← Back to search

io.github.cyanheads/clipboard-mcp-server

cyanheads Scanned 2d ago

Read, write, and inspect the system clipboard on macOS, Linux (X11/Wayland), and Windows via MCP.

MCP Registry ↗
? Not scanned yet

Versions

0.1.3latest
first seen Jun 5, 2026

Tools 3

clipboard_inspect
annotations: verified low

List the formats and byte sizes of what is currently on the clipboard without reading the full content.

input object output object
readOnlyHint true openWorldHint false
clipboard_read
annotations: verified low

Read the current clipboard contents in a requested format.

input object
readOnlyHint true openWorldHint false
clipboard_write
annotations: verified low

Write content to the clipboard, replacing the current contents, or clear the clipboard outright. "text" writes plain text. "html" writes HTML; on macOS and Windows it also publishes an auto-generated, tag-stripped plain-text fallback. On Linux the HTML itself is the only payload, with no stripped fallback: Wayland offers it as text/html and under the plain-text types, and X11 advertises only text/html but answers a request for a plain-text type such as UTF8_STRING with the same markup, so a plain-text paste can receive raw HTML. Pass clear: true with no content to remove every representation, leaving clipboard_inspect reporting an empty clipboard; supply exactly one of content or clear: true.

output object
openWorldHint false destructiveHint true

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 32

info
Tool 'clipboard_inspect' annotations are consistent annotation_checker · 80%
info
Tool 'clipboard_read' annotations are consistent annotation_checker · 80%
info
Tool 'clipboard_write' annotations are consistent annotation_checker · 80%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/tests/tools/clipboard-read.tool.test.ts:1099 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/tests/tools/clipboard-read.tool.test.ts:1104 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/tests/security/injection.test.ts:127 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/tests/services/clipboard/macos-native.test.ts:118 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/tests/services/clipboard/windows-backend.test.ts:361 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/tests/services/clipboard/windows-backend.test.ts:362 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/tests/services/clipboard/windows-backend.test.ts:432 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/tests/services/clipboard/windows-backend.test.ts:434 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/tests/services/clipboard/macos-backend.test.ts:417 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/tests/services/clipboard/macos-backend.test.ts:552 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/tests/services/clipboard/macos-backend.test.ts:563 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/src/services/clipboard/types.ts:251 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/src/services/clipboard/windows-backend.ts:387 entropy_analyzer · 75%
medium
Buffer.from base64 in cyanheads-clipboard-mcp-server-d131f51/src/services/clipboard/windows-backend.ts:388 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: clipboard_inspect manifest_parser · 75%
info
Tool: clipboard_read manifest_parser · 75%
info
Tool: clipboard_write manifest_parser · 75%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (7) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 12 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-clipboard-mcp-server-d131f51/framework-skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%