ModelsAtlas
Explore
Atlas / MCP servers / soruly / trace.moe-mcp

trace.moe-mcpSAFE

mcp/soruly/trace-moe-mcp
MCP server by soruly · anime · image search · mcp · Audited 2026-10-12
⚑ Report / re-scanSource ↗

Model Context Protocol (MCP) server for trace.moe anime scene search

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
5 5r · 0w · 0d
Transport
stdio
License
MIT
Stars
1
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/soruly/trace.moe-mcp/blob/master/LICENSE) [](https://github.com/soruly/trace.moe-mcp/actions) [](https://www.npmjs.com/package/trace.moe-mcp) [](https://discord.gg/K9jn6Kj)

Model Context Protocol (MCP) server to use trace.moe with your large language model.

With LLM, language is not a problem. You can ask in any language you want.

Installation & Running

Prerequisites: Node.js 24 or higher.

Open MCP Config and add the following configuration:

{
"mcpServers": {
"trace_moe": {
"command": "npx",
"args": ["-y", "trace.moe-mcp"]
}
}
}

(Optional) If you have an API key from https://trace.moe/, you can add TRACE_MOE_API_KEY to the configuration:

{
"mcpServers": {
"trace_moe": {
"command": "npx",
"args": ["-y", "trace.moe-mcp"],
"env": {
"TRACE_MOE_API_KEY": "your_api_key_here"
}
}
}
}

Features

  • Local Image Processing: Only image hash is sent to trace.moe, so your images are not uploaded to trace.moe.
  • Black Borders Cropping: Detects and crops black borders automatically.
  • Multiple Image Sources: Supports direct Image URLs, local file paths, base64 strings, or pre-computed vectors.
  • Anime Title & Metadata Search: Search anime titles, romanized names, and synonyms via /anilist.
  • Account & Quota Status: Check remaining quota, concurre
Read from source at commit b516b5c08c95OBSERVED · 2026-10-12
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add trace.moe-mcp --env TRACE_MOE_API_KEY=${TRACE_MOE_API_KEY} -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "trace.moe-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "TRACE_MOE_API_KEY": "${TRACE_MOE_API_KEY}"
      }
    }
  }
}
03

Exposed tools (5)

5 read · 0 write · 0 destructive.

ToolRiskDescription
get_account_quotaread
search_anime_by_image_fileread
search_anime_by_image_urlread
search_anime_by_nameread
search_anime_by_vectorread
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (4 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (2)

LOWInventory / provenance · inv.hidden_file · CWE-1104
.oxfmtrc.json
.oxfmtrc.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@modelcontextprotocol/sdk, sharp, trace.moe-id, zod, @types/node, @types/sharp, oxfmt, oxlint
Why it matters. 9 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass.

Audited 2026-10-12 · audit v0.4.1 · source sha b516b5c08c95full audit observations/trust-audit/mcp-server/soruly__trace.moe-mcp.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-12b516b5c08c95SAFEB89first audit
06

Questions

What is the trace.moe-mcp MCP server?

Model Context Protocol (MCP) server for trace.moe anime scene search

What tools does trace.moe-mcp expose?

5 in total: 5 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is trace.moe-mcp safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does trace.moe-mcp need?

It reads TRACE_MOE_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does trace.moe-mcp run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as trace.moe-mcp at 1.0.2.

How current is this page?

The grade is for one exact copy of the source (b516b5c08c95), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement