Jentrix open clientBLOCK
Jentrix open client: the CLI and the official Claude Code and Codex plugins
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
The command-line client and the official coding-agent plugins for Jentrix — open at the edge, governed at the centre. Everything that runs on your machine is in this repository; everything that decides authority (authorization, tenancy, audit, idempotency, concurrency, rate limits) is enforced by the hosted service on every request, whatever the client says.
The CLI depends on all four plugin packages with exact pins and materializes them into your provider — Claude Code and Codex with the hook commands pinned to absolute paths, OpenCode through one mana
9b8266e74a41OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add plugin-pi --env STACKS_TOKEN=${STACKS_TOKEN} -- npx -y @jentrix/[email protected]{
"mcpServers": {
"plugin-pi": {
"command": "npx",
"args": [
"-y",
"@jentrix/[email protected]"
],
"env": {
"STACKS_TOKEN": "${STACKS_TOKEN}"
}
}
}
}Exposed tools (2)
2 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
list_widgets | read | Lists widgets. |
synthetic_link | read | synthetic required-nullable fixture |
Trust audit
BLOCKgrade D · trust 63/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (3 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
"input": "env sk-ant-api03-ABCDEFGHIJKLMNOPQRST",
"input": "key AKIAABCDEFGHIJKLMNOP used",
"input": "before\n-----BEGIN RSA PRIVATE KEY-----\nMIIabc\nxyz\n-----END RSA PRIVATE KEY-----\nafter",
"input": "xoxb-123456789012-abcdef ok",
"input": "sk_live_ABCDEF0123456789 charged",
url = new URL(trimmed, "http://127.0.0.1");
"input": "env sk-ant-api03-ABCDEFGHIJKLMNOPQRST",
"anthropic sk-ant-abcdefghijklmnopqrstuvwx",
assert.ok(!out.includes("sk-ant-abcdefghijklmnopqrstuvwx"));"Authorization: Bearer tmo_abcdefghijklmnop123 in /Users/operator/work tm_secret_value_123456 sk-ant-abcdefghijklmnopqrstu",
fake by construction (`tm_0123456789abcdefTOKEN`, `AKIAABCDEFGHIJKLMNOP`,
"input": "key AKIAABCDEFGHIJKLMNOP used",
"aws AKIAABCDEFGHIJKLMNOP",
assert.ok(!out.includes("AKIAABCDEFGHIJKLMNOP"));resolveTarget: () => ({ token: "tm_test_token_abcdefghijklmnop", url: "http://localhost:3000/api/mcp" }),resolveTarget: () => ({ token: "tm_test_token_abcdefghijklmnop", url: "http://localhost:3000/api/mcp" }),const secret = "tm_super_secret_value";
token: "tm_test_token_abcdefghijklmnop",
token: "tm_test_token_abcdefghijklmnop",
"input": "before\n-----BEGIN RSA PRIVATE KEY-----\nMIIabc\nxyz\n-----END RSA PRIVATE KEY-----\nafter",
"-----BEGIN PRIVATE KEY-----\nabc\n-----END PRIVATE KEY-----",
"input": "xoxb-123456789012-abcdef ok",
"input": "sk_live_ABCDEF0123456789 charged",
import { writeAlignmentMarker } from "../../src/session/state.ts";Object.assign(process.env ... fetch(
Gates applied: critical_finding, no_behavioural_pass.
9b8266e74a41full audit observations/trust-audit/mcp-server/jentrix-au__jentrix.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 9b8266e74a41 | BLOCK | D | 63 | first audit |
Questions
What is the @jentrix/cli MCP server?
Jentrix open client: the CLI and the official Claude Code and Codex plugins
What tools does @jentrix/cli expose?
2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is @jentrix/cli safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (63/100) and found 5 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does @jentrix/cli need?
It reads STACKS_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does @jentrix/cli run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as @jentrix/plugin-pi at 0.1.1.
How current is this page?
The grade is for one exact copy of the source (9b8266e74a41), read on 2026-10-12. The repository is watched and re-audited when it changes.