Atlas / MCP servers / jvogan / Motif

MotifBLOCK

mcp/jvogan/motif

An AI-native molecular biology workbench for Claude Science: Claude opens sequence files and prepares analyses on request; you annotate, align, and review them in an interactive workspace.

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
4 2r · 2w · 0d
Transport
stdio
License
MIT
Stars
47
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Website · Codex setup · Claude Science setup · Capabilities · Examples · Security

Motif is an AI-native molecular-biology workbench for exploring, editing, annotating, aligning, comparing, and sharing DNA, RNA, and protein records and analysis results. Its core is a self-contained HTML workspace that can run on its own or open through an AI host. The same Motif runtime supports sequence records, maps, annotations, alignments, cloning workflows, Sanger traces, provenance, checkpoints, and portable exports.

Ways to use Motif

The Codex local plugin and Claude Science adapter expose the same workbench tools. motif_open_workbench opens the interactive MCP App, and motif_create_workbench_artifact returns a portable HTML workbench. After opening Motif, confirm that the expected records and active view are visible.

Read from source at commit a67f6eee72aeOBSERVED · 2026-10-08
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add motif-for-claude-science -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "motif-for-claude-science": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (4)

2 read · 2 write · 0 destructive.

ToolRiskDescription
GreenGatewriteGreenGate (Lampropoulos et al.) — BsaI plant kit with 7 modules in a fixed order.
MoClo-CIDARreadCIDAR MoClo (Iverson et al.) — BsaI bacterial-circuit standard parts (Promoter / RBS / CDS / Terminator).
motifreadMolecular biology workbench
motif_create_workbench_artifactwrite
04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryFAIL
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (6 observation(s))
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (23)

HIGHInventory / provenance · inv.suspicious_name · CWE-1104
mcp/motif/payload.ts
payload.ts
Why it matters. member named after an attack tool
Fix. remove or justify
MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532
scripts/check-css-tokens.mjs:190
console.log(`✓ check-css-tokens: ${references.size} unique var(--token) references, all resolved.`);
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
public/data/vectors.json:5
"sequence": "TCGCGCGTTTCGGTGATGACGGTGAAAACCTCTGACACATGCAGCTCCCGGAGACGGTCACAGCTTGTCTGTAAGCGGATGCCGGGAGCAGACAAGCCCGTCAGGGCGCGTCAGCGGGTGTTGGCGGGTGTCGGGGCTGGCTTAACTATGCGGCATCAGAGCAGATTGTACTGAGAGTGCACCATAT
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
public/data/vectors.json:121
"sequence": "TTCTCATGTTTGACAGCTTATCATCGATAAGCTTTAATGCGGTAGTTTATCACAGTTAAATTGCTAACGCAGTCAGGCACCGTGTATGAAATCTAACAATGCGCTCATCGTCATCCTCGGCACCGTCACCCTGGATGCTGTAGGCATAGGCTTGGTTATGCCGGTACTGCCGGGCCTCTTGCGGGAT
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
public/data/vectors.json:203
"sequence": "GAATTCCGGATGAGCATTCATCAGGCGGGCAAGAATGTGAATAAAGGCCGGATAAAACTTGTGCTTATTTTTCTTTACGGTCTTTAAAAAGGCCGTAATATCCAGCTGAACGGTCTGGTTATAGGTACATTGAGCAACTGACTGAAATGCCTCAAAATGTTCTTTACGATGCCATTGGGATATATCA
MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
public/data/vectors.json:273
"sequence": "CTAAATTGTAAGCGTTAATATTTTGTTAAAATTCGCGTTAAATTTTTGTTAAATCAGCTCATTTTTTAACCAATAGGCCGAAATCGGCAAAATCCCTTATAAATCAAAAGAATAGACCGAGATAGGGTTGAGTGTTGTTCCAGTTTGGAACAAGAGTCCACTATTAAAGAACGTGGACTCCAACGTC
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
src/artifacts/ClaudeSciencePrimerWorkspace.tsx:317
if (result.rejections.tmDiff > 0) reasons.push(`${result.rejections.tmDiff.toLocaleString()} pairings exceeded ΔTm 5 °C`);
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
src/artifacts/ClaudeSciencePrimerWorkspace.tsx:349
case 'cross-dimer-cutoff': return 'Cross-dimer ΔG is below the default −5 kcal/mol review cutoff.';
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
src/artifacts/ClaudeSciencePrimerWorkspace.tsx:1040
{!validationMessage && pairs.length > 0 ? <span className="motif-cs-primer-result-badge">Best ΔTm {pairs[0].tmDifference.toFixed(1)} °C</span> : null}
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
src/artifacts/ClaudeSciencePrimerWorkspace.tsx:1095
<span><small>ΔTm</small><strong>{pair.tmDifference.toFixed(1)} °C</strong></span>
MEDIUMObfuscation / stealth · obf.homoglyph · CWE-506, CWE-94
src/artifacts/ClaudeSciencePrimerWorkspace.tsx:1121
<Metric label="Hairpin ΔG" value={`${hairpin.deltaG.toFixed(1)}${hairpin.status === 'exact' ? '' : ' · review'}`} state={qualityState(hairpin.deltaG, -3, hairpin.status)} />
LOWInventory / provenance · inv.hidden_file · CWE-1104
.gitleaksignore
.gitleaksignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp/motif/payload.ts:3
import { VALID_NCBI_TABLE_IDS } from '../../src/bio/codon-tables.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp/motif/payload.ts:4
import { parseFasta } from '../../src/bio/fasta-parser.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp/motif/payload.ts:5
import { parseGenBank } from '../../src/bio/genbank-parser.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp/motif/payload.ts:6
import { resolveFeatureColor } from '../../src/bio/feature-palette.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
mcp/motif/payload.ts:7
import { normalizeSequenceStrict } from '../../src/bio/sequence-normalization.js';
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
e2e/playwright.msa.config.ts:26
baseURL: `http://127.0.0.1:${port}`,
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
e2e/playwright.msa.config.ts:36
url: `http://127.0.0.1:${port}/motif.html`,
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
e2e/playwright.pane-placement.config.ts:21
baseURL: `http://127.0.0.1:${port}`,
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
e2e/playwright.pane-placement.config.ts:28
url: `http://127.0.0.1:${port}/motif.html`,
LOWObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94
e2e/claude-science-construct-verification.spec.ts:10
const REFERENCE_SEQUENCE = 'TCCGGGTCCACTCAATAGGGCCTATGGTGTTAAATATGTGTCTCTTGTTCGCTAGGGTGATAGCAAAAAATATAGTGCCTGCTTTTGTGGATGTAAATAATAACTCGCCCCCCTCCCTCACGAGAGCGCTACGCAAACGTATTTGCCGCCCGCCCTTGGTCAGACATTAGCA
INFOInventory / provenance · inv.oversize · CWE-1104
src/artifacts/motif-artifact.tsx
src/artifacts/motif-artifact.tsx
Why it matters. 1102058 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-08 · audit v0.4.1 · source sha a67f6eee72aefull audit observations/trust-audit/mcp-server/jvogan__motif.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-08a67f6eee72aeBLOCKD69first audit
06

Questions

What is the Motif MCP server?

An AI-native molecular biology workbench for Claude Science: Claude opens sequence files and prepares analyses on request; you annotate, align, and review them in an interactive workspace.

What tools does Motif expose?

4 in total: 2 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Motif safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.

What credentials does Motif need?

No credential environment variables were found in its source, so it appears to need none.

How does Motif run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as motif-for-claude-science at 0.4.0.

How current is this page?

The grade is for one exact copy of the source (a67f6eee72ae), read on 2026-10-08. The repository is watched and re-audited when it changes.

Advertisement