← Back to search

@kunobi/mcp

GitHub Actions Scanned 3d ago

MCP server for Kunobi — platform management for AI assistants

npm
B
77.1 / 100

Versions

0.1.0latest
Jul 28, 2026
0.0.19
Jul 15, 2026
0.0.18
Jun 22, 2026
0.0.17
Jun 22, 2026
0.0.16
May 27, 2026
+ show 14 moreshow less
0.0.15
Mar 30, 2026
0.0.14
Mar 17, 2026
0.0.13
Mar 12, 2026
0.0.12
Mar 8, 2026
0.0.11
Mar 5, 2026
0.0.10
Mar 4, 2026
0.0.9
Mar 4, 2026
0.0.8
Feb 27, 2026
0.0.7
Feb 27, 2026
0.0.6
Feb 27, 2026
0.0.5
Feb 27, 2026
0.0.4
Feb 8, 2026
0.0.3
Feb 7, 2026
0.0.2
Feb 7, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 4

kunobi_launch
annotations: verified low

Launch the Kunobi desktop app. Optionally specify a variant (e.g. "Kunobi Dev"). If no variant is specified, launches the first installed one. After launching, call kunobi_refresh to connect to the new instance immediately instead of waiting for the next automatic reconnect attempt.

readOnlyHint false openWorldHint false destructiveHint false
kunobi_refresh
annotations: verified low

Force an immediate reconnect attempt across all configured Kunobi variants. Use this after launching Kunobi or when kunobi_status shows stale data. Returns the fresh connection status for all variants.

readOnlyHint true openWorldHint false destructiveHint false
kunobi_call
annotations: verified low

Stable tool entrypoint for Kunobi operations. Call a variant tool via (variant, tool, arguments), e.g. variant="dev", tool="k8s". For a proxied extension MCP tool (directlyRegistered:false in kunobi://tools), also pass proxy_uuid to address it by its stable (variant, proxy_uuid) identity, with tool set to its ORIGINAL (un-namespaced) name. Use kunobi://tools to discover full downstream tool schemas and metadata.

readOnlyHint false openWorldHint true destructiveHint false
kunobi_status
annotations: verified low

Check which Kunobi variants are currently connected to this hub. Reports each variant's port, connection status, available tools, and reconnect timing. Call this before using Kunobi tools to understand what's available.

readOnlyHint true openWorldHint false destructiveHint false

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 21

info
Tool 'kunobi_refresh' annotations are consistent annotation_checker · 80%
info
Tool 'kunobi_call' annotations are consistent annotation_checker · 80%
info
Tool 'kunobi_status' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: rollup@4.57.1 (GHSA-mw96-cpmx-2vgc) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: kunobi_launch manifest_parser · 85%
info
Tool: kunobi_refresh manifest_parser · 85%
info
Tool: kunobi_call manifest_parser · 85%
info
Tool: kunobi_status manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (6) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
info
Tool 'kunobi_launch' annotations are consistent annotation_checker · 80%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'kunobi_status': Cross-tool sequencing directive poisoning · 85%
info
SBOM generated: 14 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%