MCPsCAUTION
AceDataCloud MCPs Monorepo
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Monorepo for all AceDataCloud MCP (Model Context Protocol) servers.
Servers
3a69bd191dfaOBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp-acedatacloud --env ACEDATACLOUD_PLATFORM_TOKEN=${ACEDATACLOUD_PLATFORM_TOKEN} -- uvx mcp-acedatacloud==2026.6.28.0Exposed tools (186)
168 read · 15 write · 3 destructive. Blast radius: 3 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
acedatacloud_check_frame_ancestor | read | Check whether an origin may frame the login page. |
acedatacloud_create_platform_token | write | Create a new platform token (never expires). Requires ``confirm=true``. |
acedatacloud_delete_blog_post | destructive | Delete a blog and its translations. Requires blog:write; published posts also need blog:publish. |
acedatacloud_disable_x402_authorization | write | Disable the current authorization without revoking it on-chain. |
acedatacloud_enable_x402_authorization | write | Re-enable a valid current authorization. |
acedatacloud_get_access_request | read | Get one caller-visible access request. |
acedatacloud_get_api_spec | read | Get one API endpoint |
acedatacloud_get_application | read | Get one application and its service/pricing details. |
acedatacloud_get_auto_recharge | read | Get one auto-recharge configuration and its authoritative quote. |
acedatacloud_get_balance | read | Summarize your remaining credit balance across subscriptions. |
acedatacloud_get_blog_draft | write | Read the full editable source of a draft or published post. Requires blog:read. |
acedatacloud_get_credential | read | Get one credential with token/password values masked. |
acedatacloud_get_deployment_events | read | Get workload scheduling and image-pull events for a deployment. |
acedatacloud_get_deployment_status | read | Get live deployment status and redacted access metadata. |
acedatacloud_get_doc | read | Fetch one documentation page |
acedatacloud_get_invoice | read | Get one caller-owned invoice. |
acedatacloud_get_invoice_download | read | Get a short-lived signed invoice URL as JSON without following redirects. |
acedatacloud_get_model | read | Look up models by id/name (case-insensitive substring) with their credit |
acedatacloud_get_order | write | Get one caller-owned order in its authenticated detail representation. |
acedatacloud_get_order_invoice | write | Get the current active invoice linked to an order. |
acedatacloud_get_pricing | read | Get billing unit, free amount and display cost rules. Public contact-only |
acedatacloud_get_proxy_usage | read | Get one caller-authorized proxy usage record. |
acedatacloud_get_public_usage_packages | read | Get one service |
acedatacloud_get_service | read | Get one service |
acedatacloud_get_site | read | Get one site. |
acedatacloud_get_site_banner | read | return await _get(f |
acedatacloud_get_site_capability_override | read | return await _get(f |
acedatacloud_get_site_document_override | read | return await _get(f |
acedatacloud_get_site_domain | read | Get one custom domain and DNS instructions. |
acedatacloud_get_site_service_override | read | return await _get(f |
acedatacloud_get_survey | read | Get one active survey template. |
acedatacloud_get_survey_response | read | Get the caller |
acedatacloud_get_translation_capabilities | read | List models and fields that support automatic translation. |
acedatacloud_get_usage | read | Get one caller-authorized API usage record. |
acedatacloud_get_usage_guide | read | Get a guide for using the AceDataCloud platform management tools. |
acedatacloud_get_user_info | read | Get the current authenticated AceDataCloud account |
acedatacloud_get_wallet_summary | read | Get wallet binding, balance freshness, discounts, and visible ACE services. |
acedatacloud_get_x402_authorization | read | Get the caller |
acedatacloud_initialize_distribution | read | Initialize or refresh the caller |
acedatacloud_list_announcements | read | List published platform announcements (newest first). |
acedatacloud_list_billing_profiles | read | List caller-owned billing profiles used for invoice applications. |
acedatacloud_list_blog_comments | read | List private review threads, replies and resolution states. Requires blog:read. |
acedatacloud_list_coin_info | read | List the caller |
acedatacloud_list_datasets | read | List downloadable datasets (title, price, download/preview URLs). No token required. |
acedatacloud_list_distribution_levels | read | List public affiliate levels, thresholds, and reward percentages. |
acedatacloud_list_distributions | read | Show your referral/affiliate earnings: current status (level, total price, |
acedatacloud_list_email_preferences | read | List the caller |
acedatacloud_list_integrations | read | List third-party integrations (title, options, stage). No token required. |
