Nevent MCP Server
mcp-nevent
npm
v1.8.0
Source verified
Published by nevent-dev — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.
Official Nevent MCP server. Talk to your live-events CRM (campaigns, analytics, paid ads, segments, short URLs, media library) in Claude and ChatGPT. 55 tools across 10 categories with OAuth 2.1 and stdio transports.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 6 = 94. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
high Sensitive-source and external-sink co-existMTC-FLOW-004
Tools that read sensitive data ([nevent_list_campaign_recipients]) and tools that can send data out ([nevent_create_campaign, nevent_get_sending_profile]) are exposed together. An agent can move private data to the sink.
Evidence: sources [nevent_list_campaign_recipients] → sinks [nevent_create_campaign, nevent_get_sending_profile]
Fix: Keep secret-reading and egress capabilities on separate, separately-approved servers.
Location: flow nevent_list_campaign_recipients → nevent_create_campaign
Tools 59
Each tool and what it can reach — statically extracted from the published source.
nevent_create_campaignnetwork egressnevent_get_sending_profilenetwork egressnevent_list_campaign_recipientsreads sensitive datanevent_analytics_capabilitiesno sensitive capabilitynevent_analytics_filter_valuesno sensitive capabilitynevent_analytics_queryno sensitive capabilitynevent_analytics_table_schemano sensitive capabilitynevent_campaign_reportno sensitive capabilitynevent_clone_templateno sensitive capabilitynevent_create_bulk_user_short_urlsno sensitive capability
Show 49 more tools ↓
nevent_create_segmentno sensitive capabilitynevent_create_short_urlno sensitive capabilitynevent_create_templateno sensitive capabilitynevent_delete_imageno sensitive capabilitynevent_dimension_valuesno sensitive capabilitynevent_get_campaignno sensitive capabilitynevent_get_campaign_insightsno sensitive capabilitynevent_get_campaign_metricsno sensitive capabilitynevent_get_paid_ad_creativeno sensitive capabilitynevent_get_paid_ad_group_comparative_statsno sensitive capabilitynevent_get_paid_ad_group_insightsno sensitive capabilitynevent_get_paid_ad_group_targetingno sensitive capabilitynevent_get_paid_campaign_insightsno sensitive capabilitynevent_get_segmentno sensitive capabilitynevent_get_short_urlno sensitive capabilitynevent_get_short_url_campaign_metricsno sensitive capabilitynevent_get_short_url_clicksno sensitive capabilitynevent_get_short_url_metricsno sensitive capabilitynevent_get_suppressions_summaryno sensitive capabilitynevent_get_templateno sensitive capabilitynevent_helpno sensitive capabilitynevent_list_campaignsno sensitive capabilitynevent_list_imagesno sensitive capabilitynevent_list_paid_ad_groupsno sensitive capabilitynevent_list_paid_adsno sensitive capabilitynevent_list_paid_campaignsno sensitive capabilitynevent_list_segmentsno sensitive capabilitynevent_list_short_url_destinationsno sensitive capabilitynevent_list_short_url_user_linksno sensitive capabilitynevent_list_short_urlsno sensitive capabilitynevent_list_templatesno sensitive capabilitynevent_list_tenantsno sensitive capabilitynevent_paid_ads_healthno sensitive capabilitynevent_paid_ads_statusno sensitive capabilitynevent_paid_attributionno sensitive capabilitynevent_preview_templateno sensitive capabilitynevent_quote_campaignno sensitive capabilitynevent_rename_templateno sensitive capabilitynevent_reset_tenantno sensitive capabilitynevent_schedule_campaignno sensitive capabilitynevent_segment_executeno sensitive capabilitynevent_segment_previewno sensitive capabilitynevent_segmentation_criteriano sensitive capabilitynevent_send_test_templateno sensitive capabilitynevent_switch_tenantno sensitive capabilitynevent_update_segmentno sensitive capabilitynevent_update_short_urlno sensitive capabilitynevent_update_templateno sensitive capabilitynevent_upload_imageno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (59 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 3
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.8.0 latest |
A 94/100 | 1 | 1.13.0 | 2026-09-07 |
v1.7.1 |
A 96/100 | 0 | 1.12.1 | 2026-08-24 |
v1.4.1 |
A 97/100 | 0 | 1.12.1 | 2026-07-31 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan mcp-nevent --onlineMore in Marketing & Social
Official Abyssfall game info, newsletter double opt-in, and merch reservation tools.
AdCritter ads platform: docs, API reference, app scaffolding, and white-label integration.
Google AdSense MCP Server - Monitor earnings, reports, and account health via Claude/AI
Operational empathy for technical founders + PE/VC operators navigating high-stakes B2B interactions. 28 MCP tools + CLI: ICP scoring, persona simulation, battlecards, deal classification, prospect discovery, investor matching, founder wellness, plus mark
MCP server for Bing Webmaster Tools — SEO site management, URL submission, sitemaps, stats, keywords
MCP (Model Context Protocol) server that helps AI agents use Primer Brand (@primer/react-brand) correctly when building GitHub marketing and landing pages.