← Back to search

@yocoolab/mcp-server

GitHub Actions Scanned 14d ago

MCP server that exposes Yocoolab feedback threads, design selections, and activity events as tools for Claude Code and other MCP-compatible clients.

C
63.9 / 100

Versions

2.4.1latest
Jul 13, 2026
2.4.0
Jul 13, 2026
2.3.0
Jul 13, 2026
2.2.1
May 28, 2026
2.2.0
May 6, 2026
+ show 5 moreshow less
2.1.1
May 5, 2026
2.1.0
Apr 30, 2026
2.0.0
Apr 30, 2026
1.0.1
Apr 30, 2026
1.0.0
Apr 29, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 22

list_open_threads
annotations: none low

List open feedback threads. Omit repo to get ALL threads across every repo you have access to — each result is labeled with its repo, change type (frontend/api/backend), board stage, and UI element context. Use claude_code_pending=true to only show threads that users have sent to Claude Code.

repo string branch string claude_code_pending boolean
get_thread_context
annotations: none low

Get full details of a feedback thread including all messages, UI element context (selector, coordinates, element tag), view state, and the annotated screenshot. The screenshot is returned as an image so you can visually see the feedback location.

thread_id string
create_pr_for_thread
annotations: none low

Create a GitHub pull request (or add a commit to the existing working branch) with code changes that address a feedback thread. All fixes for a repo accumulate on a single working branch with one PR.

body string path string title string content string thread_id string branch_name string
mark_thread_addressed
annotations: none low

Mark a feedback thread as addressed and ready for review. This moves the thread to the

message string thread_id string
get_deployment_preview
annotations: none low

Check if a preview deployment is available for a specific repo and branch. Returns the preview URL if deployed. Useful after creating a PR to get the live preview link.

repo string branch string
add_thread_message
annotations: none low

Add a message to a feedback thread without changing its status. Use this to post updates like preview URLs, implementation notes, or questions back to the thread.

message string thread_id string
get_companion_messages
annotations: none low

Check for new messages from the AI Companion panel in the Chrome extension. Returns pending messages and clears the queue. Each message includes the user text, page context, and optional screenshot/element attachments.

reply_to_companion
annotations: none low

Send a reply back to the AI Companion panel in the Chrome extension. The reply will appear as an assistant message in the companion chat UI. Supports Markdown formatting.

message string
ai_analyze_page
annotations: none low

Ask the Yocoolab AI assistant to analyze a web page. Supports text questions with optional screenshot (vision) and page context. Useful for getting AI insights about a page layout, accessibility, or code structure.

url string question string body_text string page_title string element_tag string element_text string element_selector string screenshot_base64 string
get_ai_conversations
annotations: none low

List recent AI assistant conversations. Returns conversation IDs, page URLs, and message counts.

pendo_get_feature_usage
annotations: none low

Query Pendo for feature usage analytics (click events, unique visitors) over a time range. Useful for understanding how heavily a feature is used when reviewing feedback threads.

days number feature_name string
pendo_get_page_analytics
annotations: none low

Query Pendo for page-level analytics (page views, unique visitors, avg time on page). Use the page_url from thread context to check how popular a page is.

days number page_url_pattern string
pendo_track_event
annotations: none low

Send a custom track event to Pendo. Use this to track actions like feedback resolved, PR created from feedback, or guide suggestions.

account_id string event_name string properties string visitor_id string
pendo_list_guides
annotations: none low

List active in-app guides from Pendo. Optionally filter by page URL to see what guides are deployed on a specific page.

page_url_filter string
get_activity_summary
annotations: none low

Get a high-level summary of Claude Code activity: total events, active sessions, tool usage breakdown, files touched, and error count.

get_recent_events
annotations: none low

Get the most recent Claude Code activity events (tool calls, prompts, errors). Shows timestamps, tool names, and key details.

limit number
get_files_touched
annotations: none low

List all files that have been read, written, or edited across Claude Code sessions. Shows file paths with session counts.

get_dashboard_url
annotations: none low

Get the URL for the real-time activity monitoring dashboard. Open in a browser to see live Claude Code activity, tool usage charts, and session timelines.

