Atlas / MCP servers / openclaw / mcporter

mcporterBLOCK

mcp/openclaw/mcporter

Call MCPs via TypeScript, masquerading as simple TypeScript API. Or package them as cli.

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
109 98r · 9w · 2d
Transport
stdio · streamable-http
License
MIT
Stars
5,058
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/openclaw/mcporter/actions/workflows/ci.yml) [](https://www.npmjs.com/package/mcporter) [](https://nodejs.org) [](LICENSE) [](https://mcporter.sh)

MCPorter is a TypeScript runtime and command-line tool for discovering and calling Model Context Protocol servers. It is for developers and coding agents that need the same MCP tools from a terminal, a script, or a generated standalone CLI.

Install

Try the CLI without installing it:

npx mcporter --version

Install it for repeated command-line use:

brew install steipete/tap/mcporter
# or
npm install -g mcporter

Node 24 or newer is required for npm installs. For the TypeScript runtime, add mcporter to your project with your package manager. Signed macOS binaries and the other supported install paths are covered in the install guide.

Quick start

Inspect a public MCP server, then call one of its tools:

npx mcporter list https://mcp.context7.com/mcp --brief
npx mcporter call https://mcp.context7.com/mcp.resolve-library-id \
query="React hooks docs" libraryName=react

The first command prints the server's TypeScript-style tool signatures. The second returns matching Context7 library IDs without requiring local configuration or credentials. See the five-minute quickstart for resources, generated CLIs, and typed clients.

Core workflows

Read from source at commit 4ca6a923d35eOBSERVED · 2026-10-12
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add test-server-modern --env CLIENT_SECRET=${CLIENT_SECRET} --env CONTEXT7_API_KEY=${CONTEXT7_API_KEY} --env FIXTURE_TOKEN=${FIXTURE_TOKEN} --env INLINE_TOKEN=${INLINE_TOKEN} -- npx -y @mcporter/[email protected]
claude-desktop
{
  "mcpServers": {
    "test-server-modern": {
      "command": "npx",
      "args": [
        "-y",
        "@mcporter/[email protected]"
      ],
      "env": {
        "CLIENT_SECRET": "${CLIENT_SECRET}",
        "CONTEXT7_API_KEY": "${CONTEXT7_API_KEY}",
        "FIXTURE_TOKEN": "${FIXTURE_TOKEN}",
        "INLINE_TOKEN": "${INLINE_TOKEN}"
      }
    }
  }
}
03

Exposed tools (109)

98 read · 9 write · 2 destructive. Blast radius: 2 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
API-post-pagewriteCreate a Notion page
addwrite
add-numberswriteAdd two numbers
admin_resetdestructive
alphareadkeep alive server
alpha-longreadkeep alive server
alpha__pingreadTool from MCPorter server
annotatedreadExpose all stable 2025 tool annotations.
array-object-testreadArray object test
array-testreadArray coercion test
array_toolread
askread
betareadephemeral server
bigread
browser.navigatereadNavigate the browser
cachedread
calculatorreadMath tools
case-optionsreadCase options test
check_login_statusread
chrome-devtoolsreadChrome DevTools MCP server
clickreadClick an element
completereadComplete definition
confirm_deletedestructive
context7readContext7 documentation MCP
create_commentwriteCreate a comment on a specific Linear issue
create_entitieswrite
delayedread
demoreadDemo server
demo_toolreadDemo tool
deploywrite
deterministic-bundlereadDeterministic bundle integration server
doctorreadRuns diagnostics
echoread
echo_textread
elicit_namereadAsk the client for a name using form elicitation.
evaluate_scriptreadEvaluate a function on a page
examplereadTest
failread
fakereadFake HTTP server
fetchreadFetch a URL
firecrawlread
fixtureread${fixture} committed fixture
generated-daemonreadGenerated daemon test server
heldread
held_writewrite
http-serverreadA test server
identityread
immichreadImmich MCP
integrationreadIntegration test server
integration-mjsreadMJS bundle integration server
legacyreadLegacy test server
linearreadLinear MCP
linear-clireadIssue tools
list_commentsreadList comments for an issue
list_documentsreadList documents in the user
list_entitiesread
list_filesread
list_pagesreadList open pages
list_projectsreadList Vercel projects
log_spamreadEmit logging notifications at several levels.
long_taskreadEmit deterministic progress notifications before completing.
lookupreadLookup documentation entries
mcp-sentry-dev-mcpreadAd-hoc Sentry
my-servicereadExample
next_valueread
notereadNote a time
object-testreadObject parsing test
object_toolread
obsidianreadLocal Obsidian bridge
oneread
option_case_testread
pingread
plain_textread
qs-demowriteQuick start demo
raw-required-testreadRaw required test
read_text_fileread
recorded-toolreadReplay fixture tool
runtime_toolreadA dynamically registered fixture tool.
safe_toolread*/ } globalThis.docInjected = true; interface Reopened { /*
sample_poemreadAsk the client to sample a short poem.
searchreadSearch pages
search_issuesreadSearch issues
set_cells_batchwrite
shadcnreadshadcn/ui registry MCP
subtractreadSubtract numbers
summarizereadSummarize content
take_snapshotreadTakes a snapshot.
tempreadtest
test-oauthreadTest OAuth server
test-oauth-env-no-browserreadTest OAuth server
test-oauth-env-no-browser-falsyreadTest OAuth server
test-oauth-headless-urlreadTest OAuth server
test-oauth-isolated-homereadTest OAuth server
test-oauth-no-browser-urlreadTest OAuth server
test-oauth-read-failurereadTest OAuth server
test-oauth-repeat-redirectreadTest OAuth server
test-oauth-scopereadTest OAuth server
test-oauth-singleflightreadTest OAuth server
test-oauth-stale-clientreadTest OAuth server
test-oauth-static-clientreadTest OAuth server
test-oauth-wait-before-redirectreadTest OAuth server
throwreadRaise a JSON-RPC protocol error.
toggle_toolreadToggle a runtime-registered tool and emit list_changed.
tool-alias-testreadTool alias test
touch_resourcereadNotify subscribers that the mutable resource changed.
use_sentryreadProxy to Sentry
vercelread
whoamiread
xhs.check_login_statusread
04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (11 observation(s))
Network
declared (6 observation(s))
Shell
declared (4 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (25)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
src/daemon/process-retirement.ts:137
exec(
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHNetwork egress · net.tls_off · CWE-200, CWE-319
src/cli/ephemeral-flags.ts:43
if (token === '--allow-http' || token === '--insecure') {
Why it matters. certificate verification is disabled
Fix. leave verification on
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
admin_reset, confirm_delete
Why it matters. 2 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWInventory / provenance · inv.hidden_file · CWE-1104
.crabbox.yaml
.crabbox.yaml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.mac-release.env.example
.mac-release.env.example
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.oxfmtrc.json
.oxfmtrc.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.oxlintrc.json
.oxlintrc.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
src/chrome-devtools-relay-client.ts:193
const expectedAccept = createHash('sha1').update(`${websocketKey}${WEBSOCKET_GUID}`).digest('base64');
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
src/chrome-devtools-relay-proxy.ts:70
const accept = createHash('sha1').update(`${key}${WEBSOCKET_GUID}`).digest('base64');
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
tests/chrome-devtools-relay-client.test.ts:393
const accept = createHash('sha1').update(`${key}258EAFA5-E914-47DA-95CA-C5AB0DC85B11`).digest('base64');
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
tests/chrome-devtools-relay-proxy.test.ts:7
const WEBSOCKET_ACCEPT = createHash('sha1')
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
tests/helpers/chrome-relay.ts:74
const accept = createHash('sha1').update(`${websocketKey}258EAFA5-E914-47DA-95CA-C5AB0DC85B11`).digest('base64');
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/cli/config/add.ts:2
import { OAuthRequestedScopeSchema } from '../../config-schema.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/cli/config/add.ts:3
import { writeRawConfig, type LoadConfigOptions, type RawEntry } from '../../config.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/cli/config/add.ts:4
import { pathsForImport, readExternalEntries } from '../../config-imports.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/cli/config/add.ts:5
import { expandHome } from '../../env.js';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
src/cli/config/add.ts:6
import { withFileLock } from '../../fs-json.js';
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/daemon.md:144
Set persistent controls as literal values in the existing Chrome definition’s `env` map in `~/.mcporter/mcporter.json` (or `.jsonc` when no `.json` exists), alongside `chromeDevtoolsRelay: "require"`.
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/hang-debug.md:40
CHROME_DEVTOOLS_MCP_BROWSER_URL=http://127.0.0.1:9222 \
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
examples/headless-pooling-demo.ts:76
return { baseUrl: new URL(`http://127.0.0.1:${address.port}/mcp`), httpServer };
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
tests/chrome-devtools-command.test.ts:63
['sh', ['-c', 'chrome-devtools-mcp --browserUrl=http://127.0.0.1:9222']],
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
tests/chrome-devtools-relay-client.test.ts:210
['redirect', 'HTTP/1.1 302 Found\r\nLocation: http://127.0.0.1:9/\r\nContent-Length: 0\r\n\r\n'],
LOWNetwork egress · net.tls_off · CWE-200, CWE-319
tests/cli-ephemeral-flags.test.ts:61
it('accepts --insecure as a hidden alias for --allow-http', () => {
Why it matters. certificate verification is disabled
Fix. leave verification on
LOWNetwork egress · net.tls_off · CWE-200, CWE-319
tests/cli-ephemeral-flags.test.ts:62
const args = ['--http-url', 'http://mcp.example.com/mcp', '--insecure'];
Why it matters. certificate verification is disabled
Fix. leave verification on
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@iarna/toml, @modelcontextprotocol/client, @modelcontextprotocol/server, acorn, commander, es-toolkit, jsonc-parser, ora
Why it matters. 23 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-12 · audit v0.4.1 · source sha 4ca6a923d35efull audit observations/trust-audit/mcp-server/openclaw__mcporter.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-124ca6a923d35eBLOCKD69first audit
06

Questions

What is the mcporter MCP server?

Call MCPs via TypeScript, masquerading as simple TypeScript API. Or package them as cli.

What tools does mcporter expose?

109 in total: 98 read-only, 9 that write, and 2 that can delete or overwrite (admin_reset, confirm_delete). Every one is listed on this page with its risk.

Is mcporter safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 2 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does mcporter need?

It reads CLIENT_SECRET, CONTEXT7_API_KEY, FIXTURE_TOKEN, INLINE_TOKEN, LINEAR_API_KEY, MCPORTER_OAUTH_NO_BROWSER, MCPORTER_TEST_OAUTH_CACHE_DIR, MCPORTER_TEST_OAUTH_ENDPOINT, MCPORTER_TEST_OAUTH_MARKER_KEY, MCPORTER_TEST_OAUTH_SECRET, MCPORTER_TEST_OAUTH_SEED_REFRESH and MCPORTER_TEST_OAUTH_SERVER_NAME from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does mcporter run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @mcporter/test-server-modern at 0.0.0.

How current is this page?

The grade is for one exact copy of the source (4ca6a923d35e), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement