Atlas / MCP servers / hisma / Model Context Protocol servers Unofficial Servers Maintained

Model Context Protocol servers Unofficial Servers MaintainedBLOCK

Name: Model Context Protocol servers Unofficial Servers Maintained
Author: hisma

mcp/hisma/servers-archived

MCP server by hisma · Audited 2026-10-12

⚑ Report / re-scan Source ↗

Reference MCP servers that are no longer maintained

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

66 44r · 20w · 2d

Transport

stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Looking for MCP servers?

This is a fork of archived MCP servers. Most are no longer maintained, but the Puppeteer fork in src/puppeteer/ is actively maintained by Richard Meyer and more may be updated over time.

For the current, actively maintained MCP servers, please visit:

👉 https://github.com/modelcontextprotocol/servers

About this Archive

This repository contains historical reference implementations for the Model Context Protocol (MCP). These servers were created to demonstrate MCP features and SDK capabilities but are now archived.

⚠️ Security Notice

NO SECURITY GUARANTEES ARE PROVIDED FOR THESE ARCHIVED SERVERS.

These servers are no longer maintained
No security updates or bug fixes will be provided
Use at your own risk
For production use, please refer to the actively maintained servers repository linked above

Archived Servers

The following servers are included in this archive for historical reference:

AWS KB Retrieval
Brave Search
EverArt
Git
GitHub
GitLab
Google Drive
Google Maps
PostgreSQL
Puppeteer (fork maintained by Richard Meyer; see src/puppeteer/README.md)
Redis
Sentry
Slack
SQLite

Contributing

This repository is archived and no longer accepts contributions. For contributing to MCP servers, please visit the active servers repository.

License

MIT

Read from source at commit 27175af99923OBSERVED · 2026-10-12

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add server-slack --env AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID} --env AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY} --env BRAVE_API_KEY=${BRAVE_API_KEY} --env EVERART_API_KEY=${EVERART_API_KEY} -- npx -y @modelcontextprotocol/[email protected]

claude-desktop

{
  "mcpServers": {
    "server-slack": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/[email protected]"
      ],
      "env": {
        "AWS_ACCESS_KEY_ID": "${AWS_ACCESS_KEY_ID}",
        "AWS_SECRET_ACCESS_KEY": "${AWS_SECRET_ACCESS_KEY}",
        "BRAVE_API_KEY": "${BRAVE_API_KEY}",
        "EVERART_API_KEY": "${EVERART_API_KEY}"
      }
    }
  }
}

Exposed tools (66)

