Mergeon MCP Server
mergeon-mcp
npm
v1.88.0
Published by an unidentified publisher — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
MCP server for MergeOn Seller — manage your ecommerce CRM, orders, products, flows, calendar and more from Claude
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 5 = 95. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −2 | publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 200
Each tool and what it can reach — statically extracted from the published source.
nurturing_get_catalognetwork egressadmin_channel_conversation_getno sensitive capabilityadmin_channel_conversations_listno sensitive capabilityadmin_ecommerce_createno sensitive capabilityadmin_ecommerce_set_implementerno sensitive capabilityadmin_ecommerce_set_trialno sensitive capabilityadmin_ecommerce_updateno sensitive capabilityadmin_ecommerces_listno sensitive capabilityadmin_portfolio_number_assignno sensitive capabilityadmin_portfolio_number_releaseno sensitive capability
Show 190 more tools ↓
admin_portfolio_numbers_listno sensitive capabilityadmin_prompts_getno sensitive capabilityadmin_prompts_updateno sensitive capabilityadmin_subscription_createno sensitive capabilityadmin_subscription_getno sensitive capabilityadmin_subscription_updateno sensitive capabilityadmin_subscriptions_listno sensitive capabilityadmin_whatsapp_disconnectno sensitive capabilityadmin_whatsapp_linkno sensitive capabilityadvisors_alert_template_createno sensitive capabilityadvisors_alert_template_statusno sensitive capabilityadvisors_assignment_getno sensitive capabilityadvisors_assignment_setno sensitive capabilityadvisors_notifications_setno sensitive capabilityagent_model_getno sensitive capabilityagent_model_setno sensitive capabilityagent_password_verifyno sensitive capabilityagent_plan_getno sensitive capabilityagent_prompts_deleteno sensitive capabilityagent_prompts_generateno sensitive capabilityagent_prompts_getno sensitive capabilityagent_prompts_updateno sensitive capabilityagent_provider_key_deleteno sensitive capabilityagent_provider_key_setno sensitive capabilityagent_tools_getno sensitive capabilityagent_tools_updateno sensitive capabilityagents_createno sensitive capabilityagents_deleteno sensitive capabilityagents_getno sensitive capabilityagents_listno sensitive capabilityagents_updateno sensitive capabilityagents_usage_assignno sensitive capabilityagents_usages_getno sensitive capabilityanalytics_ordersno sensitive capabilityappointment_reminders_createno sensitive capabilityappointment_reminders_deleteno sensitive capabilityappointment_reminders_listno sensitive capabilityappointment_reminders_previewno sensitive capabilityappointment_reminders_runno sensitive capabilityappointment_reminders_updateno sensitive capabilityazure_credential_createno sensitive capabilityazure_credential_deleteno sensitive capabilityazure_credential_updateno sensitive capabilitybusiness_context_createno sensitive capabilitybusiness_context_deleteno sensitive capabilitybusiness_context_listno sensitive capabilitybusiness_context_updateno sensitive capabilitycalendar_completeno sensitive capabilitycalendar_createno sensitive capabilitycalendar_deleteno sensitive capabilitycalendar_getno sensitive capabilitycalendar_listno sensitive capabilitycalendar_resource_availabilityno sensitive capabilitycalendar_todayno sensitive capabilitycalendar_upcomingno sensitive capabilitycalendar_updateno sensitive capabilitychannels_get_catalogno sensitive capabilityconnection_link_createno sensitive capabilityconversations_delete_messagesno sensitive capabilityconversations_getno sensitive capabilityconversations_listno sensitive capabilityconversations_rangeno sensitive capabilityconversations_searchno sensitive capabilitycrm_bulk_importno sensitive capabilitycrm_createno sensitive capabilitycrm_custom_statuses_setno sensitive capabilitycrm_deleteno sensitive capabilitycrm_getno sensitive capabilitycrm_interests_aggregateno sensitive capabilitycrm_listno sensitive capabilitycrm_tier_rules_getno sensitive capabilitycrm_tier_rules_setno sensitive capabilitycrm_updateno sensitive capabilitycustom_tools_createno sensitive capabilitycustom_tools_deleteno sensitive capabilitycustom_tools_getno sensitive capabilitycustom_tools_listno sensitive capabilitycustom_tools_testno sensitive capabilitycustom_tools_updateno sensitive capabilityecommerce_admin_assistant_setno sensitive capabilityecommerce_agent_debounce_setno sensitive capabilityecommerce_agent_pilot_getno sensitive capabilityecommerce_agent_pilot_setno sensitive capabilityecommerce_agent_reasoning_setno sensitive capabilityecommerce_booking_rules_getno sensitive capabilityecommerce_booking_rules_setno sensitive capabilityecommerce_capabilities_getno sensitive capabilityecommerce_capabilities_setno sensitive capabilityecommerce_coexistence_getno sensitive capabilityecommerce_coexistence_setno sensitive capabilityecommerce_config_updateno sensitive capabilityecommerce_delivery_zones_getno sensitive capabilityecommerce_delivery_zones_setno sensitive capabilityecommerce_getno sensitive capabilityecommerce_message_retention_setno sensitive capabilityecommerce_preparation_getno sensitive capabilityecommerce_preparation_setno sensitive capabilityecommerce_product_visibility_getno sensitive capabilityecommerce_product_visibility_setno