Atlas / MCP servers / empiriolabs-ai / mcp

mcpSAFE

mcp/empiriolabs-ai/mcp

EmpirioLabs AI remote MCP server: 180+ AI models, media generation, web search, batch jobs, GPU Cloud and hosted agents as tools

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
—
Transport
streamable-http
License
NOASSERTION
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Remote Model Context Protocol server for EmpirioLabs AI. Run 180+ AI models, image, video and speech generation, web search, batch jobs, GPU Cloud and hosted agents as tools with your EmpirioLabs account. It is a remote server, so there is nothing to install.

Every model and feature EmpirioLabs adds is available here as it launches, at the same final prices and limits as the API. Connections use your prepaid credits, and you can disconnect any app under Settings in the dashboard.

Connect

Claude (web, desktop, mobile)

  1. Open Settings, then Connectors, and choose Add custom connector.
  2. Enter https://mcp.empiriolabs.ai/mcp as the URL. Leave the OAuth client fields empty.
  3. Click Connect, sign in to EmpirioLabs, review the request, and choose Allow access.

Claude Code:

claude mcp add --transport http empiriolabs https://mcp.empiriolabs.ai/mcp

Run /mcp inside Claude Code to complete the sign-in the first time. The repository is also a Claude Code plugin (.claude-plugin/plugin.json), so it can be installed from a plugin marketplace.

ChatGPT

  1. Open EmpirioLabs AI in the ChatGPT Plugins directory and install it.
  2. Sign in to EmpirioLabs, review the request, and choose Allow access.
  3. Mention @EmpirioLabs AI in a chat to
Read from source at commit f1f6f3872f49OBSERVED · 2026-10-11
02

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (5 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (3)

LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
README.md:96
The server speaks JSON-RPC over `POST https://mcp.empiriolabs.ai/mcp`. Send `Authorization: Bearer <API key or OAuth access token>` and `Accept: application/json, text/event-stream` on every request.
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427
llms-install.md:10
2. **API key**: create a key at https://platform.empiriolabs.ai (API keys page) and send it as a bearer token.
Why it matters. an instruction to move sensitive data to an outside destination
Fix. remove; a skill never needs the user's secrets off the machine
LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104
server.json
Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source
Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha f1f6f3872f49full audit observations/trust-audit/mcp-server/empiriolabs-ai__mcp.json · Report an issue / request a re-scan
03

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-11f1f6f3872f49SAFEB89first audit
04

Questions

What is the mcp MCP server?

EmpirioLabs AI remote MCP server: 180+ AI models, media generation, web search, batch jobs, GPU Cloud and hosted agents as tools

Is mcp safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does mcp need?

It reads LOBEHUB_CREDENTIALS_SEED from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does mcp run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (f1f6f3872f49), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement