Noovichat MCP Server
@nooviai/noovichat-mcp
npm
v0.16.0
Published by @nooviai — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
Model Context Protocol server for NooviChat — exposes Pipeline Pro, Follow-Ups, Atendimentos, Broadcasts, WhatsApp Templates, WAHA/UAZAPI and other custom NooviChat features as tools for Claude Desktop / Claude Code / Cursor / VS Code.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 4 = 96. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 3
medium Untrusted input can drive an external actionMTC-FLOW-005
Untrusted-input tools ([refresh_waha_qr]) co-exist with external-action tools ([create_activity_sequence, update_activity_sequence, activate_activity_sequence, deactivate_activity_sequence, create_pipeline_webhook, update_pipeline_webhook, delete_pipeline_webhook, test_pipeline_webhook, regenerate_webhook_secret, trigger_pipeline_automation_via_webhook, verify_pipeline_automation_webhook, update_waha_webhook_settings]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.
Evidence: untrusted [refresh_waha_qr] → sinks [create_activity_sequence, update_activity_sequence, activate_activity_sequence, deactivate_activity_sequence, create_pipeli
Fix: Require confirmation for state-changing/egress actions triggered after processing untrusted content.
Location: flow refresh_waha_qr → create_activity_sequence
medium Unconstrained URL/host parameter "url" on "create_pipeline_webhook"MTC-CAP-007
Tool "create_pipeline_webhook" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool create_pipeline_webhook · inputSchema.properties.url
medium Unconstrained URL/host parameter "url" on "update_pipeline_webhook"MTC-CAP-007
Tool "update_pipeline_webhook" takes a URL/host parameter "url" with no allowlist/pattern. An outbound-request tool with an unbounded destination enables SSRF and cloud-metadata access (e.g. 169.254.169.254).
Fix: Allowlist destinations or constrain the parameter; block private/link-local addresses server-side.
Location: tool update_pipeline_webhook · inputSchema.properties.url
Tools 200
Each tool and what it can reach — statically extracted from the published source.
activate_activity_sequencenetwork egresscreate_activity_sequencenetwork egresscreate_pipeline_webhooknetwork egressdeactivate_activity_sequencenetwork egressdelete_pipeline_webhooknetwork egressrefresh_waha_qringests untrusted inputregenerate_webhook_secretnetwork egresstest_pipeline_webhooknetwork egresstrigger_pipeline_automation_via_webhooknetwork egressupdate_activity_sequencenetwork egress
Show 190 more tools ↓
update_pipeline_webhooknetwork egressupdate_waha_webhook_settingsnetwork egressverify_pipeline_automation_webhooknetwork egressadd_card_contactno sensitive capabilityadd_card_conversationno sensitive capabilityadd_pipeline_stageno sensitive capabilityadd_to_broadcast_blacklistno sensitive capabilityassign_card_ownerno sensitive capabilitybuild_automation_flowno sensitive capabilitybulk_appointment_actionno sensitive capabilitybulk_assign_cardsno sensitive capabilitybulk_create_activitiesno sensitive capabilitybulk_delete_cardsno sensitive capabilitybulk_set_card_priorityno sensitive capabilitycancel_activityno sensitive capabilitycancel_appointmentno sensitive capabilitycancel_broadcastno sensitive capabilitycancel_followupno sensitive capabilitycomplete_activityno sensitive capabilitycomplete_appointmentno sensitive capabilitycomplete_sequence_stepno sensitive capabilityconfirm_appointmentno sensitive capabilityconnect_uazapino sensitive capabilitycount_conversation_followupsno sensitive capabilitycreate_activity_from_templateno sensitive capabilitycreate_activity_templateno sensitive capabilitycreate_appointmentno sensitive capabilitycreate_broadcastno sensitive capabilitycreate_cardno sensitive capabilitycreate_followupno sensitive capabilitycreate_followup_automationno sensitive capabilitycreate_followup_templateno sensitive capabilitycreate_followup_template_itemno sensitive capabilitycreate_partnerno sensitive capabilitycreate_pipelineno sensitive capabilitycreate_pipeline_activityno sensitive capabilitycreate_pipeline_automationno sensitive capabilitycreate_professionalno sensitive capabilitycreate_serviceno sensitive capabilitydelete_activity_sequenceno sensitive capabilitydelete_activity_templateno sensitive capabilitydelete_broadcastno sensitive capabilitydelete_cardno sensitive capabilitydelete_card_sequenceno sensitive capabilitydelete_followup_automationno sensitive capabilitydelete_followup_templateno sensitive capabilitydelete_followup_template_itemno sensitive capabilitydelete_partnerno sensitive capabilitydelete_pipelineno sensitive capabilitydelete_pipeline_activityno sensitive capabilitydelete_pipeline_automationno sensitive capabilitydelete_professionalno sensitive capabilitydelete_serviceno sensitive capabilitydisconnect_uazapino sensitive capabilitydisconnect_wahano sensitive capabilitydry_run_automationno sensitive capabilityduplicate_activity_sequenceno sensitive capabilityduplicate_activity_templateno sensitive capabilityduplicate_automationno sensitive capabilityduplicate_broadcastno sensitive capabilityexecute_automationno sensitive capabilityexport_appointments_csvno sensitive capabilityexport_automationno sensitive capabilityexport_broadcastno sensitive capabilityexport_cardsno sensitive capabilityexternal_start_sequenceno sensitive capabilityget_activities_analyticsno sensitive capabilityget_activity_sequenceno sensitive capabilityget_activity_templateno sensitive capabilityget_appointmentno sensitive capabilityget_appointment_availabilityno sensitive capabilityget_appointment_availability_rangeno sensitive capabilityget_appointments_metricsno sensitive capabilityget_automation_audit_logsno sensitive capabilityget_automation_catalogno sensitive capabilityget_automation_executionsno sensitive capabilityget_automation_rate_limitno sensitive capabilityget_automation_statsno sensitive capabilityget_automation_templateno sensitive capabilityget_automations_dashboardno sensitive capabilityget_broadcastno sensitive capabilityget_broadcast_contactsno sensitive capabilityget_cardno sensitive capabilityget_card_timelineno sensitive capabilityget_followupno sensitive capabilityget_followup_automationno sensitive capabilityget_followup_templateno sensitive capabilityget_followups_reportno sensitive capabilityget_import_templateno sensitive capabilityget_partnerno sensitive capabilityget_pipelineno sensitive capabilityget_pipeline_activityno sensitive capabilityget_pipeline_analytics_dashboardno sensitive capabilityget_pipeline_automationno sensitive capabilityget_pipeline_stagesno sensitive capabilityget_pipeline_webhookno sensitive capabilityget_professionalno sensitive capabilityget_professional_availabilityno sensitive capabilityget_sequence_analyticsno sensitive capabilityget_serviceno sensitive capabilityget_uazapi_settingsno sensitive capabilityget_uazapi_statusno sensitive capabilityget_waha_settingsno sensitive capabilityget_waha_statusno sensitive capabilityimport_automationsno sensitive capabilitylist_activity_sequencesno sensitive capabilitylist_activity_templatesno sensitive capabilitylist_all_automation_audit_logsno sensitive capabilitylist_all_automation_executionsno sensitive capabilitylist_appointment_clientsno sensitive capabilitylist_appointmentsno sensitive capabilitylist_automation_rate_limitsno sensitive capabilitylist_automation_template_categoriesno sensitive capabilitylist_automation_templatesno sensitive capabilitylist_available_professionalsno sensitive capabilitylist_broadcast_blacklistno sensitive capabilitylist_broadcastsno sensitive capabilitylist_card_sequencesno sensitive capabilitylist_cardsno sensitive capabilitylist_discarded_cardsno sensitive capabilitylist_followup_automationsno sensitive capabilitylist_followup_template_itemsno sensitive capabilitylist_followup_template_variablesno sensitive capabilitylist_followup_templatesno