@dollhousemcp/mcp-server

← Back to search

DollhouseMCP - A Model Context Protocol (MCP) server that enables dynamic AI persona management from markdown files, allowing Claude and other compatible AI assistants to activate and switch between different behavioral personas.

npm ↗

? Not scanned yet

Versions

npm135

2.0.39latest

Jul 31, 2026

2.0.38

Jul 4, 2026

2.0.37

Jul 4, 2026

2.0.36

Jul 3, 2026

2.0.35

Jun 23, 2026

+ show 130 moreshow less

2.0.34

Jun 23, 2026

2.0.32

Apr 23, 2026

2.0.31

Apr 22, 2026

2.0.30

Apr 21, 2026

2.0.29

Apr 21, 2026

2.0.28

Apr 21, 2026

2.0.27

Apr 20, 2026

2.0.27-rc.17

Apr 20, 2026

2.0.27-rc.16

Apr 20, 2026

2.0.27-rc.15

Apr 20, 2026

2.0.27-rc.14

Apr 20, 2026

2.0.27-rc.13

Apr 20, 2026

2.0.27-rc.12

Apr 20, 2026

2.0.27-rc.11

Apr 20, 2026

2.0.27-rc.10

Apr 20, 2026

2.0.27-rc.9

Apr 20, 2026

2.0.27-rc.8

Apr 20, 2026

2.0.27-rc.7

Apr 19, 2026

2.0.27-rc.6

Apr 19, 2026

2.0.27-rc.5

Apr 19, 2026

2.0.27-rc.4

Apr 19, 2026

2.0.27-rc.3

Apr 19, 2026

2.0.27-rc.2

Apr 19, 2026

2.0.27-rc.1

Apr 19, 2026

2.0.26

Apr 17, 2026

2.0.25

Apr 16, 2026

2.0.24

Apr 16, 2026

2.0.23

Apr 16, 2026

2.0.22

Apr 16, 2026

2.0.21

Apr 16, 2026

2.0.20

Apr 16, 2026

2.0.19

Apr 16, 2026

2.0.18

Apr 16, 2026

2.0.17

Apr 15, 2026

2.0.16

Apr 14, 2026

2.0.15

Apr 14, 2026

2.0.14

Apr 14, 2026

2.0.13

Apr 13, 2026

2.0.12

Apr 12, 2026

2.0.12-rc.16

Apr 12, 2026

2.0.12-rc.15

Apr 9, 2026

2.0.12-rc.14

Apr 9, 2026

2.0.12-rc.13

Apr 9, 2026

2.0.12-rc.12

Apr 9, 2026

2.0.12-rc.11

Apr 9, 2026

2.0.12-rc.9

Apr 9, 2026

2.0.12-rc.8

Apr 9, 2026

2.0.12-rc.7

Apr 9, 2026

2.0.12-rc.6

Apr 9, 2026

2.0.12-rc.5

Apr 9, 2026

2.0.12-rc.4

Apr 9, 2026

2.0.12-rc.3

Apr 9, 2026

2.0.12-rc.2

Apr 8, 2026

2.0.12-rc.1

Apr 8, 2026

2.0.11

Apr 8, 2026

2.0.11-rc.1

Apr 8, 2026

2.0.10

Apr 3, 2026

2.0.9

Apr 3, 2026

2.0.8

Apr 2, 2026

2.0.7

Apr 2, 2026

2.0.6

Apr 2, 2026

2.0.5

Apr 2, 2026

2.0.4

Apr 2, 2026

2.0.3

Apr 2, 2026

2.0.2

Apr 2, 2026

2.0.1

Apr 2, 2026

2.0.0

Apr 1, 2026

2.0.0-rc.6

Mar 26, 2026

2.0.0-rc.5

Mar 23, 2026

2.0.0-rc.4

Mar 23, 2026

2.0.0-rc.3

Mar 22, 2026

2.0.0-rc.2

Mar 22, 2026

2.0.0-rc.1

Mar 20, 2026

1.9.27

Dec 5, 2025

1.9.26

Nov 7, 2025

1.9.25

Oct 30, 2025

1.9.24

Oct 27, 2025

1.9.23

Oct 27, 2025

1.9.22

Oct 23, 2025

1.9.20

Oct 17, 2025

1.9.19

Oct 17, 2025

1.9.18

Oct 17, 2025

1.9.17

Oct 8, 2025

