mantleBLOCK
AotterMantle SDK: agent-native CMS runtime, manifests, admin UI, and Cloudflare adapter.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Mantle
Be the dungeon master. Don’t code every corridor.
Schema. View. Procedure. Trigger. Four atoms from which your world takes shape. Speak it in plain YAML, and the dungeon wakes—whole, lit from within, and yours to command.
Features · Admin · Get started · Documentation · Examples
Mantle is an embeddable applicatio
85f770c787e1OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mantle --env BETTER_AUTH_SECRET=${BETTER_AUTH_SECRET} -- npx -y @aotter/[email protected]{
"mcpServers": {
"mantle": {
"command": "npx",
"args": [
"-y",
"@aotter/[email protected]"
],
"env": {
"BETTER_AUTH_SECRET": "${BETTER_AUTH_SECRET}"
}
}
}
}Exposed tools (3)
3 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
admin_get_context | read | Read the current Admin page and available staff tools. Call before navigating or changing data. |
admin_navigate | read | Navigate to a same-origin Admin page. Use /admin/c/{collection}, /admin/c/{collection}/{id}, /admin/views/{view}, /admin/media or a standard Admin page. This only changes the displayed page. |
query_view_report | read | Canonical staff report description |
Trust audit
BLOCKgrade F · trust 47/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- none-observed
- Shell
- declared (5 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
* (`-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----`)
"common.signedIn": "وارد شدهاید",
"oauth.connectedApps": "اتصالهای MCP",
"oauth.consent.body": "{client} میتواند از طریق MCP از ابزارهای مدیریت این سایت استفاده کند. آنچه میتواند ببیند یا تغییر دهد همچنان به مجوزهای حساب شما محدود است.","oauth.apps.body": "این کلاینتهای MCP میتوانند از ابزارهای مدیریت سایت استفاده کنند. هر عملیات همچنان بر اساس مجوزهای فعلی حساب شما بررسی میشود.",
"nav.docs": "رابطها",
MANTLE_PG_URL: postgres://mantle:mantle@localhost:5432/mantle
MANTLE_PG_URL: postgres://mantle:mantle@localhost:5432/mantle
MANTLE_PG_URL: postgres://mantle:mantle@localhost:5432/mantle
const PEM_HEADER = "-----BEGIN PRIVATE KEY-----";
.dev.vars.example
.keep
all: async () => { const { rows, changes, lastRowId } = exec(sql, binds); return { results: rows, success: true, meta: { changes, last_row_id: lastRowId } }; },const driver: DatabaseDriver = { batch: async (stmts) => tx(() => stmts.map((s) => exec(s.sql, s.binds))) };import { usePreferences } from "../../app/preferences";import { t } from "../../app/i18n";import { authMethodsQueryOptions } from "../../lib/queries";import type { AuthMethodInfo } from "../../lib/types";import { signOut } from "../../lib/auth";curl -sS -X POST http://127.0.0.1:8787/api/commerce/orders \
with `curl 'http://127.0.0.1:8787/__scheduled?cron=*/5+*+*+*+*'` under
curl -sS 'http://127.0.0.1:8787/api/views/public-products?limit=20'
curl -sS -X POST http://127.0.0.1:8787/api/commerce/orders \
curl -sS http://127.0.0.1:8787/api/views/public-catalog
const bin = atob(b64);
Gates applied: critical_finding, no_behavioural_pass.
85f770c787e1full audit observations/trust-audit/mcp-server/aotter__mantle.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 85f770c787e1 | BLOCK | F | 47 | first audit |
Questions
What is the mantle MCP server?
AotterMantle SDK: agent-native CMS runtime, manifests, admin UI, and Cloudflare adapter.
What tools does mantle expose?
3 in total: 3 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is mantle safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (47/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does mantle need?
It reads BETTER_AUTH_SECRET from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How current is this page?
The grade is for one exact copy of the source (85f770c787e1), read on 2026-10-11. The repository is watched and re-audited when it changes.