acedatacloud_list_models | read | List the chat-completion models available on the platform (OpenAI-style). |
acedatacloud_list_platform_tokens | read | List your platform tokens (the credentials used to call this management API). Masked. |
acedatacloud_list_site_capability_overrides | read | return await _list_override( |
acedatacloud_list_site_document_overrides | read | return await _list_override( |
acedatacloud_list_site_service_overrides | read | return await _list_override( |
acedatacloud_list_surveys | read | List active survey templates available to the caller. |
acedatacloud_preview_invoice | read | Preview exact invoice amount and currency without creating an invoice. |
acedatacloud_unpublish_blog_post | write | Return a published blog post to draft. Requires blog:write and blog:publish. |
acedatacloud_withdraw_blog_approval | read | Withdraw a draft |
aichat_get_usage_guide | read | Get a comprehensive guide for using the AiChat tools. |
aichat_list_models | read | List all available AI models for the AiChat API. |
digitalhuman_delete_task | destructive | Delete one Digital Human task. |
digitalhuman_get_tasks_batch | read | Get multiple Digital Human tasks in one request. |
discord_create_dm | write | Open a direct message (DM) channel with a Discord user. |
discord_get_usage_guide | read | Get a comprehensive guide for using the Discord Bot tools. |
discord_list_channels | read | List all channels in a Discord guild (server). |
discord_list_guilds | read | List all Discord servers (guilds) the proxied account has joined. |
discord_whoami | read | Get information about the currently proxied Discord account. |
face_cartoonize | read | Convert a portrait to an animated / cartoon style. |
face_detect_liveness | read | Decide whether a face image is from a live person versus a printed / screen photo. |
face_get_usage_guide | read | Return a concise usage guide for the Face Transform tools. |
fish_get_model | read | Get a Fish voice model by ID. |
fish_get_task | read | Query the status and result of a Fish audio generation task. |
fish_get_tasks_batch | read | Query the status of multiple Fish tasks at once. |
fish_get_usage_guide | read | Get a comprehensive guide for using the Fish TTS tools. |
flux_generate_video | read | Generate text/image/video-to-video or enhance an owned temporary draft. Poll flux_get_task. |
flux_get_task | read | Query the status and result of a Flux image or video generation task. |
flux_get_tasks_batch | read | Query multiple Flux image or video generation tasks at once. |
flux_list_actions | read | List all available Flux tools and their use cases. |
flux_list_models | read | List all available Flux models and their capabilities. |
glm_get_usage_guide | read | Get a comprehensive guide for using the GLM tools. |
glm_list_models | read | List all available GLM models for the GLM API. |
grok_get_prompt_guide | read | Get guidance on writing effective prompts for Grok Imagine video generation. |
grok_get_task | read | Query the status and result of a video generation task. |
grok_get_tasks_batch | read | Query multiple video generation tasks at once. |
grok_list_actions | read | List all available Grok Imagine tools and workflows. |
grok_list_models | read | List all available Grok models (chat + video) and their capabilities. |
hailuo_get_task | read | Query the status and result of a video generation task. |
hailuo_get_tasks_batch | read | Query multiple video generation tasks at once. |
hailuo_list_actions | read | List all available Hailuo API actions and corresponding tools. |
hailuo_list_models | read | List all available models for Hailuo video generation. |
happyhorse_get_task | read | Get the status and final video URL for one Happy Horse task. |
happyhorse_get_tasks_batch | read | Get multiple Happy Horse tasks in one request. |
happyhorse_list_models | read | List Happy Horse actions, compatible models, and defaults. |
hcaptcha_get_api_info | read | Get API information for the hCaptcha service. |
hcaptcha_get_task | read | Poll an async hCaptcha task. |
hcaptcha_get_usage_guide | read | Get a usage guide for the hCaptcha tools. |
image2text_get_api_info | read | Get API information for the image2text service. |
image2text_get_usage_guide | read | Get a usage guide for the image2text tools. |
kling_generate_storyboard | read | Generate V3/V3 Omni automatic or custom multishot video. Poll kling_get_task. |
kling_generate_turbo_video | read | Generate V3 Turbo 720p/1080p, 3–15 seconds. Native audio is included with no off switch. Poll kling_get_task. |
kling_generate_with_assets | read | Generate with platform element or voice IDs. Specified V2.6 voices cost 1.68 Credits/second. Ownership is verified by the service. |
kling_get_task | read | Query the status and result of a video generation task. |
kling_get_tasks_batch | read | Query multiple video generation tasks at once. |
kling_goods_studio | read | Generate product studio video from ref_image and goods_title contents. Poll kling_get_task. |
kling_list_actions | read | List all available Kling API actions and corresponding tools. |
kling_list_models | read | List all available Kling models for video generation. |
kling_video_commerce | read | Generate creator/product voiceover from an avatar and speech_script. Poll kling_get_task. |
luma_get_task | read | Query the status and result of a video generation task. |
luma_get_tasks_batch | read | Query multiple video generation tasks at once. |
luma_list_actions | read | List all available Luma API actions and corresponding tools. |
luma_list_aspect_ratios | read | List all available aspect ratios for Luma video generation. |
midjourney_describe | read | Get AI-generated descriptions of an image. |
midjourney_get_prompt_guide | read | Get guidance on writing effective prompts for Midjourney. |
midjourney_get_seed | read | Get the seed value of a previously generated Midjourney image. |
midjourney_list_actions | read | List all available Midjourney API actions and corresponding tools. |
midjourney_list_transform_actions | read | List all available transformation actions for Midjourney images. |
midjourney_shorten | read | Shorten and analyze a Midjourney prompt using Midjourney |
midjourney_translate | read | Translate Chinese text to English for use as Midjourney prompts. |
minimax_delete_task | destructive | Delete a MiniMax video generation task. |
minimax_get_task | read | Query the status and result of a video generation task. |
minimax_get_tasks_batch | read | Query multiple video generation tasks at once. |
minimax_list_actions | read | List MiniMax H3 generation and task tools. |
minimax_list_models | read | Describe the MiniMax H3 model and supported input modes. |
nanobanana_get_task | write | Query the status and result of an image generation or edit task. |
nanobanana_get_tasks_batch | write | Query multiple image generation/edit tasks at once. |
openai_get_models | read | List models from the OpenAI-compatible models endpoint. |
openai_get_usage_guide | read | Get a comprehensive guide for using the OpenAI tools. |
openai_list_chat_models | read | List all available chat completion models. |
openai_list_embedding_models | read | List all available text embedding models. |
openai_list_image_models | read | List all available image generation and editing models. |
producer_generate_lyrics | read | Generate song lyrics from a text prompt. |
producer_generate_video | read | Generate a video for a previously generated song. |
producer_generate_wav | read | Get the lossless WAV format of a generated song. |
producer_get_lyric_format_guide | read | Get guidance on formatting lyrics for Producer music generation. |
producer_get_task | read | Query the status and result of a music generation task. |
producer_get_tasks_batch | read | Query multiple music generation tasks at once. |
producer_list_actions | read | List all available Producer API actions and corresponding tools. |
producer_list_models | read | List all available Producer/FUZZ models and their capabilities. |
producer_upload_audio | write | Upload an external audio file for use in subsequent operations. |
qwen_image_get_task | write | Query the status and result of a Qwen Image image generation or edit task. |
qwen_image_get_tasks_batch | read | Query multiple Qwen Image image tasks at once. |
qwen_image_list_models | read | List Qwen Image 3 models and their intended use. |
recaptcha_get_api_info | read | Get API information for the reCAPTCHA service. |
recaptcha_get_usage_guide | read | Get a usage guide for the reCAPTCHA tools. |
seedance_get_task | read | Query the status and result of a video generation task. |
seedance_get_tasks_batch | read | Query multiple video generation tasks at once. |
seedance_list_actions | read | List all available Seedance API actions and corresponding tools. |
seedance_list_models | read | List all available Seedance models with their capabilities and pricing. |
seedance_list_resolutions | read | List all available resolutions and aspect ratios for Seedance. |
seedream_get_task | write | Query the status and result of a Seedream image generation or edit task. |
seedream_get_tasks_batch | read | Query multiple Seedream image tasks at once. |
seedream_list_models | read | List all available Seedream models with their capabilities and pricing. |
seedream_list_sizes | read | List all available image sizes and resolution options for Seedream. |
serp_get_usage_guide | read | Get a comprehensive guide for using the Google SERP tools. |
serp_list_countries | read | List commonly used country codes for Google search. |
serp_list_languages | read | List commonly used language codes for Google search. |
serp_list_search_types | read | List all available Google search types. |
serp_list_time_ranges | read | List available time range filters for Google search. |
