← Back to search

OpenUI MCP Studio

xiaojiou176-open Scanned 27d ago

Local stdio MCP for UI briefs to React + shadcn with review, proof, and ship.

C
63.9 / 100

Versions

0.3.0latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 24

${toolName}
annotations: none low

shadcn_brief_quality_gate
annotations: none low

Run UI quality checks and optional preset-based workspace checks (lint/typecheck/test/ci_gate).

shadcn_brief_observe_screen
annotations: none low

Analyze current screen inputs and return Gemini observation without executing actions.

shadcn_brief_execute_ui_action
annotations: none low

Validate and acknowledge a single UI action with safety confirmation. This tool does not drive a browser by itself.

shadcn_brief_computer_use_loop
annotations: none low

Run an observe-plan-act loop with safety confirmation guard and structured execution records. This tool is not a standalone browser driver.

shadcn_brief_plan_change
annotations: none low

Produce a preflight change plan before writing files, using a semantic workspace profile plus prompt-derived risk hints.

shadcn_brief_ship_feature_flow
annotations: none low

Ship a multi-route feature flow by executing the page-level ship pipeline for each declared route and aggregating the results into one bundle.

shadcn_brief_rag_upsert
annotations: none low

Upsert documents into the session-local in-memory RAG index using Gemini embeddings.

shadcn_brief_rag_search
annotations: none low

Search the session-local in-memory RAG index using Gemini embeddings.

shadcn_brief_convert_react_shadcn
annotations: none low

Convert HTML to React + Tailwind (shadcn style), outputting multi-file JSON: { files: [{path, content}], notes?: string[] }.

shadcn_brief_make_react_page
annotations: none low

One-shot pipeline: prompt -> HTML draft -> React + Tailwind multi-file JSON.

shadcn_brief_apply_files
annotations: none low

Apply generated files to target workspace with transactional rollback on write failure.

shadcn_brief_review_uiux
annotations: none low

Run model-first UI/UX review from HTML, with heuristics available as explicit opt-in.

shadcn_brief_repo_workflow_summary
annotations: none low

Build a read-only summary of repo-local git state plus GitHub workflow readiness. This tool never mutates remote GitHub state.

shadcn_brief_ship_react_page
annotations: none low

End-to-end ship tool: prompt -> generate -> convert -> apply -> quality gate, with optional planning, acceptance, and review artifacts.

shadcn_brief_next_smoke
annotations: none low

Run Next.js smoke checks via the services/mcp-server next-smoke module when available.

shadcn_brief_build_acceptance_pack
annotations: none low

Build and optionally evaluate a request-scoped acceptance pack for the current UI change request.

shadcn_brief_embed_content
annotations: none low

Create Gemini embeddings for one or more text contents.

shadcn_brief_generate_ui
annotations: none low

Generate modern HTML UI from a prompt.

shadcn_brief_build_review_bundle
annotations: none low

Build a reviewer-facing bundle by combining workspace profile, change plan, and optional acceptance evaluation into one JSON/Markdown package.

shadcn_brief_refine_ui
annotations: none low

Refine existing HTML UI using a natural language instruction. Returns full updated HTML.

shadcn_brief_detect_shadcn_paths
annotations: none low

Detect shadcn import/path config. Priority: components.json aliases.ui -> folder scan -> default.

shadcn_brief_list_models
annotations: none low

List available models from the Gemini runtime provider.

shadcn_brief_scan_workspace_profile
annotations: none low

Scan the target frontend workspace and return a semantic workspace profile for routes, components, tokens, and implementation hints.

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, os, path, pathlib
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 90

low
Tool '${toolName}' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_quality_gate' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_observe_screen' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_execute_ui_action' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_computer_use_loop' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_plan_change' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_ship_feature_flow' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_rag_upsert' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_rag_search' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_convert_react_shadcn' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_make_react_page' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_apply_files' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_review_uiux' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_repo_workflow_summary' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_ship_react_page' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_next_smoke' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_build_acceptance_pack' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_embed_content' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_generate_ui' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_build_review_bundle' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_refine_ui' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_detect_shadcn_paths' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_list_models' has no annotations annotation_checker · 100%
low
Tool 'shadcn_brief_scan_workspace_profile' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: vitest@4.1.2 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-2xp9-vwfh-vxw4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-p293-qw3h-jr36) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
High-entropy string (5.77 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/app/workbench-data.ts:611 entropy_analyzer · 51%
medium
High-entropy string (5.73 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/app/workbench-data.ts:615 entropy_analyzer · 50%
medium
High-entropy string (5.92 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/app/workbench-data.ts:704 entropy_analyzer · 53%
medium
High-entropy string (5.82 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/app/workbench-data.ts:738 entropy_analyzer · 52%
medium
High-entropy string (5.71 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/app/workbench-data.ts:743 entropy_analyzer · 50%
medium
High-entropy string (5.87 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:878 entropy_analyzer · 53%
medium
High-entropy string (6.53 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:903 entropy_analyzer · 63%
medium
High-entropy string (5.81 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:920 entropy_analyzer · 52%
medium
High-entropy string (5.77 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:954 entropy_analyzer · 51%
medium
High-entropy string (5.79 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:1020 entropy_analyzer · 51%
medium
High-entropy string (5.94 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:1090 entropy_analyzer · 54%
medium
High-entropy string (5.80 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:1315 entropy_analyzer · 51%
medium
High-entropy string (6.11 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:1504 entropy_analyzer · 56%
medium
High-entropy string (5.72 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:1539 entropy_analyzer · 50%
info
package.json metadata manifest_parser · 100%
info
Tool: ${toolName} manifest_parser · 85%
info
Tool: shadcn_brief_quality_gate manifest_parser · 85%
info
Tool: shadcn_brief_observe_screen manifest_parser · 85%
info
Tool: shadcn_brief_execute_ui_action manifest_parser · 85%
info
Tool: shadcn_brief_computer_use_loop manifest_parser · 85%
info
Tool: shadcn_brief_plan_change manifest_parser · 85%
info
Tool: shadcn_brief_ship_feature_flow manifest_parser · 85%
info
Tool: shadcn_brief_rag_upsert manifest_parser · 85%
info
Tool: shadcn_brief_rag_search manifest_parser · 85%
info
Tool: shadcn_brief_convert_react_shadcn manifest_parser · 85%
info
Tool: shadcn_brief_make_react_page manifest_parser · 85%
info
Tool: shadcn_brief_apply_files manifest_parser · 85%
info
Tool: shadcn_brief_review_uiux manifest_parser · 85%
info
Tool: shadcn_brief_repo_workflow_summary manifest_parser · 85%
info
Tool: shadcn_brief_ship_react_page manifest_parser · 85%
info
Tool: shadcn_brief_next_smoke manifest_parser · 85%
info
Tool: shadcn_brief_build_acceptance_pack manifest_parser · 85%
info
Tool: shadcn_brief_embed_content manifest_parser · 85%
info
Tool: shadcn_brief_generate_ui manifest_parser · 85%
info
Tool: shadcn_brief_build_review_bundle manifest_parser · 85%
info
Tool: shadcn_brief_refine_ui manifest_parser · 85%
info
Tool: shadcn_brief_detect_shadcn_paths manifest_parser · 85%
info
Tool: shadcn_brief_list_models manifest_parser · 85%
info
Tool: shadcn_brief_scan_workspace_profile manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (100) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 712 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%