Spectre MCP Server
spectre-mcp
PyPI
v1.0.3
Published by an unidentified publisher — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
104 tools for X/Twitter automation — direct GraphQL/REST API, no browser, no API keys, free.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 5 = 95. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −2 | publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 104
Each tool and what it can reach — statically extracted from the published source.
add_tweet_to_foldernetwork egressbookmark_tweetnetwork egresscreate_draftnetwork egresscreate_highlightnetwork egressdelete_draftnetwork egressdelete_scheduled_tweetnetwork egressdelete_tweetnetwork egressedit_draftnetwork egressedit_scheduled_tweetnetwork egressget_similar_postsnetwork egress
Show 94 more tools ↓
get_tweet_edit_historynetwork egresslike_tweetnetwork egresspin_tweetnetwork egresspost_tweetnetwork egressremove_tweet_from_foldernetwork egressretweetnetwork egressschedule_tweetnetwork egressunbookmark_tweetnetwork egressunlike_tweetnetwork egressunpin_tweetnetwork egressunretweetnetwork egressadd_list_memberno sensitive capabilityblock_userno sensitive capabilityclear_all_bookmarksno sensitive capabilitycreate_bookmark_folderno sensitive capabilitycreate_listno sensitive capabilitydelete_bookmark_folderno sensitive capabilitydelete_highlightno sensitive capabilitydelete_listno sensitive capabilitydelete_profile_bannerno sensitive capabilitydm_block_userno sensitive capabilitydm_unblock_userno sensitive capabilityedit_bookmark_folderno sensitive capabilityfollow_topicno sensitive capabilityfollow_userno sensitive capabilityget_account_settingsno sensitive capabilityget_blocked_accountsno sensitive capabilityget_bookmark_folder_timelineno sensitive capabilityget_bookmark_foldersno sensitive capabilityget_bookmarksno sensitive capabilityget_community_infono sensitive capabilityget_community_notesno sensitive capabilityget_community_tweetsno sensitive capabilityget_dm_conversationno sensitive capabilityget_dm_inboxno sensitive capabilityget_dm_mutedno sensitive capabilityget_draftsno sensitive capabilityget_favoritersno sensitive capabilityget_followersno sensitive capabilityget_followers_you_knowno sensitive capabilityget_followingno sensitive capabilityget_home_timelineno sensitive capabilityget_list_membersno sensitive capabilityget_list_membershipsno sensitive capabilityget_list_ownershipsno sensitive capabilityget_list_subscribersno sensitive capabilityget_list_timelineno sensitive capabilityget_muted_accountsno sensitive capabilityget_notificationsno sensitive capabilityget_retweetersno sensitive capabilityget_scheduled_tweetsno sensitive capabilityget_threadno sensitive capabilityget_topic_infono sensitive capabilityget_trendsno sensitive capabilityget_tweetno sensitive capabilityget_tweet_repliesno sensitive capabilityget_userno sensitive capabilityget_user_highlightsno sensitive capabilityget_user_likesno sensitive capabilityget_user_mediano sensitive capabilityget_user_tweetsno sensitive capabilityget_user_tweets_and_repliesno sensitive capabilityget_verified_followersno sensitive capabilityjoin_communityno sensitive capabilityleave_communityno sensitive capabilitylist_accountsno sensitive capabilitymute_userno sensitive capabilitypin_replyno sensitive capabilitypool_statusno sensitive capabilityrate_community_noteno sensitive capabilityremove_accountno sensitive capabilityremove_followerno sensitive capabilityremove_list_memberno sensitive capabilitysearchno sensitive capabilitysearch_bookmarksno sensitive capabilitysearch_dmno sensitive capabilitysearch_dm_groupsno sensitive capabilitysearch_dm_peopleno sensitive capabilitysearch_usersno sensitive capabilitysend_dmno sensitive capabilityset_active_accountno sensitive capabilityset_auto_rotateno sensitive capabilitysubscribe_listno sensitive capabilityunblock_userno sensitive capabilityunfollow_topicno sensitive capabilityunfollow_userno sensitive capabilityunmute_userno sensitive capabilityunpin_replyno sensitive capabilityunsubscribe_listno sensitive capabilityupdate_listno sensitive capabilityupdate_profileno sensitive capabilityupdate_profile_bannerno sensitive capabilityupdate_profile_imageno sensitive capabilityupload_mediano sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (104 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.0.3 latest |
A 95/100 | 0 | 1.13.0 | 2026-08-25 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan spectre-mcp --online --registry pypiMore in Web, Search & Scraping
Agent IP: MCP server with patents search tools
MCP server for searching the Agent Almanac — the public catalog of 9,000+ Model Context Protocol servers. Find, install, and discover MCP servers from inside Claude Desktop, Cursor, Continue, Zed, or any MCP-aware agent.
Search agents & MCP servers by capability, with daily-observed pricing, liveness and market data.
Verified merchants accepting agentic payments on Lightning/L402/BOLT12/USDT — search, verify, pay.
Airframe MCP Client - Connect agents to Airframe's product intelligence
Amazon product search demand over time, with growth for any keyword. Free key at trendsmcp.ai