shorturl_batch_create | write | Create short URLs for multiple long URLs in a single batch. |
shorturl_create | write | Create a short URL from a long URL. |
shorturl_get_api_info | read | Get information about the ShortURL API service. |
shorturl_get_usage_guide | read | Get a comprehensive guide for using the ShortURL tools. |
sora_get_task | read | Query the status and result of a video generation task. |
sora_get_tasks_batch | read | Query multiple video generation tasks at once. |
sora_list_actions | read | List all available Sora API actions and corresponding tools. |
sora_list_models | read | List all available Sora models and their capabilities. |
suno_archive_custom_model | read | Archive a custom music model so it can no longer be used. |
suno_get_custom_model | read | Retrieve a single custom music model by ID. |
suno_get_lyric_format_guide | read | Get guidance on formatting lyrics for Suno music generation. |
suno_get_mp4 | read | Get an MP4 video version of a generated song. |
suno_get_task | read | Query the status and result of a music generation task. |
suno_get_tasks_batch | read | Query multiple music generation tasks at once. |
suno_get_timing | read | Get timing and subtitle data for a generated song. |
suno_list_actions | read | List all available Suno API actions and corresponding tools. |
suno_list_models | read | List all available Suno models and their capabilities. |
suno_optimize_style | read | Optimize a music style description for better generation results. |
turnstile_get_api_info | read | Get API information for the Turnstile service. |
turnstile_get_usage_guide | read | Get a usage guide for the Turnstile tools. |
veo_get_prompt_guide | read | Get guidance on writing effective prompts for Veo video generation. |
veo_list_actions | read | List all available Veo API actions and corresponding tools. |
veo_list_models | read | List all available Veo models and their capabilities. |
wan_get_task | read | Query the status and result of a video generation task. |
wan_get_tasks_batch | read | Query multiple video generation tasks at once. |
wan_list_actions | read | List all available Wan API actions and corresponding tools. |
wan_list_models | read | List all available Wan video generation models. |
wan_list_resolutions | read | List all available resolutions for Wan video generation. |
webextrator_get_usage_guide | read | Get a comprehensive guide for using the WebExtrator tools. |
Trust audit
CAUTIONgrade F · trust 51/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (5 observation(s))
- Shell
- declared (3 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
gradle-wrapper.jar
gradle-wrapper.jar
__init__.cpython-312.pyc
client.cpython-312.pyc
config.cpython-312.pyc
module = importlib.import_module(view.__class__.__module__)
module = importlib.import_module(view.__class__.__module__)
importlib.import_module(imported.module), node.func.id
logger.info(f"Revoked token: {token.token[:8]}...")logger.info(f"Revoked token: {token.token[:8]}...")logger.info(f"Revoked token: {token.token[:8]}...")logger.info(f"Revoked token: {token.token[:8]}...")logger.info(f"Revoked token: {token.token[:8]}...")callback_url = f"{settings.server_url}/oauth/callback""redirect_uri": callback_url,
callback_url = f"{settings.server_url}/oauth/callback""redirect_uri": callback_url,
callback_url = f"{settings.server_url}/oauth/callback"await REGISTERED_TOOLS[name](domain="llm", api_key="secret-do-not-disclose")
token="ACEDATACLOUD_API_TOKEN",
self.make_source(root, token="ACEDATACLOUD_PLATFORM_TOKEN")
acedatacloud_delete_blog_post, digitalhuman_delete_task, minimax_delete_task
.ruff.toml
.vscodeignore
.ruff.toml
Gates applied: no_behavioural_pass.
3a69bd191dfafull audit observations/trust-audit/mcp-server/acedatacloud__mcps.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 3a69bd191dfa | CAUTION | F | 51 | first audit |
Questions
What is the MCPs MCP server?
AceDataCloud MCPs Monorepo
What tools does MCPs expose?
186 in total: 168 read-only, 15 that write, and 3 that can delete or overwrite (acedatacloud_delete_blog_post, digitalhuman_delete_task, minimax_delete_task). Every one is listed on this page with its risk.
Is MCPs safe to connect to an agent?
With care. The audit graded it F (51/100) and found 25 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 3 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does MCPs need?
It reads ACEDATACLOUD_API_TOKEN, ACEDATACLOUD_AUTH_BASE_URL, ACEDATACLOUD_OAUTH_CLIENT_ID, ACEDATACLOUD_PLATFORM_TOKEN, DISCORD_BOT_TOKEN, FAKE_OAUTH_STATE_PATH, MCP_OAUTH_REDIS_PASSWORD, MCP_OAUTH_REDIS_URL and MCP_OAUTH_STATE_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does MCPs run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as mcp-wan at 0.3.0.
How current is this page?
The grade is for one exact copy of the source (3a69bd191dfa), read on 2026-10-11. The repository is watched and re-audited when it changes.