Atlas / MCP servers / acedatacloud / MCPs

MCPsCAUTION

mcp/acedatacloud/mcps

AceDataCloud MCPs Monorepo

Verdict
CAUTION
Grade
F
Trust score
51 /100
Exposed tools
186 168r · 15w · 3d
Transport
stdio · streamable-http
License
—
Stars
2
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Monorepo for all AceDataCloud MCP (Model Context Protocol) servers.

Servers

Read from source at commit 3a69bd191dfaOBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (pypi)
claude mcp add mcp-acedatacloud --env ACEDATACLOUD_PLATFORM_TOKEN=${ACEDATACLOUD_PLATFORM_TOKEN} -- uvx mcp-acedatacloud==2026.6.28.0
03

Exposed tools (186)

168 read · 15 write · 3 destructive. Blast radius: 3 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
acedatacloud_check_frame_ancestorreadCheck whether an origin may frame the login page.
acedatacloud_create_platform_tokenwriteCreate a new platform token (never expires). Requires ``confirm=true``.
acedatacloud_delete_blog_postdestructiveDelete a blog and its translations. Requires blog:write; published posts also need blog:publish.
acedatacloud_disable_x402_authorizationwriteDisable the current authorization without revoking it on-chain.
acedatacloud_enable_x402_authorizationwriteRe-enable a valid current authorization.
acedatacloud_get_access_requestreadGet one caller-visible access request.
acedatacloud_get_api_specreadGet one API endpoint
acedatacloud_get_applicationreadGet one application and its service/pricing details.
acedatacloud_get_auto_rechargereadGet one auto-recharge configuration and its authoritative quote.
acedatacloud_get_balancereadSummarize your remaining credit balance across subscriptions.
acedatacloud_get_blog_draftwriteRead the full editable source of a draft or published post. Requires blog:read.
acedatacloud_get_credentialreadGet one credential with token/password values masked.
acedatacloud_get_deployment_eventsreadGet workload scheduling and image-pull events for a deployment.
acedatacloud_get_deployment_statusreadGet live deployment status and redacted access metadata.
acedatacloud_get_docreadFetch one documentation page
acedatacloud_get_invoicereadGet one caller-owned invoice.
acedatacloud_get_invoice_downloadreadGet a short-lived signed invoice URL as JSON without following redirects.
acedatacloud_get_modelreadLook up models by id/name (case-insensitive substring) with their credit
acedatacloud_get_orderwriteGet one caller-owned order in its authenticated detail representation.
acedatacloud_get_order_invoicewriteGet the current active invoice linked to an order.
acedatacloud_get_pricingreadGet billing unit, free amount and display cost rules. Public contact-only
acedatacloud_get_proxy_usagereadGet one caller-authorized proxy usage record.
acedatacloud_get_public_usage_packagesreadGet one service
acedatacloud_get_servicereadGet one service
acedatacloud_get_sitereadGet one site.
acedatacloud_get_site_bannerreadreturn await _get(f
acedatacloud_get_site_capability_overridereadreturn await _get(f
acedatacloud_get_site_document_overridereadreturn await _get(f
acedatacloud_get_site_domainreadGet one custom domain and DNS instructions.
acedatacloud_get_site_service_overridereadreturn await _get(f
acedatacloud_get_surveyreadGet one active survey template.
acedatacloud_get_survey_responsereadGet the caller
acedatacloud_get_translation_capabilitiesreadList models and fields that support automatic translation.
acedatacloud_get_usagereadGet one caller-authorized API usage record.
acedatacloud_get_usage_guidereadGet a guide for using the AceDataCloud platform management tools.
acedatacloud_get_user_inforeadGet the current authenticated AceDataCloud account
acedatacloud_get_wallet_summaryreadGet wallet binding, balance freshness, discounts, and visible ACE services.
acedatacloud_get_x402_authorizationreadGet the caller
acedatacloud_initialize_distributionreadInitialize or refresh the caller
acedatacloud_list_announcementsreadList published platform announcements (newest first).
acedatacloud_list_billing_profilesreadList caller-owned billing profiles used for invoice applications.
acedatacloud_list_blog_commentsreadList private review threads, replies and resolution states. Requires blog:read.
acedatacloud_list_coin_inforeadList the caller
acedatacloud_list_datasetsreadList downloadable datasets (title, price, download/preview URLs). No token required.
acedatacloud_list_distribution_levelsreadList public affiliate levels, thresholds, and reward percentages.
acedatacloud_list_distributionsreadShow your referral/affiliate earnings: current status (level, total price,
acedatacloud_list_email_preferencesreadList the caller
acedatacloud_list_integrationsreadList third-party integrations (title, options, stage). No token required.
acedatacloud_list_modelsreadList the chat-completion models available on the platform (OpenAI-style).
acedatacloud_list_platform_tokensreadList your platform tokens (the credentials used to call this management API). Masked.
acedatacloud_list_site_capability_overridesreadreturn await _list_override(
acedatacloud_list_site_document_overridesreadreturn await _list_override(
acedatacloud_list_site_service_overridesreadreturn await _list_override(
acedatacloud_list_surveysreadList active survey templates available to the caller.
acedatacloud_preview_invoicereadPreview exact invoice amount and currency without creating an invoice.
acedatacloud_unpublish_blog_postwriteReturn a published blog post to draft. Requires blog:write and blog:publish.
acedatacloud_withdraw_blog_approvalreadWithdraw a draft
aichat_get_usage_guidereadGet a comprehensive guide for using the AiChat tools.
aichat_list_modelsreadList all available AI models for the AiChat API.
digitalhuman_delete_taskdestructiveDelete one Digital Human task.
digitalhuman_get_tasks_batchreadGet multiple Digital Human tasks in one request.
discord_create_dmwriteOpen a direct message (DM) channel with a Discord user.
discord_get_usage_guidereadGet a comprehensive guide for using the Discord Bot tools.
discord_list_channelsreadList all channels in a Discord guild (server).
discord_list_guildsreadList all Discord servers (guilds) the proxied account has joined.
discord_whoamireadGet information about the currently proxied Discord account.
face_cartoonizereadConvert a portrait to an animated / cartoon style.
face_detect_livenessreadDecide whether a face image is from a live person versus a printed / screen photo.
face_get_usage_guidereadReturn a concise usage guide for the Face Transform tools.
fish_get_modelreadGet a Fish voice model by ID.
fish_get_taskreadQuery the status and result of a Fish audio generation task.
fish_get_tasks_batchreadQuery the status of multiple Fish tasks at once.
fish_get_usage_guidereadGet a comprehensive guide for using the Fish TTS tools.
flux_generate_videoreadGenerate text/image/video-to-video or enhance an owned temporary draft. Poll flux_get_task.
flux_get_taskreadQuery the status and result of a Flux image or video generation task.
flux_get_tasks_batchreadQuery multiple Flux image or video generation tasks at once.
flux_list_actionsreadList all available Flux tools and their use cases.
flux_list_modelsreadList all available Flux models and their capabilities.
glm_get_usage_guidereadGet a comprehensive guide for using the GLM tools.
glm_list_modelsreadList all available GLM models for the GLM API.
grok_get_prompt_guidereadGet guidance on writing effective prompts for Grok Imagine video generation.
grok_get_taskreadQuery the status and result of a video generation task.
grok_get_tasks_batchreadQuery multiple video generation tasks at once.
grok_list_actionsreadList all available Grok Imagine tools and workflows.
grok_list_modelsreadList all available Grok models (chat + video) and their capabilities.
hailuo_get_taskreadQuery the status and result of a video generation task.
hailuo_get_tasks_batchreadQuery multiple video generation tasks at once.
hailuo_list_actionsreadList all available Hailuo API actions and corresponding tools.
hailuo_list_modelsreadList all available models for Hailuo video generation.
happyhorse_get_taskreadGet the status and final video URL for one Happy Horse task.
happyhorse_get_tasks_batchreadGet multiple Happy Horse tasks in one request.
happyhorse_list_modelsreadList Happy Horse actions, compatible models, and defaults.
hcaptcha_get_api_inforeadGet API information for the hCaptcha service.
hcaptcha_get_taskreadPoll an async hCaptcha task.
hcaptcha_get_usage_guidereadGet a usage guide for the hCaptcha tools.
image2text_get_api_inforeadGet API information for the image2text service.
image2text_get_usage_guidereadGet a usage guide for the image2text tools.
kling_generate_storyboardreadGenerate V3/V3 Omni automatic or custom multishot video. Poll kling_get_task.
kling_generate_turbo_videoreadGenerate V3 Turbo 720p/1080p, 3–15 seconds. Native audio is included with no off switch. Poll kling_get_task.
kling_generate_with_assetsreadGenerate with platform element or voice IDs. Specified V2.6 voices cost 1.68 Credits/second. Ownership is verified by the service.
kling_get_taskreadQuery the status and result of a video generation task.
kling_get_tasks_batchreadQuery multiple video generation tasks at once.
kling_goods_studioreadGenerate product studio video from ref_image and goods_title contents. Poll kling_get_task.
kling_list_actionsreadList all available Kling API actions and corresponding tools.
kling_list_modelsreadList all available Kling models for video generation.
kling_video_commercereadGenerate creator/product voiceover from an avatar and speech_script. Poll kling_get_task.
luma_get_taskreadQuery the status and result of a video generation task.
luma_get_tasks_batchreadQuery multiple video generation tasks at once.
luma_list_actionsreadList all available Luma API actions and corresponding tools.
luma_list_aspect_ratiosreadList all available aspect ratios for Luma video generation.
midjourney_describereadGet AI-generated descriptions of an image.
midjourney_get_prompt_guidereadGet guidance on writing effective prompts for Midjourney.
midjourney_get_seedreadGet the seed value of a previously generated Midjourney image.
midjourney_list_actionsreadList all available Midjourney API actions and corresponding tools.
midjourney_list_transform_actionsreadList all available transformation actions for Midjourney images.
midjourney_shortenreadShorten and analyze a Midjourney prompt using Midjourney
midjourney_translatereadTranslate Chinese text to English for use as Midjourney prompts.
minimax_delete_taskdestructiveDelete a MiniMax video generation task.
minimax_get_taskreadQuery the status and result of a video generation task.
minimax_get_tasks_batchreadQuery multiple video generation tasks at once.
minimax_list_actionsreadList MiniMax H3 generation and task tools.
minimax_list_modelsreadDescribe the MiniMax H3 model and supported input modes.
nanobanana_get_taskwriteQuery the status and result of an image generation or edit task.
nanobanana_get_tasks_batchwriteQuery multiple image generation/edit tasks at once.
openai_get_modelsreadList models from the OpenAI-compatible models endpoint.
openai_get_usage_guidereadGet a comprehensive guide for using the OpenAI tools.
openai_list_chat_modelsreadList all available chat completion models.
openai_list_embedding_modelsreadList all available text embedding models.
openai_list_image_modelsreadList all available image generation and editing models.
producer_generate_lyricsreadGenerate song lyrics from a text prompt.
producer_generate_videoreadGenerate a video for a previously generated song.
producer_generate_wavreadGet the lossless WAV format of a generated song.
producer_get_lyric_format_guidereadGet guidance on formatting lyrics for Producer music generation.
producer_get_taskreadQuery the status and result of a music generation task.
producer_get_tasks_batchreadQuery multiple music generation tasks at once.
producer_list_actionsreadList all available Producer API actions and corresponding tools.
producer_list_modelsreadList all available Producer/FUZZ models and their capabilities.
producer_upload_audiowriteUpload an external audio file for use in subsequent operations.
qwen_image_get_taskwriteQuery the status and result of a Qwen Image image generation or edit task.
qwen_image_get_tasks_batchreadQuery multiple Qwen Image image tasks at once.
qwen_image_list_modelsreadList Qwen Image 3 models and their intended use.
recaptcha_get_api_inforeadGet API information for the reCAPTCHA service.
recaptcha_get_usage_guidereadGet a usage guide for the reCAPTCHA tools.
seedance_get_taskreadQuery the status and result of a video generation task.
seedance_get_tasks_batchreadQuery multiple video generation tasks at once.
seedance_list_actionsreadList all available Seedance API actions and corresponding tools.
seedance_list_modelsreadList all available Seedance models with their capabilities and pricing.
seedance_list_resolutionsreadList all available resolutions and aspect ratios for Seedance.
seedream_get_taskwriteQuery the status and result of a Seedream image generation or edit task.
seedream_get_tasks_batchreadQuery multiple Seedream image tasks at once.
seedream_list_modelsreadList all available Seedream models with their capabilities and pricing.
seedream_list_sizesreadList all available image sizes and resolution options for Seedream.
serp_get_usage_guidereadGet a comprehensive guide for using the Google SERP tools.
serp_list_countriesreadList commonly used country codes for Google search.
serp_list_languagesreadList commonly used language codes for Google search.
serp_list_search_typesreadList all available Google search types.
serp_list_time_rangesreadList available time range filters for Google search.
shorturl_batch_createwriteCreate short URLs for multiple long URLs in a single batch.
shorturl_createwriteCreate a short URL from a long URL.
shorturl_get_api_inforeadGet information about the ShortURL API service.
shorturl_get_usage_guidereadGet a comprehensive guide for using the ShortURL tools.
sora_get_taskreadQuery the status and result of a video generation task.
sora_get_tasks_batchreadQuery multiple video generation tasks at once.
sora_list_actionsreadList all available Sora API actions and corresponding tools.
sora_list_modelsreadList all available Sora models and their capabilities.
suno_archive_custom_modelreadArchive a custom music model so it can no longer be used.
suno_get_custom_modelreadRetrieve a single custom music model by ID.
suno_get_lyric_format_guidereadGet guidance on formatting lyrics for Suno music generation.
suno_get_mp4readGet an MP4 video version of a generated song.
suno_get_taskreadQuery the status and result of a music generation task.
suno_get_tasks_batchreadQuery multiple music generation tasks at once.
suno_get_timingreadGet timing and subtitle data for a generated song.
suno_list_actionsreadList all available Suno API actions and corresponding tools.
suno_list_modelsreadList all available Suno models and their capabilities.
suno_optimize_stylereadOptimize a music style description for better generation results.
turnstile_get_api_inforeadGet API information for the Turnstile service.
turnstile_get_usage_guidereadGet a usage guide for the Turnstile tools.
veo_get_prompt_guidereadGet guidance on writing effective prompts for Veo video generation.
veo_list_actionsreadList all available Veo API actions and corresponding tools.
veo_list_modelsreadList all available Veo models and their capabilities.
wan_get_taskreadQuery the status and result of a video generation task.
wan_get_tasks_batchreadQuery multiple video generation tasks at once.
wan_list_actionsreadList all available Wan API actions and corresponding tools.
wan_list_modelsreadList all available Wan video generation models.
wan_list_resolutionsreadList all available resolutions for Wan video generation.
webextrator_get_usage_guidereadGet a comprehensive guide for using the WebExtrator tools.
04

Trust audit

CAUTIONgrade F · trust 51/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (1 observation(s))
Network
declared (5 observation(s))
Shell
declared (3 observation(s))
Dependencies
not all pinned
Secrets in source
found

Findings (25)

MEDIUMInventory / provenance · inv.binary · CWE-1104
acedatacloud/jetbrains/gradle/wrapper/gradle-wrapper.jar
gradle-wrapper.jar
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
aichat/jetbrains/gradle/wrapper/gradle-wrapper.jar
gradle-wrapper.jar
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
digitalhuman/core/__pycache__/__init__.cpython-312.pyc
__init__.cpython-312.pyc
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
digitalhuman/core/__pycache__/client.cpython-312.pyc
client.cpython-312.pyc
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
digitalhuman/core/__pycache__/config.cpython-312.pyc
config.cpython-312.pyc
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
scripts/export_platform_management.py:84
module = importlib.import_module(view.__class__.__module__)
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
scripts/export_platform_management.py:120
module = importlib.import_module(view.__class__.__module__)
MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95
scripts/export_platform_management.py:136
importlib.import_module(imported.module), node.func.id
MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532
acedatacloud/core/oauth.py:341
logger.info(f"Revoked token: {token.token[:8]}...")
MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532
aichat/core/oauth.py:269
logger.info(f"Revoked token: {token.token[:8]}...")
MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532
face/core/oauth.py:269
logger.info(f"Revoked token: {token.token[:8]}...")
MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532
fish/core/oauth.py:269
logger.info(f"Revoked token: {token.token[:8]}...")
MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532
flux/core/oauth.py:269
logger.info(f"Revoked token: {token.token[:8]}...")
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
acedatacloud/core/oauth.py:141
callback_url = f"{settings.server_url}/oauth/callback"
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
acedatacloud/core/oauth.py:148
"redirect_uri": callback_url,
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
acedatacloud/core/oauth.py:367
callback_url = f"{settings.server_url}/oauth/callback"
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
acedatacloud/core/oauth.py:377
"redirect_uri": callback_url,
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
aichat/core/oauth.py:98
callback_url = f"{settings.server_url}/oauth/callback"
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
acedatacloud/tests/test_management_tools.py:51
await REGISTERED_TOOLS[name](domain="llm", api_key="secret-do-not-disclose")
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
scripts/test_vscode_bundle.py:23
token="ACEDATACLOUD_API_TOKEN",
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
scripts/test_vscode_bundle.py:68
self.make_source(root, token="ACEDATACLOUD_PLATFORM_TOKEN")
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
acedatacloud_delete_blog_post, digitalhuman_delete_task, minimax_delete_task
Why it matters. 3 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWInventory / provenance · inv.hidden_file · CWE-1104
acedatacloud/.ruff.toml
.ruff.toml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
acedatacloud/vscode/.vscodeignore
.vscodeignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
aichat/.ruff.toml
.ruff.toml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha 3a69bd191dfafull audit observations/trust-audit/mcp-server/acedatacloud__mcps.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-113a69bd191dfaCAUTIONF51first audit
06

Questions

What is the MCPs MCP server?

AceDataCloud MCPs Monorepo

What tools does MCPs expose?

186 in total: 168 read-only, 15 that write, and 3 that can delete or overwrite (acedatacloud_delete_blog_post, digitalhuman_delete_task, minimax_delete_task). Every one is listed on this page with its risk.

Is MCPs safe to connect to an agent?

With care. The audit graded it F (51/100) and found 25 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 3 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does MCPs need?

It reads ACEDATACLOUD_API_TOKEN, ACEDATACLOUD_AUTH_BASE_URL, ACEDATACLOUD_OAUTH_CLIENT_ID, ACEDATACLOUD_PLATFORM_TOKEN, DISCORD_BOT_TOKEN, FAKE_OAUTH_STATE_PATH, MCP_OAUTH_REDIS_PASSWORD, MCP_OAUTH_REDIS_URL and MCP_OAUTH_STATE_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does MCPs run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as mcp-wan at 0.3.0.

How current is this page?

The grade is for one exact copy of the source (3a69bd191dfa), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement