create-nextblockBLOCK
The open-source, full-stack CMS for Next.js 16. An AI-native, developer-first alternative to headless platforms built with React Server Components, Supabase, and Tailwind CSS.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
The open-source, full-stack AI-native CMS for Next.js 16, Supabase, and Tailwind CSS.
<a href="https://vercel.com/new/clone?repository-url=https%3A%2F%2Fgithub.com%2Fnextblock-cms%2Fnextblock&project-name=nextblock&repository-name=nextblock&stores=%5B%7B%22type%22%3A%22integration%22%2C%22integrationSlug%22%3A%22supabase%22%2C%22productSlug%22%3A%22supabase%22%7D%5D&demo-title=NextBlock%20CMS&demo-description=Open-source%20Next.js%2016%20%2B%20Supabase%20CMS%20with%20a%20block%20editor%2C%20SEO%20engine%2C%20bilingual%20content%20and%20an%20MCP%20server%20for%20AI%20agents.&demo-url=https%3A%2F%2Fcms.nextblock.dev%2F&demo-image=https%3A%2F%2Fcms.nextblock.dev%2Fassets%2Fnextblock-banner.jpg">
Deploy a production Next.js 16 + Supabase website and CMS in one click. Vercel provisions the database and injects its keys before the first build, NextBlock applies its own schema during that build, and the in-app wizard asks only for your admin account. No environment variables to fill in.
Live Sandbox · Documentation · Deploy Guide · GitHub
f2b131a6a0b3OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add nextblock --env CRON_SECRET=${CRON_SECRET} --env DRAFT_MODE_SECRET=${DRAFT_MODE_SECRET} --env FREEMIUS_AI_SANDBOX_KEY=${FREEMIUS_AI_SANDBOX_KEY} --env FREEMIUS_API_KEY=${FREEMIUS_API_KEY} -- npx -y [email protected]{
"mcpServers": {
"nextblock": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"CRON_SECRET": "${CRON_SECRET}",
"DRAFT_MODE_SECRET": "${DRAFT_MODE_SECRET}",
"FREEMIUS_AI_SANDBOX_KEY": "${FREEMIUS_AI_SANDBOX_KEY}",
"FREEMIUS_API_KEY": "${FREEMIUS_API_KEY}"
}
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
brief_business_name | read | brief_description |
Trust audit
BLOCKgrade F · trust 38/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (6 observation(s))
- Network
- declared (12 observation(s))
- Shell
- declared (7 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
exec(cmd, { maxBuffer: 10 * 1024 * 1024 }, (error, stdout, stderr) => {host === "metadata.google.internal"
host === "metadata.google.internal"
console.log('\x1b[32m%s\x1b[0m', `Removed the ${JOB_NAME} job and its Vault secret.`);R2_S3_PUBLIC_ENDPOINT=http://127.0.0.1:9000
NEXT_PUBLIC_R2_BASE_URL=http://127.0.0.1:9000/nextblock
NEXT_PUBLIC_R2_PUBLIC_URL=http://127.0.0.1:9000/nextblock
R2_S3_PUBLIC_ENDPOINT=http://127.0.0.1:9000
NEXT_PUBLIC_R2_BASE_URL=http://127.0.0.1:9000/nextblock
// apps/nextblock/app/cms/revisions/RevisionHistoryButton.tsx
'use client'
// apps/nextblock/app/cms/revisions/RevisionHistoryButton.tsx
'use client'
const apiKey = 'sk-or-v1-test-secret-1234567890';
const SECRET = 'unit-test-encryption-secret';
ts-errors.txt
.env.docker.example
.nxignore
.prettierignore
.env.docker.example
.browserslistrc
const version = createHash('sha1').update(fingerprint).digest('hex').slice(0, 12);uid: createHash('md5').update(instanceName).digest('hex'),const version = createHash('sha1').update(fingerprint).digest('hex').slice(0, 12);uid: createHash('md5').update(instanceName).digest('hex'),Gates applied: no_behavioural_pass.
f2b131a6a0b3full audit observations/trust-audit/mcp-server/nextblock-cms__nextblock.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | f2b131a6a0b3 | BLOCK | F | 38 | first audit |
Questions
What is the create-nextblock MCP server?
The open-source, full-stack CMS for Next.js 16. An AI-native, developer-first alternative to headless platforms built with React Server Components, Supabase, and Tailwind CSS.
What tools does create-nextblock expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is create-nextblock safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (38/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does create-nextblock need?
It reads CRON_SECRET, DRAFT_MODE_SECRET, FREEMIUS_AI_SANDBOX_KEY, FREEMIUS_API_KEY, FREEMIUS_ECOMMERCE_SANDBOX_KEY, GH_TOKEN, GITHUB_TOKEN, NB_2FA_SECRET, NEXTBLOCK_GITHUB_TOKEN, NEXT_PUBLIC_RECAPTCHA_SITE_KEY, NEXT_PUBLIC_SUPABASE_ANON_KEY and NEXT_PUBLIC_SUPABASE_PUBLISHABLE_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does create-nextblock run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as nextblock at 0.21.3.
How current is this page?
The grade is for one exact copy of the source (f2b131a6a0b3), read on 2026-10-11. The repository is watched and re-audited when it changes.