44 read · 20 write · 2 destructive. Blast radius: 2 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`add_issue_comment`	write	Add a comment to an existing issue
`append_insight`	write	Add a business insight to the memo
`brave_local_search`	read	Searches for local businesses and places using Brave
`brave_web_search`	read	Performs a web search using the Brave Search API, ideal for general queries, news, articles, and online content.
`create_branch`	write	Create a new branch in a GitHub repository
`create_issue`	write	Create a new issue in a GitHub repository
`create_merge_request`	write	Create a new merge request in a GitLab project
`create_or_update_file`	write	Create or update a single file in a GitHub repository
`create_pull_request`	write	Create a new pull request in a GitHub repository
`create_pull_request_review`	write	Create a review on a pull request
`create_repository`	write	Create a new GitHub repository in your account
`create_table`	write	Create a new table in the SQLite database
`delete`	destructive	Delete one or more keys from Redis
`describe_table`	read	Get the schema information for a specific table
`fork_repository`	read	Fork a GitHub repository to your account or specified organization
`generate_image`	read	Generate images using EverArt Models and returns a clickable link to view the generated image.
`get`	read	Get value by key from Redis
`get_file_contents`	read	Get the contents of a file or directory from a GitHub repository
`get_issue`	read	Get details of a specific issue in a GitHub repository.
`get_pull_request`	read	Get details of a specific pull request
`get_pull_request_comments`	read	Get the review comments on a pull request
`get_pull_request_files`	read	Get the list of files changed in a pull request
`get_pull_request_reviews`	read	Get the reviews on a pull request
`get_pull_request_status`	read	Get the combined status of all status checks for a pull request
`get_sentry_issue`	read
`list`	read	List Redis keys matching a pattern
`list_commits`	read	Get list of commits of a branch in a GitHub repository
`list_issues`	read	List issues in a GitHub repository with filtering options
`list_pull_requests`	read	List and filter repository pull requests
`list_tables`	read	List all tables in the SQLite database
`maps_directions`	read	Get directions between two points
`maps_distance_matrix`	read	Calculate travel distance and time for multiple origins and destinations
`maps_elevation`	read	Get elevation data for locations on the earth
`maps_geocode`	read	Convert an address into geographic coordinates
`maps_place_details`	read	Get detailed information about a specific place
`maps_reverse_geocode`	read	Convert coordinates into an address
`maps_search_places`	read	Search for places using Google Places API
`merge_pull_request`	write	Merge a pull request
`puppeteer_click`	read	Click an element on the page
`puppeteer_evaluate`	write	Execute JavaScript in the browser context
`puppeteer_fill`	read	Fill out an input field
`puppeteer_hover`	read	Hover an element on the page
`puppeteer_navigate`	read	Navigate to a URL
`puppeteer_screenshot`	read	Take a screenshot of the current page or a specific element
`puppeteer_select`	read	Select a value in a dropdown
`push_files`	write	Push multiple files to a GitHub repository in a single commit
`query`	write	Run a read-only SQL query
`read_query`	write	Execute a SELECT query on the SQLite database
`retrieve_from_aws_kb`	read	Performs retrieval from the AWS Knowledge Base using the provided query and Knowledge Base ID.
`search`	read	Search for files in Google Drive
`search_code`	read	Search for code across GitHub repositories
`search_issues`	read	Search for issues and pull requests across GitHub repositories
`search_repositories`	read	Search for GitHub repositories
`search_users`	read	Search for users on GitHub
`set`	write	Set a Redis key-value pair with optional expiration
`slack_add_reaction`	write	Add a reaction emoji to a message
`slack_get_channel_history`	read	Get recent messages from a channel
`slack_get_thread_replies`	read	Get all replies in a message thread
`slack_get_user_profile`	read	Get detailed profile information for a specific user
`slack_get_users`	read	Get a list of all users in the workspace with their basic profile information
`slack_list_channels`	read	List public or pre-defined channels in the workspace with pagination
`slack_post_message`	write	Post a new message to a Slack channel
`slack_reply_to_thread`	read	Reply to a specific message thread in Slack
`update_issue`	write	Update an existing issue in a GitHub repository
`update_pull_request_branch`	write	Update a pull request branch with the latest changes from the base branch
`write_query`	destructive	Execute an INSERT, UPDATE, or DELETE query on the SQLite database

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	FAIL
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (5 observation(s))
Network: declared (6 observation(s))
Shell: none-observed
Dependencies: not all pinned
Secrets in source: found

Findings (11)

HIGHPrompt injection · review.misleading_scope · CWE-94, CWE-1427

<listing:description>

Fork and update (v0.6.5) of the original @modelcontextprotocol/server-puppeteer MCP server for browser automation using Puppeteer.

Why it matters. The package claims to be a Puppeteer browser automation server, but the exposed tools are entirely GitHub, Brave search, image generation, SQLite, and Redis operations with no browser automation capabilities.

Fix. rewrite it so the instruction says plainly what it does, and asks the user before it acts

MEDIUMHard-coded secrets · secret.slack · CWE-798, CWE-321

src/slack/README.md:105

"SLACK_BOT_TOKEN": "xoxb-your-bot-token",

MEDIUMHard-coded secrets · secret.slack · CWE-798, CWE-321

src/slack/README.md:134

"SLACK_BOT_TOKEN": "xoxb-your-bot-token",

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

delete, write_query

Why it matters. 2 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/gdrive/index.ts:181

"../../../.gdrive-server-credentials.json",

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/gdrive/index.ts:189

"../../../gcp-oauth.keys.json",

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

package.json

@modelcontextprotocol/server-everything, @modelcontextprotocol/server-gdrive, @modelcontextprotocol/server-postgres, @modelcontextprotocol/server-puppeteer, @modelcontextprotocol/server-slack, @modelc

Why it matters. 10 dependency range(s) float