← Back to search

io.github.Texan-NXTassist/nr-mcp

Texan-NXTassist Scanned 23h ago

MCP server for Node-RED — safe deploy, optimistic locking, smart search, 13 tools

MCP Registry ↗
C
71.7 / 100

Versions

1.2.2latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 13

nr_delete_nodes
annotations: none low

Delete one or more nodes by ID. Also cleans up references: removes deleted IDs from group.nodes arrays and from other nodes' wires arrays.

node_ids string description string
nr_get_flow_summary
annotations: none low

Quick overview of all Node-RED tabs with node counts and groups.

nr_get_flow
annotations: none low

Get a single Node-RED tab with all its nodes and groups. Accepts tab name (case-insensitive) or tab ID.

name_or_id str
nr_search_nodes
annotations: none low

Search Node-RED nodes by name, type, or function code content. Searches in: name, type, func, template, action fields.

flow string type string query str max_results int
nr_get_function_code
annotations: none low

Extract full JavaScript code from a Node-RED function node.

node_id str
nr_get_node_config
annotations: none low

Get full node configuration including wires, upstream/downstream connections, and group membership.

node_id str
nr_get_flow_context
annotations: none low

Read Node-RED flow context variables. Pass key=null to list all keys, or a specific key to get its value.

key string flow_id str
nr_safe_deploy
annotations: none low

Deploy changes to a Node-RED node with optimistic locking. Uses correct GET→POST pattern (never PUT). Preserves tab order.

fields dict node_id str description string
nr_get_installed_modules
annotations: none low

List installed Node-RED modules and their node types. Optionally filter by module name or node type containing `query` string. Returns module name, version, and list of node types provided.

query string
nr_inject
annotations: none low

Trigger an inject node to fire immediately. Use nr_search_nodes to find inject nodes first. The node must be of type 'inject'.

node_id str
nr_create_nodes
annotations: none low

Create one or more new nodes/groups in a single deploy. Each node dict must include 'id', 'type', and 'z' (target tab ID). Groups need 'type': 'group'. Config nodes (e.g. ha-entity-config) use 'z': '' for global scope.

nodes string description string
nr_install_module
annotations: none low

Install a new Node-RED module (npm package) from the registry. Use nr_get_installed_modules to check what's already installed first. Installation may take 30-60 seconds.

module_name str
nr_get_debug_output
annotations: none low

Read debug output from flow context. Use when a flow has a catch node that stores errors/debug data to flow context. Pass key=null to list all context keys. Trigger flow with nr_inject first, then read this.

key string flow_id str

Permissions 3

network medium
Server uses network capabilities via: httpx
filesystem low
Server uses filesystem capabilities via: os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 47

low
Tool 'nr_get_flow_summary' has no annotations annotation_checker · 100%
low
Tool 'nr_get_flow' has no annotations annotation_checker · 100%
low
Tool 'nr_search_nodes' has no annotations annotation_checker · 100%
low
Tool 'nr_get_function_code' has no annotations annotation_checker · 100%
low
Tool 'nr_get_node_config' has no annotations annotation_checker · 100%
low
Tool 'nr_get_flow_context' has no annotations annotation_checker · 100%
low
Tool 'nr_create_nodes' has no annotations annotation_checker · 100%
low
Tool 'nr_safe_deploy' has no annotations annotation_checker · 100%
low
Tool 'nr_get_installed_modules' has no annotations annotation_checker · 100%
low
Tool 'nr_inject' has no annotations annotation_checker · 100%
low
Tool 'nr_delete_nodes' has no annotations annotation_checker · 100%
low
Tool 'nr_install_module' has no annotations annotation_checker · 100%
low
Tool 'nr_get_debug_output' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: nr_get_flow_summary manifest_parser · 90%
info
Tool: nr_get_flow manifest_parser · 90%
info
Tool: nr_search_nodes manifest_parser · 90%
info
Tool: nr_get_function_code manifest_parser · 90%
info
Tool: nr_get_node_config manifest_parser · 90%
info
Tool: nr_get_flow_context manifest_parser · 90%
info
Tool: nr_safe_deploy manifest_parser · 90%
info
Tool: nr_get_installed_modules manifest_parser · 90%
info
Tool: nr_inject manifest_parser · 90%
info
Tool: nr_create_nodes manifest_parser · 90%
info
Tool: nr_delete_nodes manifest_parser · 90%
info
Tool: nr_install_module manifest_parser · 90%
info
Tool: nr_get_debug_output manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%