← Back to search

io.github.CSOAI-ORG/care-membrane-mcp

CSOAI-ORG Scanned 13d ago

MCP server for care membrane. Features validate care, detect threats, analyze care patterns....

C
68.9 / 100

Versions

1.0.11latest
first seen Jun 30, 2026
1.0.3
first seen Jun 5, 2026
1.0.5
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 10

validate_care
annotations: none low

Validate text against care-centered principles. Returns care score (0-100), classification (care_aligned/neutral/care_concerning/care_violating), positive/negative signal counts, and manipulation detection. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation. When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review. Args: text (str): The text to analyze or process. api_key (str): The api key to analyze or process. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

text str api_key str
detect_threats
annotations: none low

Detect security threats, jailbreak attempts, prompt injection, PII extraction, coercion, and manipulation in text. Returns threat level, severity, and detailed threat breakdown. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation. When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review. Args: text (str): The text to analyze or process. api_key (str): The api key to analyze or process. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

text str api_key str
analyze_care_patterns
annotations: none low

Analyze care patterns to detect burnout risk and relationship health imbalances. Returns burnout risk score (0-100), reciprocity ratio, and actionable recommendations. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation. When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review. Args: care_given_per_day (float): The care given per day to analyze or process. care_received_per_day (float): The care received per day to analyze or process. active_relationships (int): The active relationships to analyze or process. high_demand_relationships (int): The high demand relationships to analyze or process. avg_care_quality (float): The avg care quality to analyze or process. days_since_self_care (int): The days since self care to analyze or process. boundary_violations (int): The boundary violations to analyze or process. emotional_exhaustion_score (float): The emotional exhaustion score to analyze or process. relationship_satisfaction (float): The relationship satisfaction to analyze or process. energy_level (float): The energy level to analyze or process. sleep_quality (float): The sleep quality to analyze or process. work_life_balance (float): The work life balance to analyze or process. api_key (str): The api key to analyze or process. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

api_key str energy_level float sleep_quality float avg_care_quality float work_life_balance float care_given_per_day float boundary_violations int active_relationships int days_since_self_care int care_received_per_day float high_demand_relationships int relationship_satisfaction float emotional_exhaustion_score float
predict_relationship_evolution
annotations: none low

Predict how a relationship will evolve over the next 30 days based on current trust, care, conflict, and engagement signals. Returns predicted trust, trajectory, phase, and key positive/concerning factors. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation. When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review. Args: current_trust (float): The current trust to analyze or process. interaction_frequency (float): The interaction frequency to analyze or process. care_score_avg (float): The care score avg to analyze or process. conflict_count (int): The conflict count to analyze or process. collaboration_count (int): The collaboration count to analyze or process. days_since_first_contact (int): The days since first contact to analyze or process. reciprocity_score (float): The reciprocity score to analyze or process. vulnerability_sharing (float): The vulnerability sharing to analyze or process. boundary_respect (float): The boundary respect to analyze or process. shared_value_alignment (float): The shared value alignment to analyze or process. api_key (str): The api key to analyze or process. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

api_key str current_trust float care_score_avg float conflict_count int boundary_respect float reciprocity_score float collaboration_count int interaction_frequency float vulnerability_sharing float shared_value_alignment float days_since_first_contact int
evaluate_care_membrane
annotations: none low

Evaluate an LLM response against the 16-probe Care Membrane framework. Pass a single probe_id (CM-01 through CM-16) or 'all' to run full evaluation. Returns posture score (0-100), certification level, and per-probe results. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation. When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review. Args: response_text (str): The response text to analyze or process. probe_id (str): The probe id to analyze or process. api_key (str): The api key to analyze or process. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

api_key str probe_id str response_text str
get_care_probes
annotations: none low

List all 16 Care Membrane probes with their categories and expected behaviors. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation. When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review. Args: api_key (str): The api key to analyze or process. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

api_key str
predict_risk_neural
annotations: none low

Neural network-based risk prediction that improves from every compliance check. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation. When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review. Args: system_name (str): The system name to analyze or process. uses_biometric (bool): The uses biometric to analyze or process. uses_health_data (bool): The uses health data to analyze or process. has_human_oversight (bool): The has human oversight to analyze or process. affected_users (int): The affected users to analyze or process. sector (str): The sector to analyze or process. has_documentation (bool): The has documentation to analyze or process. prior_incidents (int): The prior incidents to analyze or process. api_key (str): The api key to analyze or process. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

sector str api_key str system_name str affected_users int uses_biometric bool prior_incidents int uses_health_data bool has_documentation bool has_human_oversight bool
neural_insights
annotations: none low

Get aggregate learning insights from the neural compliance model. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation. When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review. Args: api_key (str): The api key to analyze or process. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

api_key str
quick_check
annotations: none low

Paste any AI response and get an instant care score + threat detection. No API key needed. Args: text: Any text to evaluate (AI response, prompt, message, etc.) Returns: Combined care score and threat assessment. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation. When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

text str
what_is_care_membrane
annotations: none low

Explains the 16-probe Care Membrane framework and care ethics approach. No parameters needed. Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage. When to use: Use this tool for security assessment, threat detection, or vulnerability analysis. Suitable for automated security scanning and risk evaluation. When NOT to use: Do not rely solely on this tool for production security decisions. Always combine with manual security review. Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.

Permissions 4

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: os
database medium
Server uses database capabilities via: sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 42

low
Tool 'validate_care' has no annotations annotation_checker · 100%
low
Tool 'detect_threats' has no annotations annotation_checker · 100%
low
Permission: filesystem access detected permission_analyzer · 70%
medium
Permission: database access detected permission_analyzer · 90%
low
Tool 'analyze_care_patterns' has no annotations annotation_checker · 100%
low
Tool 'predict_relationship_evolution' has no annotations annotation_checker · 100%
low
Tool 'evaluate_care_membrane' has no annotations annotation_checker · 100%
low
Tool 'get_care_probes' has no annotations annotation_checker · 100%
low
Tool 'predict_risk_neural' has no annotations annotation_checker · 100%
low
Tool 'neural_insights' has no annotations annotation_checker · 100%
low
Tool 'quick_check' has no annotations annotation_checker · 100%
low
Tool 'what_is_care_membrane' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: validate_care manifest_parser · 90%
info
Tool: detect_threats manifest_parser · 90%
info
Tool: analyze_care_patterns manifest_parser · 90%
info
Tool: predict_relationship_evolution manifest_parser · 90%
info
Tool: evaluate_care_membrane manifest_parser · 90%
info
Tool: get_care_probes manifest_parser · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
info
Tool: predict_risk_neural manifest_parser · 90%
info
Tool: neural_insights manifest_parser · 90%
info
Tool: quick_check manifest_parser · 90%
info
Tool: what_is_care_membrane manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%