Atlas / MCP servers / advenimus / JW

JWBLOCK

Name: JW
Author: advenimus

mcp/advenimus/jw

MCP server by advenimus · Audited 2026-10-08

⚑ Report / re-scan Source ↗

MCP Tools for Jehovah's Witnesses

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

9 9r · 0w · 0d

Transport

stdio · streamable-http

License

—

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://www.npmjs.com/package/jw-mcp) [](https://github.com/advenimus/jw-mcp/releases)

An MCP server for working with JW.org content — Bible scripture lookup with study notes, workbook materials, Watchtower articles, and video captions.

Quick Start

Claude Code (Recommended)

claude mcp add jw-mcp -- npx -y jw-mcp

Claude Desktop

Download the latest jw-mcp.mcpb from Releases and open it — Claude Desktop will install it automatically.

Or add manually to your config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%\Claude\claude_desktop_config.json on Windows):

{
"mcpServers": {
"jw-mcp": {
"command": "npx",
"args": ["-y", "jw-mcp"]
}
}
}

Other MCP Clients (Cursor, Windsurf, etc.)

npx -y jw-mcp

Docker (self-hosted)

Run this server on a machine with a public HTTPS URL, then paste that URL into Grok, Claude.ai, or ChatGPT as a custom connector.

Compose binds the container to loopback only (127.0.0.1:8080). Do not publish port 8080 on the public internet. Put a reverse proxy on the host, terminate TLS there, and proxy to 127.0.0.1:8080.

Use port 443. Claude.ai never connects to a custom connector on any other port. It only says "Couldn't reach the MCP server". Grok accepts other ports, so a URL like https://host:18443/mcp can work in Grok and still fail in Claude. The server logs a warning at startup when MCP_BASE_URL has a port.

Copy .env.example to .env.
Set MCP_BASE_URL to your public origin, with no path and no port. Example: https://jw-mcp.example.com.
Set MCP_AUTH_SECRET to a long access key (at least 16 characters).
Keep MCP_AUTH=true. HTTP mode with auth off is loopback-only. Do not disable auth in Doc

Read from source at commit 1f3dc5fe1731OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add jw-mcp --env MCP_AUTH_SECRET=${MCP_AUTH_SECRET} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "jw-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "MCP_AUTH_SECRET": "${MCP_AUTH_SECRET}"
      }
    }
  }
}

Exposed tools (9)

9 read · 0 write · 0 destructive.

Tool	Risk	Description
`getWatchtowerContent`	read	STEP 2: Get the actual Watchtower article content after user chooses an article. Use this tool AFTER getWatchtowerLinks when user specifies which article they want (e.g.,
`getWatchtowerLinks`	read	STEP 1: Get JW.org Watchtower study articles. When a user asks for current/this week\
`getWorkbookContent`	read	STEP 2: Get the actual CLM workbook content after user chooses a week. Use this tool AFTER getWorkbookLinks when user specifies which week they want (e.g.,
`getWorkbookLinks`	read	STEP 1: Get JW.org
`get_bible_verse`	read	Get plain Bible verse text from wol.jw.org. Returns just the verse text without study notes or additional content. For comprehensive study content including notes and cross-references, use get_verse_with_study instead.
`get_bible_verse_url`	read	Get the jw.org URL for a Bible verse or range of verses. Returns a direct link to view the scripture on jw.org. Supports single verses (e.g., verse:
`get_jw_captions`	read	Fetches video captions from JW.org by video ID or URL. Accepts either a direct video ID (e.g.,
`get_verse_with_study`	read	Get Bible verse(s) with comprehensive study content from wol.jw.org. Supports single verses or ranges (e.g.,
`search_bible_books`	read	Search for Bible books by name or abbreviation. Returns book numbers (1-66) and names. Useful for finding the correct book number for other scripture tools. Examples:

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: declared (6 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (19)

HIGHNetwork egress · net.metadata_ip · CWE-200, CWE-319

src/auth/cimd.js:245

|| host === 'metadata.google.internal'

Why it matters. cloud metadata endpoint: the classic SSRF credential grab

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

Dockerfile:26

CMD node --input-type=module -e "fetch('http://127.0.0.1:8080/health').then((r)=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

src/http-server.js:436

console.error(`JW MCP server listening on http://0.0.0.0:${port}`);

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

src/http-server.js:437

console.error(`Health: http://0.0.0.0:${port}/health`);

LOWInventory / provenance · inv.hidden_file · CWE-1104

.mcpbignore

.mcpbignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.no_license · CWE-1104

Why it matters. no LICENSE file and no repo licence

Fix. add a licence

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/auth/cimd.test.js:8

} from '../../src/auth/cimd.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/auth/cimd.test.js:9

import { McpOAuthProvider } from '../../src/auth.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/auth/csp.test.js:6

} from '../../src/auth/csp.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/auth/provider.test.js:7

import { McpOAuthProvider } from '../../src/auth.js';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

tests/auth/urls.test.js:9

} from '../../src/auth/urls.js';

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

tests/auth/cimd.test.js:34

['http://localhost/callback', 'http://127.0.0.1/callback'],

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

tests/auth/cimd.test.js:41

['http://127.0.0.1/callback'],

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

package.json

@modelcontextprotocol/sdk, cheerio, cors, express, express-rate-limit, node-fetch, undici, @types/node

Why it matters. 9 dependency range(s) float

Fix. pin exact versions or ship a lockfile