Neuron — the complete, unedited output of the deterministic mcptrustchecker engine v1.13.0, scanned . Every finding, capability tag and score component below is exactly what the engine produced — no AI, no post-processing.
{
"tool": {
"name": "mcptrustchecker",
"version": "1.13.0",
"methodologyVersion": "mcptrustchecker-1.13"
},
"target": {
"id": "neuron-mcp-server",
"source": {
"kind": "package",
"origin": "neuron-mcp-server"
},
"server": {
"name": "neuron-mcp-server"
}
},
"grade": "A",
"score": {
"score": 96,
"threatScore": 100,
"grade": "A",
"band": "A",
"categorySubtotals": {
"injection": 0,
"exfiltration": 0,
"permissions": 0,
"supply-chain": 0,
"network": 0,
"hygiene": 0
},
"vector": [
{
"kind": "client",
"term": "capability-exposure",
"level": "moderate",
"label": "capability blast radius (moderate) — client exposure if the model is manipulated",
"appliedPenalty": 3
},
{
"kind": "client",
"term": "verification-discount",
"level": "repo",
"label": "publisher verification (public source) — no provenance, but the source is public and inspectable",
"appliedPenalty": 1
},
{
"kind": "client",
"term": "coverage-honesty",
"level": "source",
"label": "inspection depth (source) — how much of the target the scan could see",
"appliedPenalty": 0
}
],
"gatesFired": [],
"methodologyVersion": "mcptrustchecker-1.13"
},
"capability": {
"level": "moderate",
"reasons": [
"ingests untrusted external content (a prompt-injection entry point)",
"can send data / act on an external service"
],
"tags": [
"untrusted-input",
"external-sink"
]
},
"coverage": {
"level": "source",
"inputs": {
"toolSurface": true,
"implementationSource": true,
"packageMetadata": true,
"liveTransport": false
},
"caveats": [
"Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command \"npx -y <package>\"."
]
},
"findings": [
{
"ruleId": "MTC-FLOW-005",
"title": "Untrusted input can drive an external action",
"category": "exfiltration",
"severity": "medium",
"confidence": "strong",
"description": "Untrusted-input tools ([neuron_get_approval, neuron_campaign_marketplace, neuron_create_lead_source, neuron_browse_list_pool, neuron_refresh_newsletter]) co-exist with external-action tools ([neuron_send_message]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.",
"remediation": "Require confirmation for state-changing/egress actions triggered after processing untrusted content.",
"location": {
"kind": "flow",
"name": "neuron_get_approval → neuron_send_message"
},
"evidence": "untrusted [neuron_get_approval, neuron_campaign_marketplace, neuron_create_lead_source, neuron_browse_list_pool, neuron_refresh_newsletter] → sinks [neuron_send",
"owasp": "LLM06:2025 Excessive Agency",
"references": [],
"data": {
"untrusted": [
"neuron_get_approval",
"neuron_campaign_marketplace",
"neuron_create_lead_source",
"neuron_browse_list_pool",
"neuron_refresh_newsletter"
],
"sinks": [
"neuron_send_message"
]
}
}
],
"toxicFlows": [
{
"id": "flow-1",
"severity": "medium",
"confidence": "strong",
"untrustedInput": [
"neuron_get_approval",
"neuron_campaign_marketplace",
"neuron_create_lead_source",
"neuron_browse_list_pool",
"neuron_refresh_newsletter"
],
"sensitiveSource": [],
"externalSink": [
"neuron_send_message"
],
"selfContained": false,
"description": "Untrusted input can drive an external action even though no sensitive source is exposed."
