← Back to search Server uses network capabilities via: fetch(), http, urllib Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, os, path Server uses shell capabilities via: child_process, spawn(), spawnSync() Server uses env_vars capabilities via: os.environ, process.env
@tanstack/ai-mcp
Host-side Model Context Protocol client for TanStack AI: discover and run MCP server tools, resources, and prompts in any adapter's chat() loop, with generated end-to-end types.
npm
D
40 / 100
Versions
0.2.5latestJul 20, 2026
0.2.4Jul 16, 2026
0.2.3Jul 6, 2026
0.2.2Jul 3, 2026
0.2.1Jun 30, 2026
+ show 12 moreshow less
0.2.0Jun 26, 2026
0.1.10Jun 25, 2026
0.1.9Jun 25, 2026
0.1.8Jun 24, 2026
0.1.7Jun 24, 2026
0.1.6Jun 23, 2026
0.1.5Jun 22, 2026
0.1.4Jun 18, 2026
0.1.3Jun 16, 2026
0.1.1Jun 15, 2026
0.1.0Jun 5, 2026
0.0.1Jun 5, 2026
Tools 46
nullable_union annotations: none low
Uses an optional union that genuinely accepts null
ask annotations: none low
Ask
store_variant annotations: none low
Store a union variant
getGuitars annotations: none low
Get guitar recommendations
complex annotations: none low
non_strict annotations: none low
Uses a schema outside the strict subset
union annotations: none low
Uses variant-specific nullability
show_widget annotations: none low
Render a widget for the given title
title string
search annotations: none low
Search
recall_more annotations: none low
Look up additional long-term memory by query.
get_guitar_price annotations: verified low
Get the price of a guitar by its id
id string
readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
appraise_guitar_collection annotations: none low
Long-running appraisal that requires task-based execution
ids array
lookup_weather annotations: none low
Return the weather for a location
sum_tool annotations: none low
Sums an array of numbers.
get_weather annotations: none low
Get weather for a city
city string
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
always_fails annotations: none low
A tool that always returns an error result
research_task annotations: none low
A long-running tool that requires task-based execution
query string
lookup_user annotations: none low
Look a user up by id
id string
web_fetch annotations: none low
shared_context annotations: none low
Standing constraints carried as a cacheable tool.
createBlock annotations: none low
Create a UI block
test_tool annotations: none low
test
error_tool annotations: none low
Throws error
invalid_output_tool annotations: none low
Returns invalid output
no_execute annotations: none low
No execute function
calculate annotations: none low
Calculate
delete_local_data annotations: none low
Delete data from local storage
get_local_data annotations: none low
Get data from local storage
delete_record annotations: none low
Delete a record
get_count annotations: none low
Get a count
is_enabled annotations: none low
Check enabled state
show_notification annotations: none low
Show a notification in the client
simple_tool annotations: none low
A tool with no required args
cat_tool annotations: none low
A tool about cats.
hindsight_retain annotations: none low
Explicitly store a fact, decision, or piece of context to remember in future sessions. Call this when the user shares something important about themselves, their preferences, their work, or any detail that should persist beyond this conversation.
hindsight_recall annotations: none low
Query memory directly with a specific question. Use this when you need context that may not have surfaced in the automatic recall — for example, to look up a different topic than the user's last message, or to find facts about an entity mentioned in passing.
hindsight_reflect annotations: none low
Synthesize across many memories to answer questions that require reasoning over accumulated knowledge, rather than retrieving specific facts. Use this for questions like "what do I know about this user\'s stack?" or "what has the user been working on lately?"
optional_enum annotations: none low
Uses optional and genuinely nullable values
ask_user annotations: none low
Ask a question
mcp annotations: none low
test mcp tool
get_user annotations: none low
Get a user
API-get-user annotations: none low
Notion get user
store_labels annotations: none low
Store arbitrary labels
show_products annotations: none low
Show the product catalog as an interactive storefront widget the user can buy from.
buy_product annotations: none low
Place an order for a product by id. Called by the storefront widget.
