Chotu RoboCAUTION
Integrate Arduino-based robotics (using the NodeMCU ESP32 or Arduino Nano 368 board) with AI using the MCP (Model Context Protocol) framework from Claude Anthropic
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
DEMO
Overview
This project showcases how to integrate Arduino-based robotics (using the NodeMCU ESP32 or Arduino Nano 368 board) with AI using the MCP (Model Context Protocol) framework from Claude AI by Anthropic. It provides a seamless connection between hardware components and AI through a simple interface that can be controlled by a user via a mobile phone or computer.
This system acts as a robotic server (named Chotu Robo) that can interact with various physical components like LEDs, motors, servos, fans, sensors, and more. These components can be controlled
51967adae83eOBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add choturoboserver -- npx -y [email protected]
{
"mcpServers": {
"choturoboserver": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (15)
15 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
blinkLED | read | |
buzz | read | |
chotuBlinkEyes | read | |
chotuBuzzSound | read | |
controlFan | read | |
makeChotuSing | read | |
makeChotuSpeak | read | |
moveBackward | read | |
moveForward | read | |
moveServo | read | |
readDistance | read | |
readTemperature | read | |
runMotor | read | |
talkChotu | read | |
toggleRelay | read |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (7 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (6)
.DS_Store
fetch("http://192.168.2.116/clockwise", {fetch("http://192.168.2.116/counterclockwise", {.DS_Store
@modelcontextprotocol/sdk, @types/johnny-five, axios, johnny-five, zod-to-json-schema, @types/node, typescript
Chotu.png
Gates applied: no_behavioural_pass.
51967adae83efull audit observations/trust-audit/mcp-server/vishalmysore__chotu-robo.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 51967adae83e | CAUTION | B | 89 | first audit |
Questions
What is the Chotu Robo MCP server?
Integrate Arduino-based robotics (using the NodeMCU ESP32 or Arduino Nano 368 board) with AI using the MCP (Model Context Protocol) framework from Claude Anthropic
What tools does Chotu Robo expose?
15 in total: 15 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Chotu Robo safe to connect to an agent?
With care. The audit graded it B (89/100) and found 6 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does Chotu Robo need?
No credential environment variables were found in its source, so it appears to need none.
How does Chotu Robo run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as choturoboserver at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (51967adae83e), read on 2026-10-07. The repository is watched and re-audited when it changes.