}
],
"capabilities": [
{
"tool": "neuron_rewrite_text",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_request_approval",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_approval",
"tags": [
"untrusted-input"
],
"reasons": {
"untrusted-input": [
"keyword \"fetch\""
]
}
},
{
"tool": "neuron_list_approvals",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_respond_approval",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_cancel_approval",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_audit_logs",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_register",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_login",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_refresh_token",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_switch_org",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_organizations",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_profile",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_whoami",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_switch_instance",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_logout",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_billing",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_checkout",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_cancel_subscription",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_blog_post",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_blog_posts",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_blog_post",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_blog_post",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_blog_post",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_publish_blog_post",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_api_key",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_api_keys",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_revoke_api_key",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_bot_api_chat",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_bot_api_send",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_bot_api_list_conversations",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_bot_api_get_messages",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_bot_api_get_bot",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_bot",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_bots",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_bot",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_bot",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_bot",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_pause_bot",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_resume_bot",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_bot_analytics",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_attach_knowledge_base",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_bot_knowledge_bases",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_detach_knowledge_base",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_broadcasts",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_broadcast",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_broadcast",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_broadcast_recipients",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_broadcast",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_broadcast",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_send_broadcast",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_builtin_tools",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_toggle_builtin_tool",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_bulk_toggle_builtin_tools",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_campaigns",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_campaign_marketplace",
"tags": [
"untrusted-input"
],
"reasons": {
"untrusted-input": [
"keyword \"browse\""
]
}
},
{
"tool": "neuron_create_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_submit_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_fund_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_join_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_eligible_contacts",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_send_campaign_message",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_my_participations",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_campaign_participants",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_pause_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_resume_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_stop_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_channels",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_channel",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_channel",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_channel",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_channel",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_assign_bot_to_channel",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_unassign_bot_from_channel",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_start_channel_session",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_stop_channel_session",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_channel_status",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_request_pair_code",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_channel_groups",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_group_participants",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_whatsapp_contacts",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_channel_events",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_channel_qr",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_bot_channels",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_add_bot_channel",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_remove_bot_channel",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_contact_lists",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_contact_list",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_contact_list",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_contact_list",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_contact_list",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_contact_list_members",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_add_to_contact_list",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_remove_from_contact_list",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_merge_contact_lists",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_find_contact_lists_for_contact",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_refresh_contact_list",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_contacts",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_search_contacts",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_contact",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_contact",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_contact",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_contact",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_export_contacts",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_import_contacts",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_populate_contacts",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_sync_whatsapp_contacts",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_semantic_search_contacts",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_audio_contact",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_conversations",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_conversation",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_messages",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_takeover_conversation",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_release_conversation",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_send_message",
"tags": [
"external-sink"
],
"reasons": {
"external-sink": [
"keyword \"send_message\""
]
}
},
{
"tool": "neuron_compose_message",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_send_whatsapp",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_edit_message",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_message",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_close_conversation",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_flow_catalog",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_flows",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_flow",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_flow",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_flow",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_flow",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_toggle_flow",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_run_flow",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_flow_runs",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_flow_run",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_cancel_flow_run",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_group",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_add_group_members",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_remove_group_members",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_group_subject",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_group_description",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_group_settings",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_group_members",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_set_group_join_approval",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_handle_join_requests",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_revoke_group_invite",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_leave_group",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_knowledge_base",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_knowledge_bases",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_knowledge_base",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_knowledge_base",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_knowledge_base",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_kb_entry",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_kb_entries",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_kb_entry",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_kb_entry",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_upload_document",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_search_knowledge",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_kb_bots",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_ingest_knowledge",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_sync_knowledge",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_lead_sources",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_lead_source",
"tags": [
"untrusted-input"
],
"reasons": {
"untrusted-input": [
"keyword \"scrape\""
]
}
},
{
"tool": "neuron_run_lead_source",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_extract_leads",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_leads",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_lead_stats",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_convert_lead",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_list_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_list_campaigns",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_list_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_list_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_pause_list_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_resume_list_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_run_list_campaign_now",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_list_campaign",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_browse_list_pool",
"tags": [
"untrusted-input"
],
"reasons": {
"untrusted-input": [
"keyword \"browse\""
]
}
},
{
"tool": "neuron_submit_to_list_pool",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_ad_request",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_ad_requests",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_ad_request_analytics",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_ad_request",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_ad_request",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_ad_request",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_submit_ad_request",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_fund_ad_request",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_pause_ad_request",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_resume_ad_request",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_stop_ad_request",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_upload_media",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_list_newsletters",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_create_newsletter",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_newsletter",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_newsletter",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_delete_newsletter",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_post_to_newsletter",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_post_to_status",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_refresh_newsletter",
"tags": [
"untrusted-input"
],
"reasons": {
"untrusted-input": [
"keyword \"fetch\""
]
}
},
{
"tool": "neuron_sync_newsletters",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_get_organization",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_organization",
"tags": [],
"reasons": {}
},
{
"tool": "neuron_update_whatsapp_credentials",
"tags": [],
"reasons": {}
}
],
"surfaceDigest": "0b7861459db7dbabd80fc0c96469688bb67266039a1418a828e88eb3df057264",
"stats": {
"tools": 200,
"prompts": 0,
"resources": 0,
"findingsBySeverity": {
"critical": 0,
"high": 0,
"medium": 1,
"low": 0,
"info": 0
}
}
}