sensitive capabilityecommerce_resources_setno sensitive capabilityecommerce_schedule_setno sensitive capabilityecommerce_updateno sensitive capabilityecommerce_verticals_listno sensitive capabilityecommerce_whatsapp_catalog_disconnectno sensitive capabilityecommerce_whatsapp_catalog_statusno sensitive capabilityecommerce_whatsapp_catalog_syncno sensitive capabilityecommerce_worker_visibility_setno sensitive capabilityexperiments_createno sensitive capabilityexperiments_deleteno sensitive capabilityexperiments_listno sensitive capabilityexperiments_updateno sensitive capabilityflows_createno sensitive capabilityflows_deleteno sensitive capabilityflows_executeno sensitive capabilityflows_get_catalogno sensitive capabilityflows_historyno sensitive capabilityflows_history_summaryno sensitive capabilityflows_listno sensitive capabilityflows_updateno sensitive capabilityforms_createno sensitive capabilityforms_deleteno sensitive capabilityforms_getno sensitive capabilityforms_get_catalogno sensitive capabilityforms_listno sensitive capabilityforms_submissions_listno sensitive capabilityforms_tracking_codes_createno sensitive capabilityforms_tracking_codes_deleteno sensitive capabilityforms_tracking_codes_listno sensitive capabilityforms_tracking_codes_updateno sensitive capabilityforms_updateno sensitive capabilitylines_available_numbersno sensitive capabilitylines_createno sensitive capabilitylines_deleteno sensitive capabilitylines_get_catalogno sensitive capabilitylines_listno sensitive capabilitylines_updateno sensitive capabilitymarketing_campaignsno sensitive capabilitymarketing_rate_limitno sensitive capabilitymarketing_send_bulkno sensitive capabilitymedia_uploadno sensitive capabilitymeta_events_advertisement_getno sensitive capabilitymeta_events_advertisement_listno sensitive capabilitymeta_events_advertisements_listno sensitive capabilitymeta_events_get_catalogno sensitive capabilitymeta_events_health_checkno sensitive capabilitymeta_events_order_capi_previewno sensitive capabilitymeta_events_order_capi_statusno sensitive capabilitymeta_events_orders_pending_capino sensitive capabilitymeta_events_send_bulk_capino sensitive capabilitymeta_events_send_order_capino sensitive capabilitynps_config_getno sensitive capabilitynps_config_updateno sensitive capabilitynps_responses_listno sensitive capabilitynps_summaryno sensitive capabilitynurturing_create_sequenceno sensitive capabilitynurturing_flow_createno sensitive capabilitynurturing_flow_deleteno sensitive capabilitynurturing_flow_updateno sensitive capabilitynurturing_flows_listno sensitive capabilitynurturing_logsno sensitive capabilityorders_assign_paymentno sensitive capabilityorders_card_config_getno sensitive capabilityorders_card_config_setno sensitive capabilityorders_createno sensitive capabilityorders_create_shipmentno sensitive capabilityorders_export_config_getno sensitive capabilityorders_export_config_updateno sensitive capabilityorders_getno sensitive capabilityorders_listno sensitive capabilityorders_updateno sensitive capabilitypayment_methods_createno sensitive capabilitypayment_methods_deleteno sensitive capabilitypayment_methods_listno sensitive capabilitypayment_methods_updateno sensitive capabilitypayphone_connectno sensitive capabilitypayphone_disconnectno sensitive capabilityplans_createno sensitive capabilityplans_deleteno sensitive capabilityplans_getno sensitive capabilityplans_listno sensitive capabilityplans_updateno sensitive capabilityproducts_bulk_createno sensitive capabilityproducts_bulk_updateno sensitive capabilityproducts_createno sensitive capabilityproducts_getno sensitive capabilityproducts_listno sensitive capabilityproducts_updateno sensitive capabilityreviews_createno sensitive capabilityreviews_deleteno sensitive capabilityreviews_listno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 10
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.88.0 latest |
A 95/100 | 0 | 1.13.0 | 2026-09-07 |
v1.84.1 |
A 95/100 | 0 | 1.13.0 | 2026-09-01 |
v1.84.0 |
A 95/100 | 0 | 1.13.0 | 2026-08-28 |
v1.83.0 |
A 95/100 | 0 | 1.13.0 | 2026-08-27 |
v1.82.0 |
A 95/100 | 0 | 1.13.0 | 2026-08-25 |
Show 5 more versions ↓
v1.79.0 |
A 95/100 | 0 | 1.12.1 | 2026-08-22 |
v1.70.0 |
A 95/100 | 0 | 1.12.1 | 2026-08-21 |
v1.69.0 |
A 95/100 | 0 | 1.12.1 | 2026-08-14 |
v1.68.0 |
A 95/100 | 0 | 1.12.1 | 2026-08-12 |
v1.65.0 |
A 95/100 | 0 | 1.12.1 | 2026-08-05 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan mergeon-mcp --onlineMore in Business & CRM
Free public tax reference data — GST/VAT, income, company and capital-gains tax rules for 50+ countries.
The approval gate for unattended UCP buying agents — a policy/approval MCP proxy in front of a merchant's UCP checkout endpoint.
Autotask PSA MCP server. Generic entity query/get/create/update across the full REST API plus convenience tools for tickets, companies, contacts, projects, tasks and time entries. AI-safe with readonly mode and destructive-action confirmation. stdio + opt
MCP server for B2C Commerce developer experience tools
Search, compare and contact real-world companies through a public MCP business directory.
Norwegian business register (Brønnøysundregistrene) as an MCP server — companies, roles, subunits and annual accounts, with the register's silent traps encoded as guards.