get_selection_history
annotations: none low

Returns the last N element selections from the Chrome extension, newest first. Useful for comparing multiple elements or reviewing recent selections.

find_source_for_selection
annotations: none low

Searches the workspace for source files that likely define or render the selected UI element. Returns ranked candidates with file paths, line ranges, confidence scores, and match reasons. Can work with live Chrome selections or stored thread element_context.

get_element_context
annotations: none low

Returns a comprehensive summary of a UI element, including its DOM context, computed styles, and ranked source code candidates. Works with live Chrome selections or stored thread element_context. This is the primary tool to use when the user wants to modify a UI element.

get_latest_selection
annotations: none low

Returns the most recent element selection from the Chrome extension. Includes element selector, tag, text content, classes, attributes, computed styles, and page context.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 64

low
Tool 'list_open_threads' has no annotations annotation_checker · 100%
low
Tool 'get_thread_context' has no annotations annotation_checker · 100%
low
Tool 'create_pr_for_thread' has no annotations annotation_checker · 100%
low
Tool 'mark_thread_addressed' has no annotations annotation_checker · 100%
low
Tool 'get_deployment_preview' has no annotations annotation_checker · 100%
low
Tool 'add_thread_message' has no annotations annotation_checker · 100%
low
Tool 'get_companion_messages' has no annotations annotation_checker · 100%
low
Tool 'reply_to_companion' has no annotations annotation_checker · 100%
low
Tool 'ai_analyze_page' has no annotations annotation_checker · 100%
low
Tool 'get_ai_conversations' has no annotations annotation_checker · 100%
low
Tool 'pendo_get_feature_usage' has no annotations annotation_checker · 100%
low
Tool 'pendo_get_page_analytics' has no annotations annotation_checker · 100%
low
Tool 'pendo_track_event' has no annotations annotation_checker · 100%
low
Tool 'pendo_list_guides' has no annotations annotation_checker · 100%
low
Tool 'get_activity_summary' has no annotations annotation_checker · 100%
low
Tool 'get_recent_events' has no annotations annotation_checker · 100%
low
Tool 'get_files_touched' has no annotations annotation_checker · 100%
low
Tool 'get_dashboard_url' has no annotations annotation_checker · 100%
low
Tool 'get_selection_history' has no annotations annotation_checker · 100%
low
Tool 'find_source_for_selection' has no annotations annotation_checker · 100%
low
Tool 'get_element_context' has no annotations annotation_checker · 100%
low
Tool 'get_latest_selection' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
low
Cross-tool reference in 'get_element_context': Integration: 'works with live' cross_tool_detector · 30%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: uuid@9.0.0 (GHSA-w5hq-g745-h8pq) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.0 (GHSA-58qx-3vcg-4xpx) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.0 (GHSA-96hv-2xvq-fx4p) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list_open_threads manifest_parser · 70%
info
Tool: get_thread_context manifest_parser · 70%
info
Tool: create_pr_for_thread manifest_parser · 70%
info
Tool: mark_thread_addressed manifest_parser · 70%
info
Tool: get_deployment_preview manifest_parser · 70%
info
Tool: add_thread_message manifest_parser · 70%
info
Tool: get_companion_messages manifest_parser · 70%
info
Tool: reply_to_companion manifest_parser · 70%
info
Tool: ai_analyze_page manifest_parser · 70%
info
Tool: get_ai_conversations manifest_parser · 70%
info
Tool: pendo_get_feature_usage manifest_parser · 70%
info
Tool: pendo_get_page_analytics manifest_parser · 70%
info
Tool: pendo_track_event manifest_parser · 70%
info
Tool: pendo_list_guides manifest_parser · 70%
info
Tool: get_activity_summary manifest_parser · 70%
info
Tool: get_recent_events manifest_parser · 70%
info
Tool: get_files_touched manifest_parser · 70%
info
Tool: get_dashboard_url manifest_parser · 70%
info
Tool: get_selection_history manifest_parser · 70%
info
Tool: find_source_for_selection manifest_parser · 70%
info
Tool: get_element_context manifest_parser · 70%
info
Tool: get_latest_selection manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (11) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 196 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%