← Back to search

@rockhopper-co/mcp-server

GitHub Actions Scanned 9d ago

Rockhopper MCP server — expose file metadata, versions, reviews, and comments to AI tools

npm ↗
B
84.2 / 100

Versions

0.8.0latest
Jul 3, 2026
0.7.0
May 24, 2026
0.6.0
May 14, 2026
0.5.0
May 14, 2026
0.4.0
May 4, 2026
+ show 5 moreshow less
0.3.2
Apr 28, 2026
0.3.1
Apr 28, 2026
0.3.0
Apr 25, 2026
0.2.1
Apr 25, 2026
0.2.0
Apr 25, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 22

connect_microsoft
annotations: verified low

Start connecting the user\'s Microsoft account so Rockhopper can search

readOnlyHint true openWorldHint true
microsoft_link_status
annotations: verified low

Check whether the user has connected a Microsoft account, which account

readOnlyHint true openWorldHint false idempotentHint true destructiveHint true
disconnect_microsoft
annotations: verified low

Remove the stored Microsoft connection, deleting the credential Rockhopper

readOnlyHint false openWorldHint false idempotentHint true destructiveHint true
search_files
annotations: verified low

Search enrolled files by name (default), comment text, version

readOnlyHint true openWorldHint false
get_unattributed_changes
annotations: verified low

Get pending cell-level changes that have not been attributed to a

readOnlyHint true openWorldHint false
get_file_comments
annotations: verified low

Get all comments and discussion threads on an enrolled file.

readOnlyHint true openWorldHint false
add_comment
annotations: none low

Add a new comment to an enrolled file. Every comment is scoped to a

readOnlyHint false idempotentHint false destructiveHint false
reply_to_comment
annotations: verified low

Reply to an existing comment thread. Replies are scoped to a file version

readOnlyHint false idempotentHint false destructiveHint false
resolve_comment
annotations: verified low

Mark a comment as resolved. Only the comment author can resolve it.

readOnlyHint false idempotentHint true destructiveHint false
create_version
annotations: verified low

Commit the current uncommitted changes on an enrolled file as a new version.

readOnlyHint false idempotentHint false destructiveHint false
discard_changes
annotations: verified low

Discard all uncommitted changes on an enrolled file, reverting it to the latest

readOnlyHint false idempotentHint false destructiveHint true
get_file_versions
annotations: verified low

Get the version history for a specific enrolled file.

readOnlyHint true openWorldHint false
search_drive_files
annotations: none low

get_reviews
annotations: verified low

Get all review requests for a specific file version, or for the latest version of a file.

readOnlyHint true openWorldHint false
list_files
annotations: none low

List all Excel files enrolled in the user\'s Rockhopper workspace.

readOnlyHint true openWorldHint false
enroll_file
annotations: none low

rename_file
annotations: verified low

Rename an enrolled file. The new name is the display name shown across Rockhopper.

readOnlyHint false idempotentHint true destructiveHint false
list_unenrolled_files
annotations: verified low

List the spreadsheets Rockhopper has seen for this user that are

readOnlyHint true openWorldHint false
create_review_request
annotations: verified low

Request a review for a specific file version. Assigns reviewers who

readOnlyHint false idempotentHint false destructiveHint false
approve_review
annotations: verified low

Approve a review request. Only assigned reviewers can approve.

readOnlyHint false idempotentHint true destructiveHint false
cancel_review
annotations: verified low

Cancel a pending review request. Only the requester can cancel.

readOnlyHint false idempotentHint true destructiveHint true
get_cell_history
annotations: verified low

Get the change history for a specific cell in an enrolled file.

readOnlyHint true openWorldHint false

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 58

info
Tool 'create_version' annotations are consistent annotation_checker · 80%
info
Tool 'discard_changes' annotations are consistent annotation_checker · 80%
info
Tool 'get_file_versions' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
info
Tool 'reply_to_comment' annotations are consistent annotation_checker · 80%
info
Tool 'resolve_comment' annotations are consistent annotation_checker · 80%
info
Tool 'connect_microsoft' annotations are consistent annotation_checker · 80%
info
Tool 'microsoft_link_status' annotations are consistent annotation_checker · 80%
info
Tool 'disconnect_microsoft' annotations are consistent annotation_checker · 80%
info
Tool 'search_files' annotations are consistent annotation_checker · 80%
info
Tool 'get_unattributed_changes' annotations are consistent annotation_checker · 80%
info
Tool 'get_file_comments' annotations are consistent annotation_checker · 80%
info
Tool 'add_comment' annotations are consistent annotation_checker · 80%
low
Tool 'search_drive_files' has no annotations annotation_checker · 100%
info
Tool 'get_reviews' annotations are consistent annotation_checker · 80%
info
Tool 'list_files' annotations are consistent annotation_checker · 80%
low
Tool 'enroll_file' has no annotations annotation_checker · 100%
info
Tool 'rename_file' annotations are consistent annotation_checker · 80%
info
Tool 'list_unenrolled_files' annotations are consistent annotation_checker · 80%
info
Tool 'create_review_request' annotations are consistent annotation_checker · 80%
info
Tool 'approve_review' annotations are consistent annotation_checker · 80%
info
Tool 'cancel_review' annotations are consistent annotation_checker · 80%
info
Tool 'get_cell_history' annotations are consistent annotation_checker · 80%
low
Tool 'list_files' has no annotations annotation_checker · 100%
low
Tool 'add_comment' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: connect_microsoft manifest_parser · 85%
info
Tool: microsoft_link_status manifest_parser · 85%
info
Tool: disconnect_microsoft manifest_parser · 85%
info
Tool: search_files manifest_parser · 85%
info
Tool: get_unattributed_changes manifest_parser · 85%
info
Tool: get_file_comments manifest_parser · 85%
info
Tool: add_comment manifest_parser · 85%
info
Tool: reply_to_comment manifest_parser · 85%
info
Tool: resolve_comment manifest_parser · 85%
info
Tool: create_version manifest_parser · 85%
info
Tool: discard_changes manifest_parser · 85%
info
Tool: get_file_versions manifest_parser · 85%
info
Tool: search_drive_files manifest_parser · 85%
info
Tool: get_reviews manifest_parser · 85%
info
Tool: list_files manifest_parser · 85%
info
Tool: enroll_file manifest_parser · 85%
info
Tool: rename_file manifest_parser · 85%
info
Tool: list_unenrolled_files manifest_parser · 85%
info
Tool: create_review_request manifest_parser · 85%
info
Tool: approve_review manifest_parser · 85%
info
Tool: cancel_review manifest_parser · 85%
info
Tool: get_cell_history manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 270 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%