensitive capabilitystart_rescue_workflowno sensitive capabilitystop_scrubno sensitive capabilitysuggest_momentum_rescueno sensitive capabilitysuggest_payoff_repairno sensitive capabilitysuggest_sample_techniqueno sensitive capabilitytaste_rankno sensitive capabilitytaste_record_pairno sensitive capabilitytaste_trainno sensitive capabilityverify_all_devices_healthno sensitive capabilityverify_device_healthno sensitive capabilitywalk_device_treeno sensitive capabilitywarp_simplerno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 4
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.30.0 latest |
A 93/100 | 4 | 1.13.0 | 2026-09-07 |
v1.29.0 |
A 93/100 | 4 | 1.13.0 | 2026-08-30 |
v1.28.0 |
A 93/100 | 4 | 1.12.1 | 2026-08-21 |
v1.27.3 |
A 93/100 | 4 | 1.12.1 | 2026-07-31 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan livepilot --onlineMore in Productivity & Workflow
MCP AgentChat - 让 AI Agent 通过 Telegram 与用户实时交互：发送消息、图片，等待用户回复
A Model Context Protocol (MCP) server for Airthings Air Quality Monitor devices.
MCP server for Anki
TypeScript package for reading and searching Apple Notes on macOS via direct SQLite access. Includes markdown conversion, attachment support, and offers a local MCP server!
Verified biotech catalyst calendar (PDUFA/AdComm/trial readouts) anchored to official sources.
Appointment booking platform letting agents check provider availability and create bookings.