ModelsAtlas
Explore
Atlas / MCP servers / erickwendel / Erick Wendel Contributions

Erick Wendel ContributionsSAFE

mcp/erickwendel/erick-wendel-contributions
MCP server by erickwendel · graphql · large language models · llm · Audited 2026-10-03
⚑ Report / re-scanSource ↗

A Model Context Protocol (MCP) server that provides tools to query Erick Wendel's contributions across different platforms

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
5 5r · 0w · 0d
Transport
stdio
License
MIT
Stars
367
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://www.npmjs.com/package/@erickwendel/contributions-mcp) [](https://www.npmjs.com/package/@erickwendel/contributions-mcp)

A Model Context Protocol (MCP) server that provides tools to query Erick Wendel's contributions across different platforms. Query talks, blog posts, and videos using natural language through Claude, Cursor or similars. This project was built using Cursor IDE with the default agent (trial version).

Quick Start

Use this MCP server directly with Claude Desktop or Cursor without installation:

{
"mcpServers": {
"erickwendel-contributions": {
"command": "npx",
"args": ["-y", "@erickwendel/contributions-mcp"]
}
}
}

Add this configuration to:

  • Claude Desktop: ~/Library/Application Support/Claude/claude_desktop_config.json (macOS)
  • Cursor: ~/.cursor/mcp.json

Available Tools

This MCP server provides the following capabilities:

Tools

  • get-talks: Retrieves a paginated list of talks with optional filtering
  • Supports filtering by ID, title, language, city, country, and year
  • Can return counts grouped by language, country, or city
  • get-posts: Fetches posts with optional filtering and pagination
  • Supports filtering by ID, title, language, and portal
  • get-videos: Retrieves videos with optional filtering and pagination
  • Supports filtering by ID, title, and language
  • check-status: Verifies if the API is alive and responding

Prompts

  • find-content: Generate queries to find specific content by type, topic, and language
  • summarize-activity: Create summaries of content activity by year

Resources

-

Read from source at commit 6afe1c479188OBSERVED · 2026-10-03
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add contributions-mcp -- npx -y @erickwendel/[email protected]
claude-desktop
{
  "mcpServers": {
    "contributions-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@erickwendel/[email protected]"
      ]
    }
  }
}
03

Exposed tools (5)

5 read · 0 write · 0 destructive.

ToolRiskDescription
check_statusreadCheck if the API is alive and responding.
get_postsreadGet a list of posts with optional filtering and pagination.
get_projectsreadGet a list of projects with optional filtering and pagination.
get_talksreadGet a list of talks with optional filtering and pagination.
get_videosreadGet a list of videos with optional filtering and pagination.
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (1 observation(s))
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (2)

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/config/api.ts:1
import { createClient } from '../../erickwendel-sdk/index.ts'
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@modelcontextprotocol/sdk, zod, @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, esbuild, eslint
Why it matters. 7 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-03 · audit v0.4.1 · source sha 6afe1c479188full audit observations/trust-audit/mcp-server/erickwendel__erick-wendel-contributions.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-036afe1c479188SAFEB89first audit
06

Questions

What is the Erick Wendel Contributions MCP server?

A Model Context Protocol (MCP) server that provides tools to query Erick Wendel's contributions across different platforms

What tools does Erick Wendel Contributions expose?

5 in total: 5 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Erick Wendel Contributions safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does Erick Wendel Contributions need?

No credential environment variables were found in its source, so it appears to need none.

How does Erick Wendel Contributions run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as @erickwendel/contributions-mcp at 1.1.4.

How current is this page?

The grade is for one exact copy of the source (6afe1c479188), read on 2026-10-03. The repository is watched and re-audited when it changes.

Advertisement