← Back to search

io.github.davidmosiah/delx-living-body

davidmosiah Scanned 1d ago

Meta-MCP that auto-detects installed wellness connectors and composes them into one body data layer.

B
82.1 / 100

Versions

0.2.0latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 10

${vendor}_wellness_context
annotations: none low

Synthetic wellness_context emitted by the demo harness.

response_format string
living_body_agent_manifest
annotations: verified low

Machine-readable install and operating instructions for AI agents. Call first when onboarding.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
living_body_connection_status
annotations: verified low

Ready/not-ready snapshot of local connector detection without calling vendor APIs or child data tools.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
living_body_data_inventory
annotations: verified low

Static inventory of composed domains, known connectors, privacy modes and recommended first calls. No live child calls.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
living_body_status
annotations: verified low

Detect which Delx Wellness connectors are installed locally. Safe, no subprocess spawning.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
living_body_ask
annotations: verified low

Ask a wellness question; composes detected connectors in parallel and returns a synthesized answer + reasoning trace. Spawns subprocesses — requires explicit_user_intent.

readOnlyHint true openWorldHint true idempotentHint false destructiveHint false
living_body_daily_brief
annotations: verified low

Synthetic daily briefing aggregating each detected connector's daily summary/context. Spawns child MCP processes — requires explicit_user_intent: true.

readOnlyHint true openWorldHint true idempotentHint false destructiveHint false
living_body_compose_context
annotations: verified low

Return the normalized delx-wellness-context/v1 shape merged across all detected sources. Spawns child MCP processes — requires explicit_user_intent: true.

readOnlyHint true openWorldHint true idempotentHint false destructiveHint false
living_body_health_check
annotations: verified low

Returns status for every known connector — including missing ones — with install hints.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
living_body_capabilities
annotations: verified low

Self-description of this MCP, including the per-connector availability matrix.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 33

low
Tool '${vendor}_wellness_context' has no annotations annotation_checker · 100%
info
Tool 'living_body_agent_manifest' annotations are consistent annotation_checker · 80%
info
Tool 'living_body_connection_status' annotations are consistent annotation_checker · 80%
info
Tool 'living_body_data_inventory' annotations are consistent annotation_checker · 80%
info
Tool 'living_body_status' annotations are consistent annotation_checker · 80%
info
Tool 'living_body_ask' annotations are consistent annotation_checker · 80%
info
Tool 'living_body_daily_brief' annotations are consistent annotation_checker · 80%
info
Tool 'living_body_compose_context' annotations are consistent annotation_checker · 80%
info
Tool 'living_body_health_check' annotations are consistent annotation_checker · 80%
info
Tool 'living_body_capabilities' annotations are consistent annotation_checker · 80%
medium
OAuth implementation without PKCE auth_checker · 75%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.21.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.21.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.21.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: ${vendor}_wellness_context manifest_parser · 85%
info
Tool: living_body_agent_manifest manifest_parser · 85%
info
Tool: living_body_connection_status manifest_parser · 85%
info
Tool: living_body_data_inventory manifest_parser · 85%
info
Tool: living_body_status manifest_parser · 85%
info
Tool: living_body_ask manifest_parser · 85%
info
Tool: living_body_daily_brief manifest_parser · 85%
info
Tool: living_body_compose_context manifest_parser · 85%
info
Tool: living_body_health_check manifest_parser · 85%
info
Tool: living_body_capabilities manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (17) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 170 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%