← Back to search

@botuyo/mcp

GitHub Actions Scanned 14d ago

BotUyo MCP Server — create and manage AI agents via Model Context Protocol

npm
C
67.3 / 100

Versions

0.7.0latest
Jun 25, 2026
0.6.0
Jun 21, 2026
0.5.1
Jun 21, 2026
0.4.1
Jun 20, 2026
0.4.0
Jun 18, 2026
+ show 36 moreshow less
0.3.23
Jun 17, 2026
0.3.22
Jun 17, 2026
0.3.21
Jun 16, 2026
0.3.16
Mar 30, 2026
0.3.13
Mar 29, 2026
0.3.12
Mar 28, 2026
0.3.11
Mar 28, 2026
0.3.10
Mar 28, 2026
0.3.9
Mar 28, 2026
0.3.8
Mar 28, 2026
0.3.7
Mar 28, 2026
0.3.6
Mar 27, 2026
0.3.5
Mar 27, 2026
0.3.4
Mar 26, 2026
0.3.3
Mar 26, 2026
0.3.1
Mar 25, 2026
0.3.0
Mar 24, 2026
0.2.17
Mar 24, 2026
0.2.16
Mar 23, 2026
0.2.15
Mar 23, 2026
0.2.14
Mar 23, 2026
0.2.13
Mar 23, 2026
0.2.12
Mar 23, 2026
0.2.11
Mar 23, 2026
0.2.10
Mar 23, 2026
0.2.9
Mar 22, 2026
0.2.8
Mar 22, 2026
0.2.7
Mar 22, 2026
0.2.6
Mar 22, 2026
0.2.5
Mar 22, 2026
0.2.4
Mar 22, 2026
0.2.3
Mar 22, 2026
0.2.2
Mar 22, 2026
0.2.1
Mar 22, 2026
0.2.0
Mar 22, 2026
0.1.0
Mar 17, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 42

list_agents
annotations: none low

Lists all agents for the authenticated tenant. Returns a name-first text summary (AgentFamily variants are tagged with their variantKey) plus structured data (full id, shortId, name, description, status, enabled tools count, familyId, variantKey).

update_enabled_tools
annotations: none low

Set which tools are enabled for an agent. This REPLACES the current list of enabled tools. Use list_available_tools to see the valid tool IDs for your tenant first. Requires role: owner, admin, or developer.

get_tool_config
annotations: none low

Ver el config completo de un tool específico de un agente (formato JSON).

remove_tool_config
annotations: none low

Elimina la configuración de un tool. Si es multi-instance, también la remueve de enabledTools automáticamente.

list_avatars
annotations: none low

Lista los avatares 3D gratuitos disponibles en el catálogo. Muestra nombre, formato y categoría.

select_avatar
annotations: none low

Selecciona un avatar 3D para un agente. Puede ser del catálogo (por ID) o una URL custom (.glb/.vrm).

audit_agent_family
annotations: none low

Read-only audit of agent families for config-quality issues (changes NOTHING). For each variant\'s

example_agent
annotations: none low

Returns a complete, documented example of an agent configuration JSON with ALL possible fields explained. Use this as a reference when creating or editing agents. Every field includes a description of what it does, its type, valid values, and conditions. This is a read-only reference tool — it doesn't create or modify anything. Useful for: - New users learning the agent config structure - Checking available fields before using import_agent_json - Understanding how stages, connections, channelFlows, and tools work together - Learning the widget theming system (cssVariables, darkCssVariables, animations, effects) - Understanding per-tool configuration (toolConfigs) with single and multi-instance patterns

update_agent
annotations: none low

Update an agent's configuration with partial merge. Only the fields you provide are changed — everything else is preserved. **Field behavior:** - **Omitted field** → not touched (keeps existing value) - **Field with value** → sets/overwrites that field - **Field set to null** → deletes that field from the agent config **Nested objects** (identity, widgetConfig, voice, widgetConfig.cssVariables) are deep-merged: update_agent({ widgetConfig: { logoUrl: "https://..." } }) → only logoUrl changes, all other widgetConfig fields preserved **Arrays** (channels, enabledTools) are replaced entirely: update_agent({ channels: ["web", "whatsapp"] }) → replaces the full channels array Use this to configure WHO the agent is and HOW it looks. For defining WHAT the agent does in each conversation flow, use upsert_stage. For changing which tools the agent can call, use update_enabled_tools. Requires role: owner, admin, or developer.

