← Back to search

io.github.cyanheads/pokeapi-mcp-server

cyanheads streamable_http Scanned 25d ago

Look up Pokémon, moves, abilities, items, natures, and type matchups from PokéAPI v2.

B
89.5 / 100

Versions

0.1.1latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

pokeapi_get_ability
annotations: verified low

Get ability details by name or numeric ID — full English effect text, short effect text,

id number slot number input object output object isHidden boolean generation string
readOnlyHint true openWorldHint true idempotentHint true
pokeapi_get_pokemon
annotations: verified low

Get a fully denormalized Pokémon dossier in a single call — base stats, types, abilities

id number input object stats array types array output object heightDm number weightHg number
readOnlyHint true openWorldHint true idempotentHint true
pokeapi_get_nature
annotations: verified low

Get nature details — the stat boosted (+10%), stat reduced (-10%),

input object output object
readOnlyHint true openWorldHint false idempotentHint true
pokeapi_find_pokemon
annotations: verified low

Filter Pokémon by generation, type, regional pokédex, or egg group.

id number input object shown number notice string output object totalCount number
readOnlyHint true openWorldHint false idempotentHint true
pokeapi_get_move
annotations: verified low

Get move details by name or numeric ID — type, damage class, power, accuracy, PP,

id number pp number stat string type string input object power number change number output object target string
readOnlyHint true openWorldHint true idempotentHint true
pokeapi_get_item
annotations: verified low

Get item details by name or numeric ID — effect text, category, in-game cost,

id number cost number input object output object category string spriteUrl string
readOnlyHint true openWorldHint true idempotentHint true
pokeapi_get_type_matchups
annotations: verified low

Get the full offensive and defensive type effectiveness breakdown.

input object output object resolvedTypes array
readOnlyHint true openWorldHint true idempotentHint true

Permissions 2

shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 23

info
Tool 'pokeapi_get_ability' annotations are consistent annotation_checker · 80%
info
Tool 'pokeapi_get_pokemon' annotations are consistent annotation_checker · 80%
info
Tool 'pokeapi_get_nature' annotations are consistent annotation_checker · 80%
info
Tool 'pokeapi_find_pokemon' annotations are consistent annotation_checker · 80%
info
Tool 'pokeapi_get_move' annotations are consistent annotation_checker · 80%
info
Tool 'pokeapi_get_item' annotations are consistent annotation_checker · 80%
info
Tool 'pokeapi_get_type_matchups' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: pokeapi_get_ability manifest_parser · 75%
info
Tool: pokeapi_get_pokemon manifest_parser · 75%
info
Tool: pokeapi_get_nature manifest_parser · 75%
info
Tool: pokeapi_find_pokemon manifest_parser · 75%
info
Tool: pokeapi_get_move manifest_parser · 75%
info
Tool: pokeapi_get_item manifest_parser · 75%
info
Tool: pokeapi_get_type_matchups manifest_parser · 75%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 11 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-pokeapi-mcp-server-22d7827/framework-skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%