← Back to search

StudioMeyer Personal Suite

studiomeyer-io Scanned 26d ago

Local-first productivity: email, calendar, messaging, search, image gen. 49 tools. BYOK.

D
54.4 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 49

channel_send
annotations: none low

Send a message to a specific platform and channel. Use channel_list to discover channel IDs first.

text string threadId string channelId string replyToId string
channel_receive
annotations: none low

Get recently received messages from the in-memory buffer. For older messages, use channel_history instead.

channel_list
annotations: none low

List available channels/groups/conversations on connected platforms.

channel_status
annotations: none low

Health check for all configured messaging platforms. Call this first to see what is available.

channel_connect
annotations: none low

Connect to a messaging platform. Idempotent — safe to call if already connected. For WhatsApp: if QR scan is needed, returns the raw pairing URI string.

channel_disconnect
annotations: none low

Disconnect from a messaging platform. This stops receiving messages.

channel_broadcast
annotations: none low

Send the same message to multiple platforms at once. Runs in parallel.

text string channelId string
channel_history
annotations: none low

Get conversation history from a platform API. Unlike channel_receive (which reads the local buffer), this fetches older messages directly from the platform.

threadId string channelId string
calendar_status
annotations: none low

Check calendar configuration status. Supports Google Calendar and CalDAV (iCloud, Nextcloud, mailbox.org, etc.). Call this first to see if calendar is set up.

calendar_list_events
annotations: none low

List calendar events within a date range. Defaults to next 7 days. Supports calendar filtering.

query string timeMax string timeMin string calendarId string
calendar_get_event
annotations: none low

Get a single calendar event with full details (description, attendees, location, etc.).

eventId string calendarId string
calendar_create_event
annotations: none low

Create a new calendar event. Supports title, start/end time, description, location, attendees, recurrence. Google Meet links available with Google provider. Automatically checks for conflicts before creating.

end string start string summary string location string timeZone string calendarId string recurrence string addMeetLink boolean description string
calendar_update_event
annotations: none low

Update an existing calendar event. Only provided fields will be changed.

end string start string eventId string summary string location string timeZone string calendarId string description string
calendar_delete_event
annotations: none low

Delete a calendar event. Sends cancellation notice to attendees.

eventId string calendarId string
calendar_search_events
annotations: none low

Full-text search across event titles, descriptions, and locations. Searches 1 year back and forward.

query string calendarId string
calendar_list_calendars
annotations: none low

List all calendars accessible to the authenticated user with their IDs, names, and access roles.

calendar_check_availability
annotations: none low

Find free time slots on a given day. Useful for meeting planning — returns available slots with minimum duration.

date string calendarId string
calendar_upcoming
annotations: none low

Quick view: next N events from now. Default: 5 events. Fast overview of what is coming up.

calendarId string
calendar_daily_summary
annotations: none low

Full day overview with AI context: all events, busy/free time analysis, first/last event times. Great for daily planning.

date string calendarId string
image_generate
annotations: none low

Generate an image using AI. BYOK: configure your API keys via suite_setup(module:

prompt string
image_edit
annotations: none low

Edit an existing image using AI. Currently only OpenAI (DALL-E 2) supports native image editing. For Flux/Gemini, use image_generate with a detailed prompt describing the desired output.

prompt string imageUrl string
image_download
annotations: none low

Download a generated image to local filesystem. SSRF-protected: only HTTPS URLs from known image CDNs (OpenAI, fal.ai, Google) and local Gemini temp files are allowed. Default save location: ~/Downloads/ or /tmp/.

url string filename string
search_web
annotations: none low

Search the web. Default

query string
search_news
annotations: none low

Search for recent news articles. Default

query string
search_images
annotations: none low

Search for images on the web. Uses SearXNG images category or Brave Image Search.

query string
search_deep
annotations: none low

Multi-round deep search. Generates multiple search angles from the query, searches in parallel, deduplicates results, and returns a comprehensive combined result set.

query string
search_semantic
annotations: none low

Neural/semantic search via Exa — finds pages by concept similarity, not keywords. Best when you know WHAT you want but not exact keywords. Requires user to configure exaApiKey via suite_setup.

query string includeText boolean
search_code_context
annotations: none low

Find code examples, documentation, GitHub issues, StackOverflow threads via Exa. Best for

query string
search_research
annotations: none low

Deep research search via Tavily — runs multiple sub-searches, scrapes top pages, returns a synthesized answer with citations. Slow (15-30s) but gives you a research-grade answer, not raw links. Requires tavilyApiKey.

query string
email_status
annotations: none low

Check email configuration status. Call this first to see if email is set up.

email_setup
annotations: none low

Configure email provider. For Gmail/Outlook: provide clientId + clientSecret + refreshToken (from OAuth2 flow). For IMAP: provide host + user + password.

email string clientId string imapHost string imapPass string imapPort number imapUser string smtpHost string smtpPass string smtpPort number smtpUser string clientSecret string refreshToken string
email_auth
annotations: none low

Generate OAuth2 authorization URL or exchange authorization code for tokens. Step 1: action=

code string clientId string redirectUri string clientSecret string
email_list
annotations: none low

List emails from a folder. Returns subject, from, date, flags. Use email_read for full body.

folder string search string unseen boolean
email_read
annotations: none low

Read a single email by UID. Returns full body, headers, and attachment info. Get UIDs from email_list first.

folder string
email_search
annotations: none low

Search emails by subject or sender. Uses IMAP SEARCH — works with any provider.

query string folder string
email_threads
annotations: none low

Get email threads — groups related emails by References/In-Reply-To headers. Shows conversation flow.

folder string
email_folders
annotations: none low

List all email folders/labels. Use folder names in other tools.

email_send
annotations: none low

Send an email. Supports Gmail OAuth2, Outlook OAuth2, and SMTP. Can include attachments (file paths on disk, up to 25MB total).

cc string to string bcc string html string path string text string replyTo string subject string filename string
email_reply
annotations: none low

Reply to an email by UID. Automatically sets In-Reply-To, References headers, and

html string path string text string folder string filename string
email_move
annotations: none low

Move an email to a different folder (e.g., Archive, Trash, custom label). Use email_folders to discover available folders.

to string from string
email_mark_read
annotations: none low

Mark an email as read (sets \\Seen IMAP flag). Get UIDs from email_list.

folder string
email_mark_unread
annotations: none low

Mark an email as unread (removes \\Seen IMAP flag). Get UIDs from email_list.

folder string
email_delete
annotations: none low

Delete an email (moves to Trash). Provider-aware: uses correct Trash folder for Gmail/Outlook/IMAP. Get UIDs from email_list.

folder string
email_forward
annotations: none low

Forward an email to another address. Includes original message as quoted text. Get UIDs from email_list.

to string path string text string folder string filename string
suite_guide
annotations: none low

Embedded documentation. Topics: quickstart, connect, email, calendar, messaging, search, image, oauth. Call this FIRST on a new connection to learn how the suite works.

suite_status
annotations: none low

Show which modules are configured and ready to use. Call this first to understand what is available.

suite_setup
annotations: none low

Configure a module. For email: just provide email_address + email_password — settings are auto-detected for 30K+ providers. For advanced/OAuth: use email_provider + manual fields. Supported modules: email, calendar, messaging, search.

email_from_name string email_imap_host string email_imap_port number email_imap_user string email_smtp_host string email_smtp_port number email_from_address string email_imap_password string
suite_health
annotations: none low

Run health checks on all configured modules. Tests actual connections (IMAP, Calendar API, messaging bots, search engines).

suite_delete
annotations: none low

Delete your configuration and credentials. For GDPR/DSGVO compliance — removes all stored data. Specify a module or

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 122

low
Tool 'channel_send' has no annotations annotation_checker · 100%
low
Tool 'channel_receive' has no annotations annotation_checker · 100%
low
Tool 'channel_list' has no annotations annotation_checker · 100%
low
Tool 'channel_status' has no annotations annotation_checker · 100%
low
Tool 'channel_connect' has no annotations annotation_checker · 100%
low
Tool 'channel_disconnect' has no annotations annotation_checker · 100%
low
Tool 'channel_broadcast' has no annotations annotation_checker · 100%
low
Tool 'channel_history' has no annotations annotation_checker · 100%
low
Tool 'calendar_status' has no annotations annotation_checker · 100%
low
Tool 'calendar_list_events' has no annotations annotation_checker · 100%
low
Tool 'calendar_get_event' has no annotations annotation_checker · 100%
low
Tool 'calendar_create_event' has no annotations annotation_checker · 100%
low
Tool 'calendar_update_event' has no annotations annotation_checker · 100%
low
Tool 'calendar_delete_event' has no annotations annotation_checker · 100%
low
Tool 'calendar_search_events' has no annotations annotation_checker · 100%
low
Tool 'calendar_list_calendars' has no annotations annotation_checker · 100%
low
Tool 'calendar_check_availability' has no annotations annotation_checker · 100%
low
Tool 'calendar_upcoming' has no annotations annotation_checker · 100%
low
Tool 'calendar_daily_summary' has no annotations annotation_checker · 100%
low
Tool 'image_generate' has no annotations annotation_checker · 100%
low
Tool 'image_edit' has no annotations annotation_checker · 100%
low
Tool 'image_download' has no annotations annotation_checker · 100%
low
Tool 'search_web' has no annotations annotation_checker · 100%
low
Tool 'search_news' has no annotations annotation_checker · 100%
low
Tool 'search_images' has no annotations annotation_checker · 100%
low
Tool 'search_deep' has no annotations annotation_checker · 100%
low
Tool 'search_semantic' has no annotations annotation_checker · 100%
low
Tool 'search_code_context' has no annotations annotation_checker · 100%
low
Tool 'search_research' has no annotations annotation_checker · 100%
low
Tool 'email_status' has no annotations annotation_checker · 100%
low
Tool 'email_setup' has no annotations annotation_checker · 100%
low
Tool 'email_auth' has no annotations annotation_checker · 100%
low
Tool 'email_list' has no annotations annotation_checker · 100%
low
Tool 'email_read' has no annotations annotation_checker · 100%
low
Tool 'email_search' has no annotations annotation_checker · 100%
low
Tool 'email_threads' has no annotations annotation_checker · 100%
low
Tool 'email_folders' has no annotations annotation_checker · 100%
low
Tool 'email_send' has no annotations annotation_checker · 100%
low
Tool 'email_reply' has no annotations annotation_checker · 100%
low
Tool 'email_move' has no annotations annotation_checker · 100%
low
Tool 'email_mark_read' has no annotations annotation_checker · 100%
low
Tool 'email_mark_unread' has no annotations annotation_checker · 100%
low
Tool 'email_delete' has no annotations annotation_checker · 100%
low
Tool 'email_forward' has no annotations annotation_checker · 100%
low
Tool 'suite_guide' has no annotations annotation_checker · 100%
low
Tool 'suite_status' has no annotations annotation_checker · 100%
low
Tool 'suite_setup' has no annotations annotation_checker · 100%
low
Tool 'suite_health' has no annotations annotation_checker · 100%
low
Tool 'suite_delete' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in studiomeyer-io-mcp-personal-suite-d138ae2/tests/email.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in studiomeyer-io-mcp-personal-suite-d138ae2/tests/calendar.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in studiomeyer-io-mcp-personal-suite-d138ae2/src/modules/system/guide.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @whiskeysockets/baileys@7.0.0-rc.9 (GHSA-qvv5-jq5g-4cgg) dependency_analyzer · 95%