configure_agent_tool
annotations: none low

Crea o actualiza la config de un tool para un agente. Si la tool no está en \

list_knowledge_documents
annotations: none low

Lists all knowledge base documents for the current tenant. Returns document id, name, type, status, chunks count, and file size.

create_from_template
annotations: none low

Create a new agent from a pre-built template. Templates contain pre-configured stages, connections (graph flow), tools, and channel overrides for specific industries. Business data (name, phone, email, services) is automatically hydrated into the template placeholders. Use list_templates first to see available templates. Requires role: owner, admin, or developer.

create_agent
annotations: none low

Create a new agent for the tenant. The agent is created in "draft" status. Use update_agent to configure identity, stages, and tools afterward. Requires role: owner, admin, or developer.

export_agent_json
annotations: none low

Export an agent's configuration as clean, editable JSON. Unified model: if the agent belongs to a family (the normal case — every agent created via create_agent is a family-of-one), this exports the WHOLE logical agent as a portable FOLDER ({slug}/family.json + variants/<key>.json; a simple agent has exactly one variant file) — identical to export_agent_family. Re-import with import_agent_json or import_agent_family. For a legacy standalone agent (e.g. module-managed) it falls back to a single flat JSON file: Returns the complete agentConfig including identity, stages, connections (graph edges), channelFlows, enabledTools, channels, widgetConfig, voice, and all other settings. Also includes apiKey (read-only) for external integrations. The exported JSON is automatically saved to a local file for easy editing: - Default: saves to ./agents/{agent-name}.json in the current working directory - Custom: use savePath to specify a different directory Use import_agent_json to re-import after editing.

publish_agent
annotations: none low

Publish or unpublish an agent. Published agents are live and handle incoming conversations. Unpublished agents are in "draft" status.\n\nRequires role: owner, admin, or developer.

get_agent_status
annotations: none low

Get the channel connection status of an agent (WhatsApp, Instagram, Telegram, Web). Shows which channels are connected and provides a direct link to the admin panel to connect missing channels.

restore_agent_version
annotations: none low

Restore an agent to a previous version (rollback). The current config is automatically saved as a new snapshot before restoring, so you can always undo a restore. Use list_agent_versions first to see available versions.\n\nRequires role: owner, admin, or developer.

associate_knowledge_to_agent
annotations: none low

Associates (links) knowledge base document IDs to an agent. Replaces the current list of knowledgeDocumentIds on the agent. Use list_knowledge_documents to get valid document IDs.

upload_agent_media
annotations: none low

Upload a local image file to the CDN and assign it to an agent as avatar or logo. Reads the file from the local filesystem, uploads it via the backend media API (Cloudinary), and updates the agent's widgetConfig with the resulting URL. Supported formats: webp, png, jpg, jpeg, svg. Max size: 2MB.

upsert_stage
annotations: none low

Create or update a named stage in an agent's conversation flow. A stage defines what the agent does at a particular step in the conversation. Stages are nodes in a graph connected by edges (connections). Examples of stage names: "welcomeStage", "salesStage", "hostStage", "checkoutStage" The stage config is merged with existing stages — existing stages you don't specify are kept unchanged. Connections and channelFlows replace existing values when provided. Requires role: owner, admin, or developer.

list_agent_families
annotations: none low

List all agent families (one logical agent = shared base config + variants) for the current tenant.

get_agent_family
annotations: none low

Get a single agent family (shared base + all variants) by id.

create_agent_family
annotations: none low

Create a new agent family with a shared base config and an initial set of variants.

update_family_base
annotations: none low

Replace the shared base config of a family. Re-materializes EVERY variant (the base is

add_family_variant
annotations: none low

Add a new variant to a family (materialized into a real draft agent). Subject to the per-plan

update_family_variant
annotations: none low

Update a single variant (label/overrides/handoffTargets/order) by its key. The variant key itself

remove_family_variant
annotations: none low

Remove a variant from a family (soft-deletes its materialized agent). Cannot remove the entry

publish_agent_family
annotations: none low

Publish a family: marks the family and ALL of its member agents as published/active.