1.9.16

Oct 3, 2025

1.9.15

Oct 1, 2025

1.9.14

Sep 30, 2025

1.9.13

Sep 29, 2025

1.9.12

Sep 29, 2025

1.9.11

Sep 28, 2025

1.9.10

Sep 27, 2025

1.9.8

Sep 20, 2025

1.9.7

Sep 20, 2025

1.9.6

Sep 20, 2025

1.9.5

Sep 20, 2025

1.9.4

Sep 19, 2025

1.9.3

Sep 19, 2025

1.9.2

Sep 19, 2025

1.9.1

Sep 19, 2025

1.9.0

Sep 19, 2025

1.8.1

Sep 15, 2025

1.8.0

Sep 15, 2025

1.7.4

Sep 12, 2025

1.7.3

Sep 9, 2025

1.7.2

Sep 7, 2025

1.7.1

Aug 31, 2025

1.7.0

Aug 31, 2025

1.6.11

Aug 28, 2025

1.6.10

Aug 28, 2025

1.6.9

Aug 27, 2025

1.6.8

Aug 26, 2025

1.6.7

Aug 26, 2025

1.6.6

Aug 26, 2025

1.6.5

Aug 26, 2025

1.6.4

Aug 26, 2025

1.6.3

Aug 25, 2025

1.6.2

Aug 25, 2025

1.6.1

Aug 25, 2025

1.6.0

Aug 25, 2025

1.5.2

Aug 6, 2025

1.5.1

Aug 5, 2025

1.5.0

Aug 5, 2025

1.4.5

Aug 5, 2025

1.4.4

Aug 4, 2025

1.4.3

Aug 4, 2025

1.4.2

Aug 4, 2025

1.4.1

Aug 2, 2025

1.4.0

Aug 2, 2025

1.3.3

Aug 2, 2025

1.3.2

Aug 1, 2025

1.3.0

Jul 29, 2025

Tools 0

No tools indexed yet.

Permissions 4

network medium

Server uses network capabilities via: fetch(), http, node-fetch

filesystem low

Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path

shell high

Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()

env_vars low

Server uses env_vars capabilities via: process.env

Scan Findings 53

info

Sandbox failed to start for output poisoning scan output_poisoning · 100%

high

Hardcoded API key in DollhouseMCP-mcp-server-8695a0a/tests/fixtures/testCredentials.ts auth_checker · 90%

high

Hardcoded OAuth client ID in DollhouseMCP-mcp-server-8695a0a/tests/unit/config/ConfigManager.test.ts auth_checker · 85%

high

Hardcoded OAuth client ID in DollhouseMCP-mcp-server-8695a0a/tests/unit/auth/oauth-helper.test.ts auth_checker · 85%

high

Hardcoded API key in DollhouseMCP-mcp-server-8695a0a/tests/unit/security/audit/SecurityAuditor.test.ts auth_checker · 90%

high

Hardcoded OAuth client ID in DollhouseMCP-mcp-server-8695a0a/tests/integration/utils/yaml-parser-selection.test.ts auth_checker · 85%

high

Hardcoded OAuth client ID in DollhouseMCP-mcp-server-8695a0a/src/auth/GitHubAuthManager.ts auth_checker · 85%

medium

OAuth implementation without PKCE auth_checker · 75%

info

Sandbox failed to start for behavioral verification behavioral_verifier · 100%

medium

Vulnerable dependency: @modelcontextprotocol/sdk@1.25.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%

