Togglebox MCP Server
@toggleboxcloud/togglebox-mcp
npm
v1.0.0
Published by @toggleboxcloud — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
MCP server for managing your Togglebox account and cloud infrastructure
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 4 = 96. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 0
Tools 150
Each tool and what it can reach — statically extracted from the published source.
presign_rgw_objectingests untrusted inputacknowledge_notificationno sensitive capabilityadd_diskno sensitive capabilityadd_ip_aliasno sensitive capabilityadd_network_address_rangeno sensitive capabilityadd_ssh_keyno sensitive capabilityattach_interfaceno sensitive capabilityattach_isono sensitive capabilityattach_security_groupno sensitive capabilityattach_volumeno sensitive capability
Show 140 more tools ↓
cancel_serviceno sensitive capabilitychange_vm_hostnameno sensitive capabilitychange_volume_typeno sensitive capabilitycheck_task_statusno sensitive capabilityclear_reverse_dnsno sensitive capabilityclone_vmno sensitive capabilityclone_volumeno sensitive capabilitycreate_all_disks_backupno sensitive capabilitycreate_backupno sensitive capabilitycreate_contactno sensitive capabilitycreate_personal_access_tokenno sensitive capabilitycreate_private_networkno sensitive capabilitycreate_rgw_bucketno sensitive capabilitycreate_rgw_folderno sensitive capabilitycreate_support_ticketno sensitive capabilitycreate_vmno sensitive capabilitycreate_volumeno sensitive capabilitydelete_backupno sensitive capabilitydelete_diskno sensitive capabilitydelete_ip_aliasno sensitive capabilitydelete_network_address_rangeno sensitive capabilitydelete_private_networkno sensitive capabilitydelete_rgw_bucketno sensitive capabilitydelete_rgw_objectsno sensitive capabilitydelete_ssh_keyno sensitive capabilitydelete_templateno sensitive capabilitydelete_volumeno sensitive capabilitydestroy_vmno sensitive capabilitydetach_diskno sensitive capabilitydetach_interfaceno sensitive capabilitydetach_isono sensitive capabilitydetach_security_groupno sensitive capabilitydisable_backup_scheduleno sensitive capabilitydraas_storage_backup_restore_diskno sensitive capabilitydraas_storage_backup_save_as_volumeno sensitive capabilityenable_backup_scheduleno sensitive capabilityget_account_detailsno sensitive capabilityget_backup_scheduleno sensitive capabilityget_backup_summaryno sensitive capabilityget_balanceno sensitive capabilityget_billing_summaryno sensitive capabilityget_billing_usageno sensitive capabilityget_consoleno sensitive capabilityget_contactno sensitive capabilityget_contact_privilegesno sensitive capabilityget_invoiceno sensitive capabilityget_knowledgebase_articleno sensitive capabilityget_knowledgebase_categoryno sensitive capabilityget_news_itemno sensitive capabilityget_private_networkno sensitive capabilityget_reverse_dnsno sensitive capabilityget_rgw_bucket_corsno sensitive capabilityget_rgw_credentialsno sensitive capabilityget_rgw_stsno sensitive capabilityget_rgw_summaryno sensitive capabilityget_rgw_usageno sensitive capabilityget_rgw_usage_historyno sensitive capabilityget_security_groupno sensitive capabilityget_service_activityno sensitive capabilityget_service_billing_cyclesno sensitive capabilityget_service_detailsno sensitive capabilityget_service_labelno sensitive capabilityget_service_methodsno sensitive capabilityget_service_operation_statusno sensitive capabilityget_service_upgrade_optionsno sensitive capabilityget_support_ticketno sensitive capabilityget_templateno sensitive capabilityget_template_tagsno sensitive capabilityget_template_vmsno sensitive capabilityget_vmno sensitive capabilityget_vm_activityno sensitive capabilityget_vm_operation_statusno sensitive capabilityget_vm_security_groupsno sensitive capabilityget_vm_statusno sensitive capabilityget_vm_tagsno sensitive capabilityget_vm_usageno sensitive capabilityget_volumeno sensitive capabilityinstall_ssh_keyno sensitive capabilityissue_rgw_stsno sensitive capabilitylist_backupsno sensitive capabilitylist_contactsno sensitive capabilitylist_disksno sensitive capabilitylist_interfacesno sensitive capabilitylist_invoicesno sensitive capabilitylist_knowledgebase_categoriesno sensitive capabilitylist_new_notificationsno sensitive capabilitylist_newsno sensitive capabilitylist_notificationsno sensitive capabilitylist_personal_access_tokensno sensitive capabilitylist_private_networksno sensitive capabilitylist_rgw_bucketsno sensitive capabilitylist_rgw_objectsno sensitive capabilitylist_security_groupsno sensitive capabilitylist_servicesno sensitive capabilitylist_ssh_keysno sensitive capabilitylist_support_ticketsno sensitive capabilitylist_template_selectorno sensitive capabilitylist_templatesno sensitive capabilitylist_user_logsno sensitive capabilitylist_vmsno sensitive capabilitylist_volumesno sensitive capabilitylogout_current_sessionno sensitive capabilitymove_ip_aliasno sensitive capabilitypoweroff_vmno sensitive capabilitypoweron_vmno sensitive capabilityreboot_vmno sensitive capabilityreinstall_vmno sensitive capabilityrename_templateno sensitive capabilityrename_volumeno sensitive capabilityrenew_serviceno sensitive capabilityreply_support_ticketno sensitive capabilityrequest_service_upgradeno sensitive capabilityreset_vm_passwordno sensitive capabilityresize_diskno sensitive capabilityresize_vmno sensitive capabilityrestore_backupno sensitive capabilityrevoke_current_auth_tokenno sensitive capabilityrevoke_personal_access_tokenno sensitive capabilityrotate_rgw_credentialsno sensitive capabilitysave_backup_as_volumeno sensitive capabilitysave_disk_as_volumeno sensitive capabilitysave_vm_as_templateno sensitive capabilityset_boot_diskno sensitive capabilityset_reverse_dnsno sensitive capabilityset_rgw_bucket_corsno sensitive capabilityset_rgw_bucket_encryptionno sensitive capabilityset_rgw_bucket_lifecycleno sensitive capabilityset_rgw_bucket_publicno sensitive capabilityset_service_billing_cycleno sensitive capabilityset_service_labelno sensitive capabilityshutdown_vmno sensitive capabilityswap_interfacesno sensitive capabilitytoggle_volume_persistentno sensitive capabilityupdate_backup_scheduleno sensitive capabilityupdate_contactno sensitive capabilityupdate_network_address_rangeno sensitive capabilityupdate_network_dnsno sensitive capabilityupdate_network_methodno sensitive capabilityupdate_template_tagsno sensitive capabilityupdate_vm_tagsno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (150 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.0.0 latest |
A 96/100 | 0 | 1.13.0 | 2026-09-09 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @toggleboxcloud/togglebox-mcp --onlineMore in Developer Tools
Hotel booking MCP server — 300K+ properties, real confirmation numbers, loyalty programs. Builders monetize every booking via Stripe Connect. The first MCP server that completes real hotel reservations inside AI conversations.
Generates production-ready UI components from natural language, inspired by v0.
Manage AdGuard Home through AI assistants
Read-only Azure DevOps for MCP clients using only your existing browser session — no PAT, no Azure CLI. Browse work items, pull requests, comments, attachments and Artifacts feeds across every project, repo and feed you can access.
MCP server for Adobe Experience Manager Assets integration development
Servidor MCP para el tiempo oficial de España (API pública OpenData de AEMET). Predicción, observación y avisos como herramientas MCP tipadas.