← Back to search

io.github.cyanheads/bluesky-mcp-server

cyanheads streamable_http Scanned 2d ago

Search posts, profiles, feeds, threads, and trending topics on Bluesky.

B
84.6 / 100

Versions

0.1.1latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 10

budget_probe
annotations: none low

Probe the enrichment trailer.

cap number input object shown number notice string truncated boolean budgetCapped boolean budgetOmitted number totalReturned number
bsky_get_author_feed
annotations: verified low

Get a Bluesky user's recent feed ordered newest-first. Filter by post type:

input object
readOnlyHint true openWorldHint true idempotentHint true
bsky_get_profile
annotations: verified low

Fetch a Bluesky actor\'s public profile by handle (e.g. "bsky.app") or DID

input object avatar string handle string output object
readOnlyHint true openWorldHint true idempotentHint true
bsky_search_actors
annotations: verified low

Find Bluesky accounts by name or handle fragment. Returns ranked profiles with handle,

input object shown number actors array output object totalReturned number
readOnlyHint true openWorldHint true idempotentHint true
bsky_search_posts
annotations: verified low

Full-text search across public Bluesky posts. Filters by author, mentioned account, language

input object
readOnlyHint true openWorldHint true idempotentHint true
bsky_get_trending
annotations: verified low

Fetch the current real-time trending topics on Bluesky. Returns topics with display name,

cap number input object shown number notice string output object trends array totalReturned number
readOnlyHint true openWorldHint true idempotentHint false
bsky_get_post_quotes
annotations: verified low

Read the quote posts behind a Bluesky post\'s "quoteCount" — the posts that embed it with

input object totalReturned number
readOnlyHint true openWorldHint true idempotentHint true
bsky_get_follows
annotations: verified low

Fetch the social graph edges for a Bluesky account — who follows them, or who they follow.

did string input object actors array handle string output object
readOnlyHint true openWorldHint true idempotentHint true
bsky_get_feed
annotations: verified low

Read the posts a Bluesky feed generator serves, in the order the feed ranks them. Accepts the

input object totalReturned number
readOnlyHint true openWorldHint true idempotentHint true
bsky_get_post_thread
annotations: verified low

Fetch the conversation for a post by AT-URI — the parent chain upward and the reply tree downward.

readOnlyHint true openWorldHint true idempotentHint true

Permissions 2

shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 39

info
Tool 'bsky_get_feed' annotations are consistent annotation_checker · 80%
info
Tool 'bsky_get_post_thread' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
High-entropy string (5.95 bits/char) in cyanheads-bluesky-mcp-server-7787b9d/tests/services/bluesky/at-syntax.test.ts:73 entropy_analyzer · 54%
medium
Hex string literal (>50 chars) in cyanheads-bluesky-mcp-server-7787b9d/tests/mcp-server/tools/response-budget.characterization.test.ts:69 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in cyanheads-bluesky-mcp-server-7787b9d/tests/mcp-server/tools/response-budget.characterization.test.ts:77 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in cyanheads-bluesky-mcp-server-7787b9d/tests/mcp-server/tools/response-budget.characterization.test.ts:85 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in cyanheads-bluesky-mcp-server-7787b9d/tests/mcp-server/tools/response-budget.characterization.test.ts:93 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in cyanheads-bluesky-mcp-server-7787b9d/tests/mcp-server/tools/response-budget.characterization.test.ts:101 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in cyanheads-bluesky-mcp-server-7787b9d/tests/mcp-server/tools/response-budget.characterization.test.ts:109 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in cyanheads-bluesky-mcp-server-7787b9d/tests/mcp-server/tools/response-budget.characterization.test.ts:117 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: budget_probe manifest_parser · 75%
info
Tool 'bsky_get_profile' annotations are consistent annotation_checker · 80%
info
Tool 'bsky_search_actors' annotations are consistent annotation_checker · 80%
info
Tool 'bsky_search_posts' annotations are consistent annotation_checker · 80%
info
Tool 'bsky_get_trending' annotations are consistent annotation_checker · 80%
info
Tool 'bsky_get_post_quotes' annotations are consistent annotation_checker · 80%
info
Tool 'bsky_get_follows' annotations are consistent annotation_checker · 80%
low
Tool 'budget_probe' has no annotations annotation_checker · 100%
info
Tool 'bsky_get_author_feed' annotations are consistent annotation_checker · 80%
info
Tool: bsky_get_author_feed manifest_parser · 75%
info
Tool: bsky_get_profile manifest_parser · 75%
info
Tool: bsky_search_actors manifest_parser · 75%
info
Tool: bsky_search_posts manifest_parser · 75%
info
Tool: bsky_get_trending manifest_parser · 75%
info
Tool: bsky_get_post_quotes manifest_parser · 75%
info
Tool: bsky_get_follows manifest_parser · 75%
info
Tool: bsky_get_feed manifest_parser · 75%
info
Tool: bsky_get_post_thread manifest_parser · 75%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 13 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-bluesky-mcp-server-7787b9d/framework-skills/api-utils/references/security.md secret_scanner · 65%
high
Hardcoded Password found in cyanheads-bluesky-mcp-server-7787b9d/src/config/server-config.ts secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%