productId string
show_weather_card annotations: none low
Show a visual weather forecast card for a city as an interactive UI widget.
city string
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 172
low
Tool 'lookup_user' has no annotations
low
Tool 'show_widget' has no annotations
low
Tool 'search' has no annotations
low
Tool 'recall_more' has no annotations
info
Tool 'get_guitar_price' annotations are consistent
low
Tool 'appraise_guitar_collection' has no annotations
low
Tool 'lookup_weather' has no annotations
low
Tool 'sum_tool' has no annotations
info
Tool 'get_weather' annotations are consistent
low
Tool 'always_fails' has no annotations
low
Tool 'research_task' has no annotations
low
Tool 'web_fetch' has no annotations
low
Tool 'shared_context' has no annotations
low
Tool 'createBlock' has no annotations
low
Tool 'test_tool' has no annotations
low
Tool 'get_weather' has no annotations
low
Tool 'error_tool' has no annotations
low
Tool 'invalid_output_tool' has no annotations
low
Tool 'no_execute' has no annotations
low
Tool 'calculate' has no annotations
low
Tool 'delete_local_data' has no annotations
low
Tool 'get_local_data' has no annotations
low
Tool 'delete_record' has no annotations
low
Tool 'get_count' has no annotations
low
Tool 'is_enabled' has no annotations
low
Tool 'show_notification' has no annotations
low
Tool 'simple_tool' has no annotations
low
Tool 'cat_tool' has no annotations
low
Tool 'hindsight_retain' has no annotations
low
Tool 'hindsight_recall' has no annotations
low
Tool 'hindsight_reflect' has no annotations
low
Tool 'optional_enum' has no annotations
low
Tool 'ask_user' has no annotations
low
Tool 'mcp' has no annotations
low
Tool 'get_user' has no annotations
low
Tool 'API-get-user' has no annotations
low
Tool 'store_labels' has no annotations
low
Tool 'non_strict' has no annotations
low
Tool 'union' has no annotations
low
Tool 'nullable_union' has no annotations
low
Tool 'ask' has no annotations
low
Tool 'store_variant' has no annotations
low
Tool 'getGuitars' has no annotations
low
Tool 'complex' has no annotations
low
Tool 'show_products' has no annotations
low
Tool 'buy_product' has no annotations
low
Tool 'show_weather_card' has no annotations
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 495 direct dependencies
medium
Suspicious package name: react-native
medium
Suspicious package name: react-dom
medium
Suspicious package name: react-markdown
medium
Vulnerable dependency: ws@8.18.3 (GHSA-58qx-3vcg-4xpx)
medium
Vulnerable dependency: ws@8.18.3 (GHSA-96hv-2xvq-fx4p)
medium
Vulnerable dependency: preact@10.26.9 (GHSA-36hm-qxxp-pg3m)
medium
Vulnerable dependency: @hono/node-server@1.19.6 (GHSA-92pp-h63x-v22m)
medium
Vulnerable dependency: @hono/node-server@1.19.6 (GHSA-frvp-7c67-39w9)
medium
Vulnerable dependency: @hono/node-server@1.19.6 (GHSA-wc8c-qw6v-h7f6)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-26pp-8wgv-hjvm)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-2gcr-mfcq-wcc3)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-3hrh-pfw6-9m5x)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-3vhc-576x-3qv4)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-458j-xx4x-4375)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-5pq2-9x2x-5p6w)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-69xw-7hcm-h432)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-6wqw-2p9w-4vw4)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-79qm-7rj5-m7r9)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-88fw-hqm2-52qc)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-8j4g-w8fx-2239)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-9r54-q6cx-xmh5)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-9vqf-7f2p-gf9v)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-f23p-vx2j-j53r)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-f577-qrjj-4474)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-f67f-6cw9-8mq4)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-gq3j-xvxp-8hrf)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-hm8q-7f3q-5f36)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-j6c9-x7qj-28xf)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-p6xx-57qc-3wxr)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-p77w-8qqv-26rm)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