← Back to search

@deepthonk/mcp

GitHub Actions Scanned 28d ago

MCP server adapter for DeepThonk.

npm
C
70.5 / 100

Versions

0.3.0latest
Jul 10, 2026
0.2.1
Jul 10, 2026
0.2.0
Jul 10, 2026
0.1.5
Jul 10, 2026
0.1.4
Jun 24, 2026
+ show 4 moreshow less
0.1.3
Jun 22, 2026
0.1.2
May 18, 2026
0.1.1
May 18, 2026
0.1.0
May 18, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 17

deepthonk.plan
annotations: none low

Estimate model calls for a DeepThonk profile.

deepthonk.start
annotations: none low

Start DeepThonk in the background and persist status in the run directory.

deepthonk.status
annotations: none low

Read persisted job/run status from a run directory.

deepthonk.result
annotations: none low

Return final summary/resource URIs when a background job is complete.

deepthonk.cancel
annotations: none low

Request cancellation for a running job by writing cancel.json in the run directory.

deepthonk.lock_inspect
annotations: none low

Inspect run.lock and return its exact fingerprint without mutating it.

deepthonk.lock_reclaim
annotations: none low

Reclaim run.lock only when its current bytes match the inspected fingerprint exactly.

deepthonk.repair_budget
annotations: none low

Replace only legacy [redacted] numeric budget fields with explicit original values.

deepthonk.run
annotations: none low

Run DeepThonk through the shared core engine.

deepthonk.rank
annotations: none low

Rank supplied candidates with pairwise judging and Bradley-Terry aggregation.

deepthonk.mutate
annotations: none low

Mutate one supplied candidate with critique.

deepthonk.resume
annotations: none low

Detect resume state (default) or replay an interrupted run with continue: true.

deepthonk.export
annotations: none low

Export a run summary or trace.

deepthonk.profile_list
annotations: none low

List saved named profiles.

deepthonk.profile_show
annotations: none low

Show a saved named profile; manually edited secret-shaped values are rejected on load.

deepthonk.profile_save
annotations: none low

Save a reusable named profile bundle.

deepthonk.profile_delete
annotations: none low

Delete a saved named profile.

Permissions 3

network medium
Server uses network capabilities via: fetch(), http
shell high
Server uses shell capabilities via: child_process, spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 46

low
Tool 'deepthonk.plan' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.start' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.status' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.result' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.cancel' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.lock_inspect' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.lock_reclaim' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.repair_budget' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.run' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.rank' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.mutate' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.resume' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.export' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.profile_list' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.profile_show' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.profile_save' has no annotations annotation_checker · 100%
low
Tool 'deepthonk.profile_delete' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: yaml@2.7.1 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Buffer.from base64 in linxule-deepthonk-8713841/test/mcp/mcp.test.ts:152 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: deepthonk.plan manifest_parser · 85%
info
Tool: deepthonk.start manifest_parser · 85%
info
Tool: deepthonk.status manifest_parser · 85%
info
Tool: deepthonk.result manifest_parser · 85%
info
Tool: deepthonk.cancel manifest_parser · 85%
info
Tool: deepthonk.lock_inspect manifest_parser · 85%
info
Tool: deepthonk.lock_reclaim manifest_parser · 85%
info
Tool: deepthonk.repair_budget manifest_parser · 85%
info
Tool: deepthonk.run manifest_parser · 85%
info
Tool: deepthonk.rank manifest_parser · 85%
info
Tool: deepthonk.mutate manifest_parser · 85%
info
Tool: deepthonk.resume manifest_parser · 85%
info
Tool: deepthonk.export manifest_parser · 85%
info
Tool: deepthonk.profile_list manifest_parser · 85%
info
Tool: deepthonk.profile_show manifest_parser · 85%
info
Tool: deepthonk.profile_save manifest_parser · 85%
info
Tool: deepthonk.profile_delete manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (10) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 11 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%