← Back to search

Movi MCP v1

xiaojiou176-open Scanned 25d ago

Review-first stdio MCP for Movi: analyze, review, overlay edit, and dry-run preview.

MCP Registry ↗
? Not scanned yet

Versions

4.0.5latest
first seen Jun 5, 2026

Tools 16

list_watch_sources
annotations: none low

Read watch source metadata from workspace-local preferences.

list_jobs
annotations: none low

Read-only job inventory for agents that need to pick a job before review.

get_job
annotations: none low

Read one job record, including summary and status.

job_id str
get_runtime_settings
annotations: none low

Read workspace-local runtime defaults and active pack selection.

create_analyze
annotations: none low

Create an analyze job that drafts a manifest. It does not apply file changes.

model string offline bool workers string max_files string categories string max_file_mb string max_total_mb string trigger_source str input_directory str watch_source_id string strategy_pack_id string
get_review_queue
annotations: none low

Read the review queue for one analyze job.

limit int job_id str
get_manifest
annotations: none low

Read the manifest or manifest view without executing any file operations.

limit int job_id str resolved bool
patch_manifest_row
annotations: none low

Apply one overlay-only row patch.

patch string job_id str row_id str
patch_manifest_batch
annotations: none low

Apply multiple overlay-only row patches.

job_id str operations string
preview_review_rule
annotations: none low

Preview a saved or inline review rule.

rule string job_id str rule_id string
apply_review_rule
annotations: none low

Apply a review rule to the overlay-only review state.

rule string job_id str rule_id string
create_apply_preview
annotations: none low

Create a dry-run apply job. Execute mode is intentionally unavailable in MCP v1.

output_root string manifest_path string analyze_job_id string
get_report
annotations: none low

Read one report payload and the follow-up review routing metadata.

job_id str
list_strategy_packs
annotations: none low

Read strategy packs without changing runtime settings.

scan_inbox
annotations: none low

Discover inbox batches without triggering autonomous follow-up actions.

analyze_inbox
annotations: none low

Launch analyze from the inbox surface without turning discovery into autonomy.

model string offline bool workers string batch_id string max_files string categories string max_file_mb string max_total_mb string watch_source_id str strategy_pack_id string

Permissions 4

network medium
Server uses network capabilities via: fetch(), socket, urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 125

low
Tool 'list_jobs' has no annotations annotation_checker · 100%
low
Tool 'get_job' has no annotations annotation_checker · 100%
low
Tool 'get_runtime_settings' has no annotations annotation_checker · 100%
low
Tool 'create_analyze' has no annotations annotation_checker · 100%
low
Tool 'get_review_queue' has no annotations annotation_checker · 100%
low
Tool 'get_manifest' has no annotations annotation_checker · 100%
low
Tool 'patch_manifest_row' has no annotations annotation_checker · 100%
low
Tool 'patch_manifest_batch' has no annotations annotation_checker · 100%
low
Tool 'preview_review_rule' has no annotations annotation_checker · 100%
low
Tool 'apply_review_rule' has no annotations annotation_checker · 100%
low
Tool 'create_apply_preview' has no annotations annotation_checker · 100%
low
Tool 'get_report' has no annotations annotation_checker · 100%
low
Tool 'list_strategy_packs' has no annotations annotation_checker · 100%
low
Tool 'list_watch_sources' has no annotations annotation_checker · 100%
low
Tool 'scan_inbox' has no annotations annotation_checker · 100%
low
Tool 'analyze_inbox' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: postcss@8.5.8 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.8 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.8 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.8 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.2 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.2 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.2 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (GHSA-hvrp-rf83-w775) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (PYSEC-2026-3481) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-45hq-cxwh-f6vc) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-4x4j-2g7c-83w6) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-5x94-69rx-g8h2) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-5xmw-vc9v-4wf2) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-62p4-gmf7-7g93) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-6r8x-57c9-28j4) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-8v84-f9pq-wr9x) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-9hw9-ch79-4vh6) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-fj7v-r99m-22gq) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-jjj6-mw9f-p565) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-pg7v-jwj7-p798) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-phj9-mv4w-65pm) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-pwv6-vv43-88gr) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-r73j-pqj5-w3x7) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-vjc4-5qp5-m44j) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-whj4-6x5x-4v2j) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-wjx4-4jcj-g98j) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (GHSA-xj96-63gp-2gmr) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-165) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-2250) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-2251) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-2252) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-2253) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-2254) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-2255) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-2256) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-2257) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-2874) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-3451) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-3452) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-3453) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-3454) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-3493) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-3494) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-3495) dependency_analyzer · 95%
medium
Vulnerable dependency: pillow@12.1.1 (PYSEC-2026-3496) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (GHSA-5rvq-cxj2-64vf) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (GHSA-6jv3-5f52-599m) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (GHSA-mj87-hwqh-73pj) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (GHSA-pp6c-gr5w-3c5g) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (GHSA-v9pg-7xvm-68hf) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (GHSA-vffw-93wf-4j4q) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (PYSEC-2026-3036) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (PYSEC-2026-3037) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (PYSEC-2026-3038) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (PYSEC-2026-3039) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (PYSEC-2026-3040) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.22 (PYSEC-2026-3041) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.49.1 (GHSA-82w8-qh3p-5jfq) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.49.1 (GHSA-86qp-5c8j-p5mr) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.49.1 (GHSA-jp82-jpqv-5vv3) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.49.1 (GHSA-wqp7-x3pw-xc5r) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.49.1 (GHSA-x746-7m8f-x49c) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.49.1 (PYSEC-2026-161) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.49.1 (PYSEC-2026-2280) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.49.1 (PYSEC-2026-2281) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.49.1 (PYSEC-2026-248) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.49.1 (PYSEC-2026-249) dependency_analyzer · 95%
medium
High-entropy string (5.76 bits/char) in xiaojiou176-open-fileman-bb6e3fb/apps/webui/src/lib/i18n.ts:900 entropy_analyzer · 51%
medium
High-entropy string (5.73 bits/char) in xiaojiou176-open-fileman-bb6e3fb/apps/webui/src/lib/i18n.ts:988 entropy_analyzer · 51%
medium
High-entropy string (5.74 bits/char) in xiaojiou176-open-fileman-bb6e3fb/apps/webui/src/lib/i18n.ts:1167 entropy_analyzer · 51%
medium
High-entropy string (5.78 bits/char) in xiaojiou176-open-fileman-bb6e3fb/apps/webui/src/lib/i18n.ts:1188 entropy_analyzer · 51%
medium
High-entropy string (5.83 bits/char) in xiaojiou176-open-fileman-bb6e3fb/apps/webui/src/lib/i18n.ts:1210 entropy_analyzer · 52%
medium
High-entropy string (5.77 bits/char) in xiaojiou176-open-fileman-bb6e3fb/apps/webui/src/lib/i18n.ts:1349 entropy_analyzer · 51%
high
Long hex escape sequence in xiaojiou176-open-fileman-bb6e3fb/tests/e2e/test_live_webui_playwright.py:718 entropy_analyzer · 85%
high
Long hex escape sequence in xiaojiou176-open-fileman-bb6e3fb/tests/e2e/test_webui_playwright_e2e.py:971 entropy_analyzer · 85%
high
Long hex escape sequence in xiaojiou176-open-fileman-bb6e3fb/tests/e2e/test_webui_playwright_e2e.py:1498 entropy_analyzer · 85%
high
Long hex escape sequence in xiaojiou176-open-fileman-bb6e3fb/tests/e2e/test_webui_playwright_e2e.py:1852 entropy_analyzer · 85%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: list_jobs manifest_parser · 90%
info
Tool: get_job manifest_parser · 90%
info
Tool: get_runtime_settings manifest_parser · 90%
info
Tool: create_analyze manifest_parser · 90%
info
Tool: get_review_queue manifest_parser · 90%
info
Tool: get_manifest manifest_parser · 90%
info
Tool: patch_manifest_row manifest_parser · 90%
info
Tool: patch_manifest_batch manifest_parser · 90%
info
Tool: preview_review_rule manifest_parser · 90%
info
Tool: apply_review_rule manifest_parser · 90%
info
Tool: create_apply_preview manifest_parser · 90%
info
Tool: get_report manifest_parser · 90%
info
Tool: list_strategy_packs manifest_parser · 90%
info
Tool: list_watch_sources manifest_parser · 90%
info
Tool: scan_inbox manifest_parser · 90%
info
Tool: analyze_inbox manifest_parser · 90%
info
Required env vars (50) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 546 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%