Atlas / MCP servers / stackonehq / Disco Connectors

Disco ConnectorsBLOCK

mcp/stackonehq/disco-connectors

mcp connectors for disco

Verdict
BLOCK
Grade
F
Trust score
56 /100
Exposed tools
200 303r · 98w · 18d
Transport
stdio · streamable-http
License
—
Stars
74
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://opensource.org/licenses/Apache-2.0) [](#-archived--deprecated) [](https://badge.fury.io/js/@stackone%2Fmcp-connectors) [](https://badge.fury.io/js/@stackone%2Fmcp-config-types)

⚠️ Archived / Deprecated

This repository is archived and no longer actively maintained.

For the current StackOne experience, please use the following instead:

  • [stackone.com](https://stackone.com) — Access 300+ MCPs for free, with zero setup.
  • [discode.stackone.com](https://discode.stackone.com) — Try Disco Code, our code mode as a service product.

The content below is preserved for historical reference only.

Pre-built MCP connectors for popular SaaS tools

Features

This monorepo contains two packages built with TypeScript and Zod:

@stackone/mcp-connectors - Pre-built connectors for popular SaaS tools

  • 35+ production-ready MCP connectors
  • Typesafe wrapper around MCP capabilities
  • Local development with auto-reload
  • No dependencies on server runtime or transport
  • Runs on Bun, Node, and Cloudflare Workers

@stackone/mcp-config-types - Shared configuration types

  • Zod schemas for connector credentials and setup fields
  • TypeScript types for all connector configurations
  • Designed for AI coding agents (Claude, Cursor, etc.)
  • Enables type-safe connector development

Usage

For End Users

Note: This repository is archived. For the latest StackOne experience, go to **stackone.com** for 300+ MCPs for free, or try **discode.stackone.com** for our code mode as a
Read from source at commit 0c2bd7c943ccOBSERVED · 2026-10-07
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add mcp-connectors -- npx -y @stackone/[email protected]
claude-desktop
{
  "mcpServers": {
    "mcp-connectors": {
      "command": "npx",
      "args": [
        "-y",
        "@stackone/[email protected]"
      ]
    }
  }
}
03

Exposed tools (200)

303 read · 98 write · 18 destructive. Blast radius: 18 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