-q5qw-h33p-qvwr)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-qp7p-654g-cw7p)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-r354-f388-2fhh)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-r5rp-j6wh-rvv4)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-rv63-4mwf-qqc2)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-v8w9-8mx6-g223)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-w332-q679-j88p)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-w62v-xxxg-mg59)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-wgpf-jwqj-8h8p)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-wmmm-f939-6g9c)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-wwfh-h76j-fc44)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-xf4j-xp2r-rqqx)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-xgm2-5f3f-mvvc)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-xpcf-pg52-r92g)
medium
Vulnerable dependency: hono@4.10.6 (GHSA-xrhx-7g5j-rcj5)
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-gemini/tests/tts-adapter.test.ts:209
info
Tool: web_fetch
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-gemini/tests/tts-adapter.test.ts:271
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-gemini/src/adapters/tts.ts:336
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-bedrock/src/converse/message-converter.ts:24
medium
High-entropy string (6.04 bits/char) in TanStack-ai-4e9c5d2/packages/ai-openrouter/src/pkce.ts:8
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-sandbox-cloudflare/src/handle.ts:160
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-sandbox-cloudflare/src/handle.ts:165
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-sandbox-cloudflare/tests/handle.test.ts:112
medium
Hex string literal (>50 chars) in TanStack-ai-4e9c5d2/packages/ai/tests/interrupt-sha256.test.ts:9
medium
Hex string literal (>50 chars) in TanStack-ai-4e9c5d2/packages/ai/tests/interrupt-sha256.test.ts:10
medium
Hex string literal (>50 chars) in TanStack-ai-4e9c5d2/packages/ai/tests/interrupt-sha256.test.ts:13
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-utils/src/base64.ts:85
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-sandbox-docker/src/handle.ts:388
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-sandbox-docker/src/handle.ts:393
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-sandbox-docker/tests/fs-write.test.ts:12
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-sandbox-docker/src/sbx/handle.ts:243
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-sandbox-docker/src/sbx/handle.ts:248
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-sandbox-vercel/src/handle.ts:180
medium
Buffer.from base64 in TanStack-ai-4e9c5d2/packages/ai-sandbox-vercel/src/handle.ts:185
medium
Hex string literal (>50 chars) in TanStack-ai-4e9c5d2/packages/ai-fal/src/image/generated/image-field-overrides.ts:21
info
package.json metadata
info
Tool: show_widget
info
Tool: search
info
Tool: recall_more
info
Tool: get_guitar_price
info
Tool: appraise_guitar_collection
info
Tool: lookup_weather
info
Tool: sum_tool
info
Tool: get_weather
info
Tool: always_fails
info
Tool: research_task
info
Tool: lookup_user
info
Tool: shared_context
info
Tool: createBlock
info
Tool: test_tool
info
Tool: error_tool
info
Tool: invalid_output_tool
info
Tool: no_execute
info
Tool: calculate
info
Tool: delete_local_data
info
Tool: get_local_data
info
Tool: delete_record
info
Tool: get_count
info
Tool: is_enabled
info
Tool: show_notification
info
Tool: simple_tool
info
Tool: cat_tool
info
Tool: hindsight_retain
info
Tool: hindsight_recall
info
Tool: hindsight_reflect
info
Tool: optional_enum
info
Tool: ask_user
info
Tool: mcp
info
Tool: get_user
info
Tool: API-get-user
info
Tool: store_labels
info
Tool: non_strict
info
Tool: union
info
Tool: nullable_union
info
Tool: ask
info
Tool: store_variant
info
Tool: getGuitars
info
Tool: complex
info
Tool: show_products
info
Tool: buy_product
info
Tool: show_weather_card
info
Transport: streamable-http
info
Required env vars (60)
high
High-risk OAuth scope: https://www.googleapis.com/auth/cloud-platform
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 259 components
critical
RSA Private Key found in TanStack-ai-4e9c5d2/docs/adapters/vertex.md
medium
No build provenance detected (SLSA L0)