Atlas / MCP servers / inneraura / Hyperweave

HyperweaveBLOCK

Name: Hyperweave
Author: inneraura

mcp/inneraura/hyperweave

MCP server by inneraura · agent memory · agent observability · agent visualization · Audited 2026-10-08

Visual CLI for agents. Deterministic SVG diagrams, tables, and charts with embedded structured metadata. Zero JavaScript. Renders anywhere markdown does.

Verdict

BLOCK

Grade

Trust score

67 /100

Exposed tools

9 8r · 1w · 0d

Transport

stdio · streamable-http

License

Apache-2.0

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

The Visual CLI for agents

API&ensp;·&ensp; CLI&ensp;·&ensp; MCP&ensp;·&ensp; SKILL.md

Read from source at commit a97d9aafb836OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add hyperweave --env GITHUB_TOKEN=${GITHUB_TOKEN} --env HW_GITHUB_TOKENS=${HW_GITHUB_TOKENS} -- uvx hyperweave

claude-desktop

{
  "mcpServers": {
    "hyperweave": {
      "command": "uvx",
      "args": [
        "hyperweave"
      ],
      "env": {
        "GITHUB_TOKEN": "${GITHUB_TOKEN}",
        "HW_GITHUB_TOKENS": "${HW_GITHUB_TOKENS}"
      }
    }
  }
}

Exposed tools (9)

8 read · 1 write · 0 destructive.

Tool	Risk	Description
`hw_compose`	read	Compose a HyperWeave artifact.
`hw_compress`	read	Alias for hw_extract(respond=
`hw_diff`	read	Payload-bound structured delta between two artifacts (added/removed/changed).
`hw_discover`	read	Discover available HyperWeave components.
`hw_extract`	read	Extract the seed at a depth — envelope (compact digest) \| payload (lossless) \| markdown.
`hw_query`	read	Answer a question about an artifact from its compact envelope (cheap, not faithful).
`hw_transform`	write	Mutate an artifact via structural JSON patch → a new artifact.
`hw_validate`	read	Validate a spec envelope without rendering — returns a {valid, ...} report.
`hw_verify`	read	Recompute the hash; prove the artifact verifiably IS its data (id == sha256(payload)).

Trust audit

BLOCKgrade D · trust 67/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	FAIL
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: declared (3 observation(s))
Shell: declared (2 observation(s))
Dependencies: pinned
Secrets in source: found

Findings (25)

HIGHInventory / provenance · inv.suspicious_name · CWE-1104

src/hyperweave/compose/document/payload.py

payload.py

Why it matters. member named after an attack tool

Fix. remove or justify

HIGHInventory / provenance · inv.suspicious_name · CWE-1104

src/hyperweave/compose/payload.py

payload.py

Why it matters. member named after an attack tool

Fix. remove or justify

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95

src/hyperweave/compose/diagram/solver.py:1406

importlib.import_module(f"hyperweave.compose.diagram.{name}")

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95

src/hyperweave/telemetry/contract.py:74

parser_mod = importlib.import_module(registry.parser_module)

MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94

src/hyperweave/data/fonts/barlow-condensed-700.b64:1

d09GMgABAAAAADooAA4AAAAAi/gAADnNAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoE6G6l8HIl2BmAAhQ4RCAqBwAyBmGYLhCIAATYCJAOIQAQgBYN+B4h2GzV1RUaGjQOABPTj3EhEbof/qx9INhtRwcYBSJhOnv1/SuBkiLRuoTL9hYxgcMWaGbOTvRXyJcrx0fbN

MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94

src/hyperweave/data/fonts/barlow-condensed-900.b64:1

d09GMgABAAAAADZ0AA4AAAAAhuAAADYXAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoE6G6NWHIl2BmAAhQ4RCAqBvCyBlnALhCIAATYCJAOIQAQgBYNqB4h2GwVxRUaGjQOACP4Hq9nBGHQHZ/ekqGkjEaZUFDj7/5BAD9HwVG0PMoJUI3NMWCc7ErpB6K0ZE/r9YmWS

MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94

src/hyperweave/data/fonts/chakra-petch.b64:1

d09GMgABAAAAACaMAA4AAAAAX/AAACY0AAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGngbu1QchHgGYACFJBEICt4gxh8Lg3oAATYCJAOHcAQgBYQsB4Z/GwNRBRvXAM4DyM0l/ZZGI2JwHlB1hvxoJMJWL0p49v8hgRtDpGLan+IAGyBq1K3J9OSKURMqBQwhBn1sJpY4

MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94

src/hyperweave/data/fonts/inter.b64:1

d09GMgABAAAABV/wABMAAAANdbgABV91AAQAQgAAAAAAAAAAAAAAAAAAAAAAAAAAGsECG4mzChyBvlY/SFZBUtdnP01WQVKBKAZgP1NUQVSBXCc0AIHKLC+BNgqIy2iHsAQwm+8sATYCJAPbZAvbaAAEIAWaTAeCgAVbofjchl/SO317thTwxO+OOiix2RMp3YDazSKK

MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94

src/hyperweave/data/config/diagram-frame.yaml:113

lanes_max_long_haul: 3 # perimeter-channel edges (|Δlane| >= 2 or route:around)

MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321

tests/compose/test_diagram_card_label.py:294

token = "supercalifragilistic-throughput-per-second"

LOWInventory / provenance · inv.hidden_file · CWE-1104

.pre-commit-config.yaml

.pre-commit-config.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95

tests/telemetry/test_runtime_registries.py:81

importlib.import_module(reg.parser_module)

LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

tests/verbs/test_discoverability.py:170

results[key] = await eval(call_text, {"__builtins__": {}}, ns)

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

LOWInformation disclosure · disclose.log_secret · CWE-209, CWE-532

scripts/examples/proofset.py:1636

print(f"  [DATA FETCH FAIL] {token}: {type(exc).__name__}: {exc}")