ManusBLOCK
MCP server that provides Manus-like capabilities
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A Model Context Protocol (MCP) server implementation that can browse the web, perform search queries, and execute code.
Current Features
- "google_search" tool that performs Google searches and returns relevant links
- "browse_web" tool that allows browsing websites, clicking elements, and extracting content
- "code_interpreter" tool that allows reading, writing, and executing code in a sandbox environment
- "bash_tool" tool that allows running shell commands in the sandbox directory
Using with Claude for Desktop
To use Manus MCP with Claude for Desktop:
- Create or edit the Claude for Desktop configuration file:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json
- Add the following configuration:
{
"mcpServers": {
"manus-mcp": {
"command": "uv",
"args": [
"--directory",
"/ABSOLUTE/PATH/TO/manus-mcp",
"run",
"mcp_server.py"
]
}
}
}- Restart Claude for Desktop
- You should now see the Manus MCP tools available in Claude for Desktop
Available Tools
hello_world
A simple greeting tool that returns a welcome message.
google_search
Performs Google searches and returns a list of relevant links.
browse_web
Interacts with a web browser to navigate websites and extract information. Supported actions:
navigate: Go to a specific URLclick: Click an element by indexinput_text: Input text into an elementget_content: Get the page contentexecute_js: Execute JavaScript codescroll: Scroll the pagerefresh: Refresh the current page
code_interpreter
Allows reading, writing, and executing code files in a sandboxed environment. Supported actions:
read: Read the contents of a filewrite: Write content to a fileexecute: Execute a file or code snippetlist: List fi
25d9b0a8b92aOBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add manus-mcp -- uvx manus-mcp
{
"mcpServers": {
"manus-mcp": {
"command": "uvx",
"args": [
"manus-mcp"
]
}
}
}Exposed tools (6)
6 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
bash_tool | read | |
browse_web | read | |
code_interpreter | read | |
google_search | read | |
hello_world | read | |
manus_identity | read |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | WARN |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (3)
"sudo", "su ", "rm -rf /", "> /dev", "< /dev",
system use found in code, not declared in the description
Gates applied: no_behavioural_pass, no_license.
25d9b0a8b92afull audit observations/trust-audit/mcp-server/huyouare__manus-2.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 25d9b0a8b92a | BLOCK | D | 69 | first audit |
Questions
What is the Manus MCP server?
MCP server that provides Manus-like capabilities
What tools does Manus expose?
6 in total: 6 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Manus safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does Manus need?
No credential environment variables were found in its source, so it appears to need none.
How does Manus run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as manus-mcp.
How current is this page?
The grade is for one exact copy of the source (25d9b0a8b92a), read on 2026-10-08. The repository is watched and re-audited when it changes.