medium

Vulnerable dependency: @modelcontextprotocol/sdk@1.25.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%

medium

Vulnerable dependency: dompurify@3.4.11 (GHSA-55q2-fjhq-7xh7) dependency_analyzer · 95%

medium

Vulnerable dependency: dompurify@3.4.11 (GHSA-c2j3-45gr-mqc4) dependency_analyzer · 95%

medium

Vulnerable dependency: extract-zip@2.0.1 (GHSA-jmr9-qjv8-65gv) dependency_analyzer · 95%

medium

Vulnerable dependency: js-yaml@4.1.1 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%

medium

Vulnerable dependency: js-yaml@4.1.1 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%

medium

Vulnerable dependency: js-yaml@4.1.1 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/scripts/qa-oauth-github-test.js:211 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/tests/helpers/github-api-client.ts:152 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/tests/qa/upload-ziggy-demo.test.ts:127 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/tests/qa/upload-ziggy-demo.test.ts:244 entropy_analyzer · 75%

medium

Hex string literal (>50 chars) in DollhouseMCP-mcp-server-8695a0a/tests/unit/github-workflow-validation.test.ts:198 entropy_analyzer · 70%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/tests/unit/PersonaExporter.test.ts:73 entropy_analyzer · 75%

high

Long unicode escape chain in DollhouseMCP-mcp-server-8695a0a/tests/integration/security-audit-batch-a.integration.test.ts:70 entropy_analyzer · 80%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/tests/unit/portfolio/PortfolioRepoManager.test.ts:414 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/tests/docker/permission-hooks/run-hook-case.mjs:115 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/collection/PersonaDetails.ts:33 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/collection/ElementInstaller.ts:823 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/portfolio/PortfolioRepoManager.ts:392 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/portfolio/PortfolioRepoManager.ts:705 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/sync/PortfolioDownloader.ts:45 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/security/tokenManager.ts:596 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/elements/agents/handoff.ts:323 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/persona/export-import/PersonaImporter.ts:141 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/security/encryption/PatternEncryptor.ts:247 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/security/encryption/PatternEncryptor.ts:264 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/security/encryption/PatternEncryptor.ts:265 entropy_analyzer · 75%

medium

Buffer.from base64 in DollhouseMCP-mcp-server-8695a0a/src/tools/portfolio/submitToPortfolioTool.ts:1166 entropy_analyzer · 75%

info

package.json metadata manifest_parser · 100%

info

Transport: stdio manifest_parser · 90%

info

Required env vars (223) manifest_parser · 80%

medium

Hardcoded OAuth client ID in DollhouseMCP-mcp-server-8695a0a/tests/unit/config/ConfigManager.test.ts oauth_scope_analyzer · 80%

medium

Hardcoded OAuth client ID in DollhouseMCP-mcp-server-8695a0a/tests/unit/auth/oauth-helper.test.ts oauth_scope_analyzer · 80%

medium

Hardcoded OAuth client ID in DollhouseMCP-mcp-server-8695a0a/tests/integration/utils/yaml-parser-selection.test.ts oauth_scope_analyzer · 80%

medium

Hardcoded OAuth client ID in DollhouseMCP-mcp-server-8695a0a/src/auth/GitHubAuthManager.ts oauth_scope_analyzer · 80%

high

High-risk OAuth scope: admin oauth_scope_analyzer · 80%

medium

OAuth authorization code flow without PKCE oauth_scope_analyzer · 75%

medium

Permission: network access detected permission_analyzer · 90%

low

Permission: filesystem access detected permission_analyzer · 90%

high

Permission: shell access detected permission_analyzer · 95%

low

Permission: env_vars access detected permission_analyzer · 90%

info

SBOM generated: 1047 components sbom_generator · 100%

medium

No build provenance detected (SLSA L0) slsa_assessor · 90%