medium
Vulnerable dependency: nodemailer@9.0.3 (GHSA-2x7j-588g-ccc2) dependency_analyzer · 95%
medium
Vulnerable dependency: nodemailer@9.0.3 (GHSA-8m3c-c648-2xjj) dependency_analyzer · 95%
medium
Vulnerable dependency: nodemailer@9.0.3 (GHSA-cc9r-2j5m-2m83) dependency_analyzer · 95%
medium
Vulnerable dependency: nodemailer@9.0.3 (GHSA-wmmp-3585-3rmp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.4 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Buffer.from base64 in studiomeyer-io-mcp-personal-suite-d138ae2/src/modules/image/providers/gemini.ts:150 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: channel_send manifest_parser · 70%
info
Tool: channel_receive manifest_parser · 70%
info
Tool: channel_list manifest_parser · 70%
info
Tool: channel_status manifest_parser · 70%
info
Tool: channel_connect manifest_parser · 70%
info
Tool: channel_disconnect manifest_parser · 70%
info
Tool: channel_broadcast manifest_parser · 70%
info
Tool: channel_history manifest_parser · 70%
info
Tool: calendar_status manifest_parser · 70%
info
Tool: calendar_list_events manifest_parser · 70%
info
Tool: calendar_get_event manifest_parser · 70%
info
Tool: calendar_create_event manifest_parser · 70%
info
Tool: calendar_update_event manifest_parser · 70%
info
Tool: calendar_delete_event manifest_parser · 70%
info
Tool: calendar_search_events manifest_parser · 70%
info
Tool: calendar_list_calendars manifest_parser · 70%
info
Tool: calendar_check_availability manifest_parser · 70%
info
Tool: calendar_upcoming manifest_parser · 70%
info
Tool: calendar_daily_summary manifest_parser · 70%
info
Tool: image_generate manifest_parser · 70%
info
Tool: image_edit manifest_parser · 70%
info
Tool: image_download manifest_parser · 70%
info
Tool: search_web manifest_parser · 70%
info
Tool: search_news manifest_parser · 70%
info
Tool: search_images manifest_parser · 70%
info
Tool: search_deep manifest_parser · 70%
info
Tool: search_semantic manifest_parser · 70%
info
Tool: search_code_context manifest_parser · 70%
info
Tool: search_research manifest_parser · 70%
info
Tool: email_status manifest_parser · 70%
info
Tool: email_setup manifest_parser · 70%
info
Tool: email_auth manifest_parser · 70%
info
Tool: email_list manifest_parser · 70%
info
Tool: email_read manifest_parser · 70%
info
Tool: email_search manifest_parser · 70%
info
Tool: email_threads manifest_parser · 70%
info
Tool: email_folders manifest_parser · 70%
info
Tool: email_send manifest_parser · 70%
info
Tool: email_reply manifest_parser · 70%
info
Tool: email_move manifest_parser · 70%
info
Tool: email_mark_read manifest_parser · 70%
info
Tool: email_mark_unread manifest_parser · 70%
info
Tool: email_delete manifest_parser · 70%
info
Tool: email_forward manifest_parser · 70%
info
Tool: suite_guide manifest_parser · 70%
info
Tool: suite_status manifest_parser · 70%
info
Tool: suite_setup manifest_parser · 70%
info
Tool: suite_health manifest_parser · 70%
info
Tool: suite_delete manifest_parser · 70%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (44) manifest_parser · 80%
high
High-risk OAuth scope: https://www.googleapis.com/auth/calendar oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 425 components sbom_generator · 100%
high
Hardcoded Password found in studiomeyer-io-mcp-personal-suite-d138ae2/src/modules/system/setup-builders.ts secret_scanner · 65%
high
Hardcoded Password found in studiomeyer-io-mcp-personal-suite-d138ae2/src/modules/system/guide.ts secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%