delete_agent_family
annotations: none low

Delete a family and soft-delete ALL of its member agents. This action is IRREVERSIBLE.\n\n

export_agent_family
annotations: none low

Export a family to a readable FOLDER: {savePath}/{slug}/family.json (name, slug, entryVariantKey,

import_agent_family
annotations: none low

Import/replace a family\'s base + variant set from a local FOLDER, a single JSON file, or an inline object (FULL REPLACE).\n\n

list_available_tools
annotations: none low

List all tools available for this tenant. Returns both "core" tools (available to all tenants) and "tenant" tools (custom tools specific to your tenant). Use tool IDs when enabling tools with update_enabled_tools or configuring stage tools.

delete_agent
annotations: none low

Delete an agent (soft delete). This action is IRREVERSIBLE — the agent will be deactivated and hidden.\n\n

ingest_knowledge_url
annotations: none low

Add a URL to the knowledge base. BotUyo will scrape the page content and index it for intelligent search. The document can then be associated to agents using associate_knowledge_to_agent.

switch_tenant
annotations: none low

Switch the active tenant for this MCP session.

get_tools_catalog
annotations: none low

Lista el catálogo completo de tools disponibles con su metadata: configurable, allowMultiInstance, configSchema, requiredIntegrations.

get_agent
annotations: none low

Get the full configuration of a specific agent, including identity (tone, language, objective, customInstructions), stages, and enabled tools.

delete_knowledge_document
annotations: none low

Deletes a knowledge base document and all its chunks from the current tenant.

list_agent_versions
annotations: none low

List version history for an agent. Returns all saved snapshots with version number, change source, and timestamp. Useful to see what changed and when before deciding to restore.

list_templates
annotations: none low

List all available agent templates for quick agent creation. Returns templates organized by industry vertical (beauty, clinic, restaurant, fitness, etc.). Each template includes pre-configured stages, connections (graph flow), tools, and channel overrides. Use create_from_template to create an agent from any template.

import_agent_json
annotations: none low

Import/replace an agent's FULL configuration from a local JSON file or from a JSON object. Unified model: if filePath points to a FAMILY export (a folder with family.json + variants/, a family.json, or a payload carrying \

list_tool_configs
annotations: none low

Lista las configs de tools de un agente agrupadas: configuradas (single y multi-instance), habilitadas sin config, y resumen de multi-instance.

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, execSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 98

low
Tool 'list_agents' has no annotations annotation_checker · 100%
low
Tool 'update_enabled_tools' has no annotations annotation_checker · 100%
low
Tool 'get_tool_config' has no annotations annotation_checker · 100%
low
Tool 'remove_tool_config' has no annotations annotation_checker · 100%
low
Tool 'list_avatars' has no annotations annotation_checker · 100%
low
Tool 'select_avatar' has no annotations annotation_checker · 100%
low
Tool 'audit_agent_family' has no annotations annotation_checker · 100%
low
Tool 'example_agent' has no annotations annotation_checker · 100%
low
Tool 'update_agent' has no annotations annotation_checker · 100%
low
Tool 'configure_agent_tool' has no annotations annotation_checker · 100%
low
Tool 'list_knowledge_documents' has no annotations annotation_checker · 100%
low
Tool 'create_from_template' has no annotations annotation_checker · 100%
low
Tool 'create_agent' has no annotations annotation_checker · 100%
low
Tool 'export_agent_json' has no annotations annotation_checker · 100%
low
Tool 'publish_agent' has no annotations annotation_checker · 100%
low
Tool 'get_agent_status' has no annotations annotation_checker · 100%
low
Tool 'get_agent' has no annotations annotation_checker · 100%
low
Tool 'restore_agent_version' has no annotations annotation_checker · 100%
low
Tool 'associate_knowledge_to_agent' has no annotations annotation_checker · 100%
low
Tool 'upload_agent_media' has no annotations annotation_checker · 100%
low
Tool 'upsert_stage' has no annotations annotation_checker · 100%
low
Tool 'list_agent_families' has no annotations annotation_checker · 100%
low
Tool 'get_agent_family' has no annotations annotation_checker · 100%
low
Tool 'create_agent_family' has no annotations annotation_checker · 100%
low
Tool 'update_family_base' has no annotations annotation_checker · 100%
low
Tool 'add_family_variant' has no annotations annotation_checker · 100%
low
Tool 'update_family_variant' has no annotations annotation_checker · 100%
low
Tool 'remove_family_variant' has no annotations annotation_checker · 100%
low
Tool 'publish_agent_family' has no annotations annotation_checker · 100%
low
Tool 'delete_agent_family' has no annotations annotation_checker · 100%
low
Tool 'export_agent_family' has no annotations annotation_checker · 100%
low
Tool 'import_agent_family' has no annotations annotation_checker · 100%
low
Tool 'list_available_tools' has no annotations annotation_checker · 100%
low
Tool 'delete_agent' has no annotations annotation_checker · 100%
low
Tool 'ingest_knowledge_url' has no annotations annotation_checker · 100%
low
Tool 'switch_tenant' has no annotations annotation_checker · 100%
low
Tool 'get_tools_catalog' has no annotations annotation_checker · 100%
low
Tool 'delete_knowledge_document' has no annotations annotation_checker · 100%
low
Tool 'list_agent_versions' has no annotations annotation_checker · 100%
low
Tool 'list_templates' has no annotations annotation_checker · 100%
low
Tool 'import_agent_json' has no annotations annotation_checker · 100%
low
Tool 'list_tool_configs' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.7.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.7.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list_agents manifest_parser · 90%
info
Tool: update_enabled_tools manifest_parser · 90%
info
Tool: get_tool_config manifest_parser · 90%
info
Tool: remove_tool_config manifest_parser · 90%
info
Tool: list_avatars manifest_parser · 90%
info
Tool: select_avatar manifest_parser · 90%
info
Tool: audit_agent_family manifest_parser · 90%
info
Tool: example_agent manifest_parser · 90%
info
Tool: update_agent manifest_parser · 90%
info
Tool: configure_agent_tool manifest_parser · 90%
info
Tool: list_knowledge_documents manifest_parser · 90%
info
Tool: create_from_template manifest_parser · 90%
info
Tool: create_agent manifest_parser · 90%
info
Tool: export_agent_json manifest_parser · 90%
info
Tool: publish_agent manifest_parser · 90%
info
Tool: get_agent_status manifest_parser · 90%
info
Tool: restore_agent_version manifest_parser · 90%
info
Tool: associate_knowledge_to_agent manifest_parser · 90%
info
Tool: upload_agent_media manifest_parser · 90%
info
Tool: upsert_stage manifest_parser · 90%
info
Tool: list_agent_families manifest_parser · 90%
info
Tool: get_agent_family manifest_parser · 90%
info
Tool: create_agent_family manifest_parser · 90%
info
Tool: update_family_base manifest_parser · 90%
info
Tool: add_family_variant manifest_parser · 90%
info
Tool: update_family_variant manifest_parser · 90%
info
Tool: remove_family_variant manifest_parser · 90%
info
Tool: publish_agent_family manifest_parser · 90%
info
Tool: delete_agent_family manifest_parser · 90%
info
Tool: export_agent_family manifest_parser · 90%
info
Tool: import_agent_family manifest_parser · 90%
info
Tool: list_available_tools manifest_parser · 90%
info
Tool: delete_agent manifest_parser · 90%
info
Tool: ingest_knowledge_url manifest_parser · 90%
info
Tool: switch_tenant manifest_parser · 90%
info
Tool: get_tools_catalog manifest_parser · 90%
info
Tool: get_agent manifest_parser · 90%
info
Tool: delete_knowledge_document manifest_parser · 90%
info
Tool: list_agent_versions manifest_parser · 90%
info
Tool: list_templates manifest_parser · 90%
info
Tool: import_agent_json manifest_parser · 90%
info
Tool: list_tool_configs manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 170 components sbom_generator · 100%
high
Hardcoded Password found in MarcoAR1-botuyo-mcp-cbe3813/src/commands/login.ts secret_scanner · 65%
high
Generic API Key Assignment found in MarcoAR1-botuyo-mcp-cbe3813/src/tools/example_agent.ts secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%