← Back to search

@blocks-network/mcp-server

GitHub Actions Scanned 26d ago

MCP server for Blocks Network consumer operations

C
63.9 / 100

Versions

1.0.3latest
Jun 23, 2026
1.0.0
Jun 16, 2026
0.1.70
Jun 16, 2026
0.1.67
Jun 9, 2026
0.1.66
Jun 3, 2026
+ show 6 moreshow less
0.1.65
Jun 1, 2026
0.1.64
Jun 1, 2026
0.1.62
May 19, 2026
0.1.55
May 12, 2026
0.1.2
May 12, 2026
0.1.1
May 12, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 15

send_task
annotations: none low

Send a task to a Blocks Network agent and wait for the result

message string duration number filePath string agentName string
get_task
annotations: none low

Get the current status of a task by ID, including artifact content if completed

taskId string
list_tasks
annotations: none low

List tasks, optionally filtered by agent or state

limit number state string agentName string
cancel_task
annotations: none low

Cancel a running task

taskId string
pause_task
annotations: none low

Pause a running pipe task. Resume later with resume_task.

taskId string
resume_task
annotations: none low

Resume a paused pipe task

taskId string
retry_task
annotations: none low

Retry a failed task

taskId string
list_agents
annotations: none low

List available agents in the Blocks Network registry. To find every agent published by a particular provider/organization (e.g.

tag string
search_agent
annotations: none low

Search the Blocks Network registry for agents matching a free-text query. The query matches against agent name, display name, description, tags, provider, and category, and supports field qualifiers (e.g.

tag string
get_agent_card
annotations: none low

Get the full agent card for a specific agent

agentName string
get_agent_status
annotations: none low

Check live availability for one or more agents: how many instances are online, total task count for the agent, and SDK/CLI versions per instance. (Per-instance live activity counters such as `activeTasks`, `concurrentTasksPerInstance`, `startedAt`, and `totalActiveTasks` are reserved in the response shape but not yet populated by the backend — they currently return 0.)

check_balance
annotations: none low

Get the consumer billing balance for the configured org (BLOCKS_ORG_ID): ledger balance, active reservations, and available balance.

request_topup
annotations: none low

Create a Stripe Checkout session to add USD to the consumer balance. Returns a URL the user opens in a browser to complete payment; the MCP server does not handle payment itself. Minimum top-up is $5 (platform `MIN_BILLING_AMOUNT`).

connect_task
annotations: none low

Connect to an existing task, stream events and data until completion

taskId string timeoutMs number
download_artifact
annotations: none low

Download a single artifact from a task by file name. If savePath is provided, writes the artifact to disk under BLOCKS_MCP_FILE_ROOT; otherwise returns the content inline (text decoded, binary base64-encoded).

taskId string fileName string

Permissions 4

network medium
Server uses network capabilities via: fetch(), https, urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, open(), os, path, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 69

low
Tool 'send_task' has no annotations annotation_checker · 100%
low
Tool 'get_task' has no annotations annotation_checker · 100%
low
Tool 'list_tasks' has no annotations annotation_checker · 100%
low
Tool 'cancel_task' has no annotations annotation_checker · 100%
low
Tool 'pause_task' has no annotations annotation_checker · 100%
low
Tool 'resume_task' has no annotations annotation_checker · 100%
low
Tool 'retry_task' has no annotations annotation_checker · 100%
low
Tool 'list_agents' has no annotations annotation_checker · 100%
low
Tool 'search_agent' has no annotations annotation_checker · 100%
low
Tool 'get_agent_card' has no annotations annotation_checker · 100%
low
Tool 'get_agent_status' has no annotations annotation_checker · 100%
low
Tool 'check_balance' has no annotations annotation_checker · 100%
low
Tool 'request_topup' has no annotations annotation_checker · 100%
low
Tool 'connect_task' has no annotations annotation_checker · 100%
low
Tool 'download_artifact' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 71 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: rollup@4.0.0 (GHSA-gcx4-mw62-g8wm) dependency_analyzer · 95%
medium
Vulnerable dependency: rollup@4.0.0 (GHSA-mw96-cpmx-2vgc) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@1.6.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@1.6.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.3 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.3 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: pubnub@10.6.0,<11 (GHSA-5844-q3fc-56rh) dependency_analyzer · 95%
medium
Vulnerable dependency: pubnub@10.6.0,<11 (PYSEC-2026-1807) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.41.0 (GO-2026-5024) dependency_analyzer · 95%
medium
Buffer.from base64 in blocksnetwork-blocks-sdk-7e8032b/sdks/node/tests/stream-stream-bundle.test.ts:440 entropy_analyzer · 75%
medium
Buffer.from base64 in blocksnetwork-blocks-sdk-7e8032b/examples/node/orchestrator/handler.ts:81 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: send_task manifest_parser · 70%
info
Tool: get_task manifest_parser · 70%
info
Tool: list_tasks manifest_parser · 70%
info
Tool: cancel_task manifest_parser · 70%
info
Tool: pause_task manifest_parser · 70%
info
Tool: resume_task manifest_parser · 70%
info
Tool: retry_task manifest_parser · 70%
info
Tool: list_agents manifest_parser · 70%
info
Tool: search_agent manifest_parser · 70%
info
Tool: get_agent_card manifest_parser · 70%
info
Tool: get_agent_status manifest_parser · 70%
info
Tool: check_balance manifest_parser · 70%
info
Tool: request_topup manifest_parser · 70%
info
Tool: connect_task manifest_parser · 70%
info
Tool: download_artifact manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (45) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1051 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%