WidgetBLOCK
Simple MCP-UI widgets for common use cases.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Add simple widgets to you LLM chat for common situations like timers, conversions and more.
Demo video: https://youtu.be/4gfom42vHkc
Motivation
MCP-UI opens the door to breaking the text wall from chat UIs we've been using the last few years. The full extent of what's possible is
This project shows the floor of what's possible by providing a few simple widgets for common situations.
If you've ever google "convert X to Y" or "2 minute timer" and see the custom UI results, this should feel very familiar.
Current widgets
Timer- Editable timer with a chime.Stopwatch- Timer that just counts up.Conversion- Convert between set of units for which the LLM can write a formula.Display Fact- When the answer is simple, just show it in an easy to read card.
Supported MCP Clients
MCP-UI is new and as of August 2025 is only supported by a few clients.
Smithery
Try widget-mcp in the Smithery playground. (TODO: pending Smithery deploy)
Goose
- Install Goose
- Click
ExtensionsandAdd custom extension - Fill in name as
Widgetsand commandnpx widget-mcp - Verify it's working by clicking
Chatand prompting2 minute timer
Requests for widgets
Here's a few examples of widgets that could be fun to add.
- Color Picker - Interactive color selection and palette tools. Could be parameterized to allow the LLM to suggest a color and let the user tweak and explore.
- Calculator - Basic and scientific calculator functionality. Initial function seeded by LLM.
- Dice Roller - Custom set of dice based on what you ask the agent for.
I'm sure you have some cool ideas!
Development
Adding new widgets should be very easy! All these widgets are HTML pages that can have variables injected (eg. values provided by the LLM). To
2b57122870beOBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add widget-mcp -- npx -y [email protected]
{
"mcpServers": {
"widget-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (4)
4 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
conversion | read | |
display-fact | read | |
stopwatch | read | |
timer | read |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- declared (1 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (3)
const defaultConfig = eval("(" + objectString + ")");@mcp-ui/server, @modelcontextprotocol/sdk, zod, @types/node, chokidar-cli, concurrently, esbuild, prettier
widgets.gif
Gates applied: no_behavioural_pass.
2b57122870befull audit observations/trust-audit/mcp-server/ref-tools__widget.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 2b57122870be | BLOCK | D | 69 | first audit |
Questions
What is the Widget MCP server?
Simple MCP-UI widgets for common use cases.
What tools does Widget expose?
4 in total: 4 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Widget safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does Widget need?
No credential environment variables were found in its source, so it appears to need none.
How does Widget run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as widget-mcp at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (2b57122870be), read on 2026-10-08. The repository is watched and re-audited when it changes.