sensitive capabilitylist_followupsno sensitive capabilitylist_partnersno sensitive capabilitylist_pipeline_activitiesno sensitive capabilitylist_pipeline_automationsno sensitive capabilitylist_pipeline_webhooksno sensitive capabilitylist_pipelinesno sensitive capabilitylist_professionalsno sensitive capabilitylist_servicesno sensitive capabilitymark_appointment_no_showno sensitive capabilitymark_card_lostno sensitive capabilitymark_card_wonno sensitive capabilitymove_card_to_stageno sensitive capabilityoverride_card_lead_scoreno sensitive capabilitypause_broadcastno sensitive capabilitypause_card_sequenceno sensitive capabilitypermanently_delete_cardno sensitive capabilitypreview_followup_templateno sensitive capabilitypull_waha_chatsno sensitive capabilitypull_waha_contactsno sensitive capabilitypull_waha_messagesno sensitive capabilityrecalculate_card_lead_scoreno sensitive capabilityreconfigure_uazapi_chatwootno sensitive capabilityreconnect_uazapino sensitive capabilityreconnect_wahano sensitive capabilityremove_card_contactno sensitive capabilityremove_card_conversationno sensitive capabilityremove_from_broadcast_blacklistno sensitive capabilityremove_pipeline_stageno sensitive capabilityreopen_cardno sensitive capabilityreorder_cardsno sensitive capabilityreorder_followup_template_itemsno sensitive capabilityrequest_uazapi_pairing_codeno sensitive capabilityrequest_waha_pairing_codeno sensitive capabilityreschedule_activityno sensitive capabilityrestore_cardno sensitive capabilityresume_broadcastno sensitive capabilityresume_card_sequenceno sensitive capabilityretry_failed_broadcastno sensitive capabilityretry_send_followupno sensitive capabilitysearch_activitiesno sensitive capabilitysearch_followupsno sensitive capabilitystart_activityno sensitive capabilitystart_card_sequenceno sensitive capabilitystart_waha_sessionno sensitive capabilitystop_waha_sessionno sensitive capabilityupdate_activity_templateno sensitive capabilityupdate_appointmentno sensitive capabilityupdate_broadcastno sensitive capabilityupdate_cardno sensitive capabilityupdate_card_qualification_checklistno sensitive capabilityupdate_followupno sensitive capabilityupdate_followup_automationno sensitive capabilityupdate_followup_templateno sensitive capabilityupdate_partnerno sensitive capabilityupdate_pipelineno sensitive capabilityupdate_pipeline_activityno sensitive capabilityupdate_pipeline_automationno sensitive capabilityupdate_pipeline_stageno sensitive capabilityupdate_professionalno sensitive capabilityupdate_serviceno sensitive capabilityupdate_uazapi_settingsno sensitive capabilityupdate_waha_chatwoot_app_settingsno sensitive capabilityupdate_waha_session_settingsno sensitive capabilityuse_automation_templateno sensitive capabilityvalidate_automationno sensitive capabilityvalidate_automation_flowno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 2
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.16.0 latest |
A 96/100 | 3 | 1.13.0 | 2026-09-07 |
v0.14.0 |
A 96/100 | 3 | 1.13.0 | 2026-08-30 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @nooviai/noovichat-mcp --onlineMore in Business & CRM
Free public tax reference data — GST/VAT, income, company and capital-gains tax rules for 50+ countries.
The approval gate for unattended UCP buying agents — a policy/approval MCP proxy in front of a merchant's UCP checkout endpoint.
Autotask PSA MCP server. Generic entity query/get/create/update across the full REST API plus convenience tools for tickets, companies, contacts, projects, tasks and time entries. AI-safe with readonly mode and destructive-action confirmation. stdio + opt
MCP server for B2C Commerce developer experience tools
Search, compare and contact real-world companies through a public MCP business directory.
Norwegian business register (Brønnøysundregistrene) as an MCP server — companies, roles, subunits and annual accounts, with the register's silent traps encoded as guards.