ToolRiskDescription
1password_create_itemwriteCreate a new item in a vault
1password_delete_itemdestructiveDelete an item from a vault
1password_get_itemreadGet details of a specific item including its fields
1password_get_vaultreadGet details of a specific vault
1password_list_itemsreadList all items in a vault
1password_list_vaultsreadList all accessible 1Password vaults
1password_search_itemsreadSearch for items in a vault by title or field labels
1password_update_itemwriteUpdate an existing item in a vault
AnthropicreadAI safety company with Claude AI models
AstroreadModern static site generator
BasetenreadML infrastructure platform
ConvexreadBackend-as-a-service platform
CursorreadAI-powered code editor
DatafoldreadData reliability platform
ExporeadPlatform for building React Native apps
FirefliesreadAI meeting assistant
HonoreadHono is a fast, lightweight, web framework built on Web Standards.
HumanLoopreadAI model evaluation and monitoring
HyperlinereadRevenue optimization platform
InstructPix2PixwriteEdit images using text instructions
IonQreadQuantum computing platform
KnockreadNotification infrastructure
MeteorreadFull-stack JavaScript platform
MindsDBreadOpen-source AI layer for existing databases
MintlifyreadDocumentation platform for modern teams
ModalreadPlatform for running Python code in the cloud with minimal configuration
OpenAIreadAI platform for building applications
OramareadJavascript search engine
PerplexityreadAI-powered search and answer engine
PineconereadVector database for AI applications
PrismareadModern database toolkit and ORM
PydanticreadData validation library for Python
REMBGdestructiveRemove image backgrounds
Real-ESRGANreadHigh-quality image upscaling
ReplitreadOnline IDE and collaborative coding platform
ResendreadEmail API for developers
StackOnereadUnified API for HR, ATS, CRM, and productivity tools
SupermemoryreadMemory API for AI
UnstructuredreadPlatform for processing unstructured data
ZapierreadAutomation platform for connecting apps
ZenMLreadMLOps framework for production ML pipelines
add_commentwriteAdds a comment to an existing Linear issue. Supports markdown formatting in the comment body.
asana_create_projectwriteCreate a new project
asana_create_taskwriteCreate a new task
asana_delete_taskdestructiveDelete a task
asana_get_projectreadGet detailed information about a specific project
asana_get_taskreadGet detailed information about a specific task
asana_get_userreadGet information about the current user or a specific user
asana_list_projectsreadList projects with optional filtering
asana_list_tasksreadList tasks with optional filtering
asana_list_teamsreadList teams in a workspace
asana_list_workspacesreadList all workspaces the user has access to
asana_update_projectwriteUpdate an existing project
asana_update_taskwriteUpdate an existing task
attio_get_listreadGet lists filtered by keyword to avoid context overflow. Defaults to customer_success list.
attio_get_list_entriesreadGet all entries found within a specific list, with limited results to avoid context overflow
attio_get_list_fieldsreadGet all fields or attributes within a specific list
aws_get_cloudwatch_metricsreadGet CloudWatch metrics for monitoring
aws_get_cost_and_usagereadGet AWS cost and usage information
aws_get_ec2_instancereadGet details of a specific EC2 instance
aws_get_lambda_functionreadGet details of a specific Lambda function
aws_invoke_lambda_functionwriteInvoke a Lambda function with optional payload
aws_list_ec2_instancesreadList all EC2 instances in the specified region
aws_list_lambda_functionsreadList all Lambda functions in the specified region
aws_list_s3_bucketsreadList all S3 buckets in the account
aws_list_s3_objectsreadList objects in an S3 bucket
chain-of-thought-reasoningreadUse this tool for all thinking and reasoning tasks. The tool accepts a question and returns a chain of thought reasoning. You must include all context and information relevant in the question.
complete_taskreadMarks a task as completed.
create_bank_transactionwriteCreate a new bank transaction. Use for manual entry of transactions for reconciliation.
create_issuewriteCreates a new Linear issue with specified details. Use this to create tickets for tasks, bugs, or feature requests. Returns the created issue
create_labelwriteCreates a new label for organizing tasks.
create_paymentwriteCreate a payment to a supplier/vendor for a specific invoice. Used for paying bills and managing vendor payments.
create_projectwriteCreates a new project in Todoist.
create_taskwriteCreates a new task in Todoist. Supports natural language due dates, labels, priorities, and project assignment.
create_todowriteCreate a new todo item
datadog_get_downtimesreadList scheduled downtimes
datadog_get_hostsreadList hosts in the infrastructure
datadog_get_incidentreadGet detailed information about a specific incident
datadog_get_metricsreadQuery metrics data
datadog_get_monitorreadGet details of a specific monitor
datadog_get_monitorsreadGet monitor statuses with optional filtering
datadog_list_incidentsreadList incidents with optional filtering
datadog_search_logsreadSearch and retrieve logs
deel_add_employee_notewriteAdd a note to an employee record
deel_add_time_offwriteAdd a time off request for an employee
deel_create_employeewriteCreate a new employee record in Deel
deel_get_employeereadGet detailed information about a specific employee
deel_get_employee_contractreadGet contract information for a specific employee
deel_get_employee_documentsreadGet all documents for a specific employee
deel_get_employee_notesreadGet all notes for a specific employee
deel_get_employee_payslipsreadGet payslips for a specific employee
deel_get_employee_time_offreadGet time off records for a specific employee
deel_get_scheduled_time_offreadGet scheduled/approved time off for all employees in a date range
deel_search_employeesreadSearch for employees in Deel using various filters
deel_update_employeewriteUpdate an existing employee record in Deel
deel_update_employee_contractwriteUpdate contract information for a specific employee
deel_upload_employee_documentwriteUpload a document for an employee
delete_projectdestructivePermanently deletes a project and all its tasks.
delete_taskdestructivePermanently deletes a task.
delete_tododestructiveDelete a todo item by ID
email_invoicewriteSend an invoice via email to the customer. Use for payment reminders and invoice delivery.
fal_generate_imagereadGenerate images using FAL.ai models like FLUX, SDXL, and others
fal_list_modelsreadList available FAL.ai models for image generation and processing
fal_upscale_imagereadUpscale images using FAL.ai Real-ESRGAN model
fetch_contentreadFetch and parse content from a webpage URL
fireflies_search_transcriptsreadSearch for transcripts containing specific keywords in the title, with optional date filtering. Returns a list of matching transcripts with metadata and summary information. Perfect for finding meetings about specific topics, projects, or containing particular keywords.
generate-sound-effectsreadGenerate sound effects from text description using ElevenLabs
generate_test_datareadGenerate realistic test data for basic data types using faker-js
get-user-inforeadGet user account information and usage statistics
get-voicereadGet detailed information about a specific voice
get_contentsreadGet detailed content (text, highlights, summary) for specific Exa search results by their IDs
get_organisationreadGet organization details and settings. Useful for understanding the Xero setup and configuration.
get_organizationreadGet details about your Linear organization including teams and users
get_place_detailsreadGet detailed information about a specific place
get_taskreadRetrieves details of a specific task by its ID.
get_user_issuesreadRetrieves issues assigned to a specific user or the authenticated user if no userId is provided.
get_valuereadRetrieve a previously persisted value
get_viewerreadGet details about the authenticated user
github_create_issuewriteCreate a new issue in a repository
github_get_file_contentreadGet the content of a file from a repository
github_get_issuereadGet details of a specific issue
github_get_pull_requestreadGet details of a specific pull request
github_get_repositoryreadGet information about a specific GitHub repository
github_get_userreadGet information about a GitHub user
github_list_filesreadList files and directories in a repository path
github_list_issuesreadList issues for a repository
github_list_pull_requestsreadList pull requests for a repository
github_list_repositoriesreadList repositories for a user, organization, or authenticated user
gitlab_create_issuewriteCreate a new issue in a project
gitlab_get_current_userreadGet information about the authenticated user
gitlab_get_file_contentreadGet the content of a file from a project
gitlab_get_issuereadGet details of a specific issue
gitlab_get_merge_requestwriteGet details of a specific merge request
gitlab_get_projectreadGet information about a specific GitLab project
gitlab_get_userreadGet information about a specific user
gitlab_list_filesreadList files and directories in a project path
gitlab_list_issuesreadList issues for a project
gitlab_list_merge_requestswriteList merge requests for a project
gitlab_list_projectsreadList projects for the authenticated user
google_drive_copy_filewriteCopy a file to create a duplicate
google_drive_create_filewriteCreate a new file in Google Drive
google_drive_create_folderwriteCreate a new folder in Google Drive
google_drive_delete_filedestructiveDelete a file or folder from Google Drive
google_drive_get_aboutreadGet information about the user and their Drive storage
google_drive_get_filereadGet metadata for a specific file or folder
google_drive_get_file_contentreadDownload and return the text content of a file
google_drive_list_filesreadList files and folders in Google Drive
google_drive_list_permissionsreadList sharing permissions for a file
google_drive_remove_permissiondestructiveRemove a sharing permission from a file
google_drive_share_filereadShare a file with a user, group, or make it public
google_drive_update_filewriteUpdate a file in Google Drive
graphy_create_boardwriteCreate a new board in Graphy
graphy_create_datasetwriteCreate a new dataset with data
graphy_delete_boarddestructiveDelete a board by ID
graphy_get_boardreadGet details of a specific board by ID
graphy_get_board_datareadGet the underlying data for a board
graphy_get_datasetreadGet details of a specific dataset by ID
graphy_list_boardsreadList all boards in your Graphy account
graphy_list_datasetsreadList all datasets in your Graphy account
graphy_share_boardreadShare a board publicly and get an embed URL
graphy_update_boardwriteUpdate an existing board
hibob_create_employeewriteCreate a new employee record in HiBob
hibob_get_employee_fieldsreadGet metadata about all employee fields from HiBob
hibob_get_employee_tasksreadGet all tasks for a specific employee in HiBob
hibob_get_timeoff_policy_typesreadGet a list of all timeoff policy type names from HiBob
hibob_people_searchreadSearch for employees in HiBob using advanced filters
hibob_submit_timeoff_requestwriteSubmit a new time off request for an employee in HiBob
hibob_update_employeewriteUpdate specific fields in an employee record in HiBob
hubspot_create_contactwriteCreate a new contact in HubSpot CRM
hubspot_create_dealwriteCreate a new deal in HubSpot CRM
hubspot_get_contactsreadRetrieve a list of contacts from HubSpot CRM
hubspot_get_dealsreadRetrieve a list of deals from HubSpot CRM
incident_create_incidentwriteCreate a new incident
incident_get_incidentreadGet detailed information about a specific incident
incident_get_on_call_schedulewriteGet on-call schedule entries for a specific schedule
incident_get_userreadGet details of a specific user
incident_list_escalation_pathsreadList escalation paths configured in the system
incident_list_incidentsreadList incidents with optional filtering
incident_list_schedulesreadList on-call schedules
incident_list_servicesreadList services in the catalog
incident_list_teamsreadList teams in the organization
incident_list_usersreadList users in the organization
incident_update_incidentwriteUpdate an existing incident
increment_counterreadIncrement a persistent counter
jira_add_attachmentwriteAdd a file attachment to a JIRA issue
jira_add_commentwriteAdd a comment to a JIRA issue
jira_create_issuewriteCreate a new JIRA issue
jira_get_epic_childrenreadGet all child issues in an epic including their comments
jira_get_issuereadGet detailed information about a specific JIRA issue including comments
jira_get_transitionsreadGet available status transitions for a JIRA issue
jira_search_issuesreadSearch JIRA issues using JQL (Jira Query Language)
jira_transition_issuereadTransition a JIRA issue to a new status
jira_update_issuewriteUpdate an existing JIRA issue
langsmith_get_promptsreadRetrieve prompts with optional filtering
langsmith_get_runwriteGet details of a specific run
langsmith_get_sessionreadGet details of a specific session
langsmith_get_sessionsreadList all sessions with optional filtering
langsmith_get_thread_historyreadFetch conversation history for a specific session/thread
langsmith_pull_promptreadGet a specific prompt by name and optional version
langsmith_search_runsreadSearch runs with various filters
04

Trust audit

BLOCKgrade F · trust 56/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (2 observation(s))
Network
declared (5 observation(s))
Shell
declared (1 observation(s))
Dependencies
not all pinned
Secrets in source
found

Findings (17)

CRITICALHard-coded secrets · secret.slack · CWE-798, CWE-321
packages/mcp-connectors/src/connectors/slack.ts:268
'Slack Bot Token from your Slack App :: xoxb-1234567890-1234567890123-abcdefghijklmnopqrstuvwx :: https://api.slack.com/tutorials/tracks/getting-a-token'
CRITICALHard-coded secrets · secret.stripe · CWE-798, CWE-321
packages/mcp-connectors/src/connectors/attio.ts:114
'Attio API Key from Workspace settings > Developers tab > New access token. :: sk_live_1234567890abcdefghijklmnopqrstuvwxyz :: https://attio.com/help/apps/other-apps/generating-an-api-key'
MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532
apps/server/src/index.ts:121
console.log('  npm start -- --connector asana --credentials \'{"apiKey":"sk-xxx"}\'');
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
packages/mcp-connectors/src/connectors/notion.spec.ts:670
token: 'secret_1234567890abcdefghijklmnopqrstuv',
MEDIUMHard-coded secrets · secret.slack · CWE-798, CWE-321
docs/running-locally.md:99
bun run server -- -- --connector slack --port 4000 --credentials '{"botToken":"xoxb-your-token"}'
MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59
1password_delete_item, REMBG, asana_delete_task, delete_project, delete_task, delete_todo, google_drive_delete_file, google_drive_remove_permission, graphy_delete_board, modal_terminate_sandbox, repli
Why it matters. 18 tool(s) can delete or overwrite
Fix. prefer a read-only mode or scoped tokens; the page states the blast radius
LOWInventory / provenance · inv.hidden_file · CWE-1104
.release-please-config.json
.release-please-config.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.release-please-manifest.json
.release-please-manifest.json
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
packages/mcp-connectors/src/connectors/elevenlabs.ts:350
const binaryString = atob(args.audio_base64);
LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94
packages/mcp-connectors/src/connectors/github.ts:306
return atob(result.content.replace(/\n/g, ''));
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
apps/mcp-test/package.json
@faker-js/faker, @modelcontextprotocol/sdk, chalk, gunshi, ora, treeify, zod, @types/bun
Why it matters. 13 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
apps/server/package.json
@modelcontextprotocol/sdk, express, winston, @types/express, @types/node
Why it matters. 5 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@biomejs/biome, @types/node, @typescript/native-preview, husky, lint-staged, msw, tsdown, turbo
Why it matters. 12 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
packages/mcp-config-types/package.json
zod, @modelcontextprotocol/sdk
Why it matters. 2 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
packages/mcp-connectors/package.json
@1password/connect, @linear/sdk, @orama/orama, node-html-parser, openai, zod, modal, @stackone/mcp-config-types
Why it matters. 8 dependency range(s) float
Fix. pin exact versions or ship a lockfile
INFOInventory / provenance · inv.oversize · CWE-1104
docs/assets/logo.png
docs/assets/logo.png
Why it matters. 2710866 bytes not read
INFOSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
README.md:79
curl -fsSL https://bun.sh/install | bash

Gates applied: critical_finding, no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha 0c2bd7c943ccfull audit observations/trust-audit/mcp-server/stackonehq__disco-connectors.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-070c2bd7c943ccBLOCKF56first audit
06

Questions

What is the Disco Connectors MCP server?

mcp connectors for disco

What tools does Disco Connectors expose?

200 in total: 303 read-only, 98 that write, and 18 that can delete or overwrite (1password_delete_item, REMBG, asana_delete_task, delete_project, delete_task). Every one is listed on this page with its risk.

Is Disco Connectors safe to connect to an agent?

No — not without reading the findings first. The audit graded it F (56/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 18 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does Disco Connectors need?

No credential environment variables were found in its source, so it appears to need none.

How does Disco Connectors run?

It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @stackone/mcp-connectors at 0.0.25.

How current is this page?

The grade is for one exact copy of the source (0c2bd7c943cc), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement