Atlas / MCP servers / ashwwwin / Furikake

FurikakeBLOCK

Name: Furikake
Author: ashwwwin

mcp/ashwwwin/furikake

MCP server by ashwwwin · mcp · mcp client · mcp host · Audited 2026-10-07

⚑ Report / re-scan Source ↗

CLI & API for MCP management

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

1 1r · 0w · 0d

Transport

—

License

NOASSERTION

Stars

172

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

furi is an easy to use, CLI & API for MCP management.

Download MCP servers [from GitHub]
Smithery.yaml detection (or auto detects/handles execution)
Fully featured CLI [nanospinners, readability]
Typescript & Javascript MCP's are supported
Python based MCP's are a key roadmap item (and will be supported)
HTTP API Routes (uses Bun http, stdio to http, clear and standard routes)
Customizable port and visibility of sudo routes
View all running MCPs + logs for each process
Process state management with PM2
Built with Bun and Typescript
is good with rice

Installation (macOS/Linux)

To install Furi, you can use the following command:

curl -fsSL https://furi.so/install | bash

Verify the installation by running:

furi

Furikake uses Bun under the hood, the install script will install Bun if it is not already installed.

Upgrade Furi

To upgrade Furi to the latest version, run:

furi upgrade

How to use

Manage MCPs

Furikake works with any public github repo as follows:

furi add

eg. furi add smithery-ai/mcp-fetch

You can also rename an MCP by using the rename command, please note this will restart the MCP if it is running.

furi rename

eg. furi rename smithery-ai/mcp-fetch mcp-fetch

Delete an MCP

furi remove

eg. furi remove mcp-fetch

List installed MCPs

Show all installed MCPs

furi list

Start an MCP

furi start  -e '{"name1":"value1", "name2":"value2"}'

-e env is optional and dependant on the MCP server being called

Ensure you pass a valid JSON object to the -e flag.

Once you start a server with the -e flag, it will be saved to the config file and re-used when using the server again.

In order to view the env variables required for an MCP, use:

Read from source at commit f3cb5f0510daOBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add furi-cli --env GEMINI_API_KEY=${GEMINI_API_KEY} --env GITHUB_KEY=${GITHUB_KEY} --env HTTP_AUTH_TOKEN=${HTTP_AUTH_TOKEN} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "furi-cli": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "GEMINI_API_KEY": "${GEMINI_API_KEY}",
        "GITHUB_KEY": "${GITHUB_KEY}",
        "HTTP_AUTH_TOKEN": "${HTTP_AUTH_TOKEN}"
      }
    }
  }
}

Exposed tools (1)

1 read · 0 write · 0 destructive.

Tool	Risk	Description
`name`	read	Name of the log

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (11 observation(s))
Network: declared (14 observation(s))
Shell: declared (1 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (15)

HIGHCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

app/packages/add/actions/initializePackage.ts:456

smitheryConfig = yaml.load(smitheryContent) as SmitheryConfig;

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load