Uniscout MCP Server
@refinestudiolabs/uniscout-mcp
npm
v0.10.0
Published by @refinestudiolabs — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
MCP server for Uni Scout CRM. Exposes 150 tools across CRM, tasks, documents, contacts and events, meetings, projects (hubs), channels and the investor directory.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 2 = 98. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −2 | publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 116
Each tool and what it can reach — statically extracted from the published source.
activities_listno sensitive capabilityaudit_events_listno sensitive capabilitycalendar_create_eventno sensitive capabilitycalendar_delete_eventno sensitive capabilitycalendar_list_eventsno sensitive capabilitycalendar_list_google_calendarsno sensitive capabilitycalendar_preferencesno sensitive capabilitycalendar_syncno sensitive capabilitycalendar_update_preferencesno sensitive capabilitychannels_createno sensitive capability
Show 106 more tools ↓
channels_deleteno sensitive capabilitychannels_getno sensitive capabilitychannels_listno sensitive capabilitychannels_list_deletedno sensitive capabilitychannels_restoreno sensitive capabilitychannels_updateno sensitive capabilitycomments_createno sensitive capabilitycomments_deleteno sensitive capabilitycomments_listno sensitive capabilitycrm_bulk_deleteno sensitive capabilitycrm_bulk_updateno sensitive capabilitycrm_check_duplicatesno sensitive capabilitycrm_create_columnno sensitive capabilitycrm_create_rowno sensitive capabilitycrm_create_rowsno sensitive capabilitycrm_create_tableno sensitive capabilitycrm_delete_columnno sensitive capabilitycrm_delete_rowno sensitive capabilitycrm_delete_tableno sensitive capabilitycrm_get_rowno sensitive capabilitycrm_get_view_configno sensitive capabilitycrm_import_rowsno sensitive capabilitycrm_list_columnsno sensitive capabilitycrm_list_rowsno sensitive capabilitycrm_list_tablesno sensitive capabilitycrm_merge_rowsno sensitive capabilitycrm_move_table_to_channelno sensitive capabilitycrm_rename_tableno sensitive capabilitycrm_rows_by_dateno sensitive capabilitycrm_rows_by_stageno sensitive capabilitycrm_rows_groupedno sensitive capabilitycrm_save_view_configno sensitive capabilitycrm_update_columnno sensitive capabilitycrm_update_fieldno sensitive capabilitycrm_update_rowno sensitive capabilitydocs_append_contentno sensitive capabilitydocs_by_rowno sensitive capabilitydocs_createno sensitive capabilitydocs_create_folderno sensitive capabilitydocs_deleteno sensitive capabilitydocs_delete_folderno sensitive capabilitydocs_getno sensitive capabilitydocs_listno sensitive capabilitydocs_list_foldersno sensitive capabilitydocs_moveno sensitive capabilitydocs_move_bulkno sensitive capabilitydocs_move_folder_to_channelno sensitive capabilitydocs_move_to_channelno sensitive capabilitydocs_rename_folderno sensitive capabilitydocs_save_contentno sensitive capabilitydocs_updateno sensitive capabilityhubs_add_itemno sensitive capabilityhubs_bulk_add_itemsno sensitive capabilityhubs_bulk_remove_itemsno sensitive capabilityhubs_createno sensitive capabilityhubs_create_itemno sensitive capabilityhubs_create_taskno sensitive capabilityhubs_deleteno sensitive capabilityhubs_getno sensitive capabilityhubs_listno sensitive capabilityhubs_list_itemsno sensitive capabilityhubs_move_to_spaceno sensitive capabilityhubs_remove_itemno sensitive capabilityhubs_updateno sensitive capabilitynexus_company_contactsno sensitive capabilitynexus_list_companiesno sensitive capabilitynexus_scanno sensitive capabilitynexus_statusno sensitive capabilitynotion_connectno sensitive capabilitynotion_importno sensitive capabilityscout_contextno sensitive capabilitysearchno sensitive capabilityshares_create_linkno sensitive capabilityshares_inviteno sensitive capabilityshares_listno sensitive capabilityshares_revokeno sensitive capabilityshares_updateno sensitive capabilityspaces_createno sensitive capabilityspaces_deleteno sensitive capabilityspaces_getno sensitive capabilityspaces_listno sensitive capabilityspaces_updateno sensitive capabilitytasks_bulk_createno sensitive capabilitytasks_bulk_deleteno sensitive capabilitytasks_completeno sensitive capabilitytasks_createno sensitive capabilitytasks_deleteno sensitive capabilitytasks_getno sensitive capabilitytasks_listno sensitive capabilitytasks_move_to_channelno sensitive capabilitytasks_settingsno sensitive capabilitytasks_updateno sensitive capabilityvcs_attach_investor_to_rowno sensitive capabilityvcs_detach_investor_from_rowno sensitive capabilityvcs_filtersno sensitive capabilityvcs_getno sensitive capabilityvcs_list_row_investorsno sensitive capabilityvcs_list_rows_for_vcno sensitive capabilityvcs_row_suggestionsno sensitive capabilityvcs_searchno sensitive capabilityviews_createno sensitive capabilityviews_deleteno sensitive capabilityviews_duplicateno sensitive capabilityviews_getno sensitive capabilityviews_listno sensitive capabilityviews_updateno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (116 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 3
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.10.0 latest |
A 98/100 | 0 | 1.13.0 | 2026-09-07 |
v0.9.0 |
A 98/100 | 0 | 1.12.1 | 2026-07-28 |
v0.8.1 |
A 98/100 | 0 | 1.10.0 | 2026-07-25 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @refinestudiolabs/uniscout-mcp --onlineMore in Business & CRM
Free public tax reference data — GST/VAT, income, company and capital-gains tax rules for 50+ countries.
The approval gate for unattended UCP buying agents — a policy/approval MCP proxy in front of a merchant's UCP checkout endpoint.
Autotask PSA MCP server. Generic entity query/get/create/update across the full REST API plus convenience tools for tickets, companies, contacts, projects, tasks and time entries. AI-safe with readonly mode and destructive-action confirmation. stdio + opt
MCP server for B2C Commerce developer experience tools
Search, compare and contact real-world companies through a public MCP business directory.
Norwegian business register (Brønnøysundregistrene) as an MCP server — companies, roles, subunits and annual accounts, with the register's silent traps encoded as guards.