← Back to search

@zeph-to/mcp-server

louis-jin Scanned 24d ago

Zeph MCP server — AI agent notifications, prompts, and input via MCP protocol

B
82.5 / 100

Versions

1.15.2latest
Jul 30, 2026
1.15.1
Jul 21, 2026
1.15.0
Jul 20, 2026
1.14.1
Jul 12, 2026
1.14.0
Jul 9, 2026
+ show 25 moreshow less
1.13.0
Jul 4, 2026
1.12.0
Jul 3, 2026
1.11.3
Jun 26, 2026
1.11.2
May 26, 2026
1.11.1
May 25, 2026
1.11.0
May 22, 2026
1.10.0
May 20, 2026
1.9.2
May 19, 2026
1.9.1
May 19, 2026
1.9.0
May 19, 2026
1.8.0
May 19, 2026
1.7.0
May 19, 2026
1.6.0
May 19, 2026
1.5.0
May 15, 2026
1.4.1
May 14, 2026
1.4.0
May 14, 2026
1.3.0
May 14, 2026
1.2.2
May 13, 2026
1.2.1
May 12, 2026
1.2.0
May 12, 2026
1.1.0
May 12, 2026
1.0.0
May 12, 2026
0.4.0
May 8, 2026
0.3.0
May 7, 2026
0.2.0
May 7, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 11

zeph_clipboard
annotations: verified low

Copy text to the user\'s device clipboard. The text will appear in their clipboard history and can be pasted immediately.

text string targetDeviceId string
readOnlyHint false openWorldHint true destructiveHint false
zeph_prompt
annotations: verified low

Ask the user to choose from predefined options via push notification. The tool blocks until the user responds or the timeout is reached. Requires ZEPH_HOOK_ID environment variable.

id string body string label string style enum title string
readOnlyHint false openWorldHint true destructiveHint false
zeph_session_rename
annotations: verified low

Set a custom display name for THIS agent session in the user's Zeph app (the Streams › Agents list).

readOnlyHint false openWorldHint true destructiveHint false
zeph_list
annotations: verified low

List recent push notifications. Use this to check notification history, avoid duplicates, or reference previous messages.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
zeph_dismiss
annotations: verified low

Dismiss (mark as read) a specific push notification by ID. Use after processing a notification to clear it from the user\'s feed.

pushId string
readOnlyHint false openWorldHint true idempotentHint true destructiveHint false
zeph_dismiss_all
annotations: verified low

Dismiss all push notifications at once. Clears the entire notification feed.

readOnlyHint false openWorldHint true idempotentHint true destructiveHint true
zeph_input
annotations: verified low

Request text input from the user via push notification. The tool blocks until the user responds or the timeout is reached. Requires ZEPH_HOOK_ID environment variable. The user may also attach screenshots or files: those arrive as local absolute paths in the `attachments` field of the result, and reading them is part of reading the answer.

body string title string placeholder string
readOnlyHint false openWorldHint true destructiveHint false
zeph_notify
annotations: verified low

Send a one-way push notification to the user\'s devices. Use this to inform the user about task completion, errors, or status updates. Long bodies are automatically uploaded as a file for full viewing.

url string body string title string targetDeviceId string
readOnlyHint false openWorldHint true destructiveHint false
zeph_broadcast
annotations: verified low

Send a push notification to all subscribers of a channel. Use zeph://channels resource to find available channels.

url string body string title string channelId string
readOnlyHint false openWorldHint true destructiveHint false
zeph_file
annotations: verified low

Send a file to the user\'s device. Pass `filePath` to send a file that already exists on disk — images (png/jpg/gif/webp/heic), PDFs, logs, anything. Pass `content` instead to send text you generated. Images render inline on the device.

title string content string targetDeviceId string
readOnlyHint false openWorldHint true destructiveHint false
zeph_ask
annotations: verified low

Ask the user a question with quick-reply buttons and a text input field. Combines prompt (buttons) and input (text) in a single notification. The user can either tap a button or type a response. `actions` is the steering surface, not decoration: pass 2–4 buttons on nearly every ask — the next-step candidates you would otherwise write as prose (next command, review, stop) plus a safe Done-like `fallback`. Leave `actions` out ONLY when the answer is inherently free-form text (a name, a path, a paragraph); a bare text box on a "done — what next?" ask leaves the phone with nothing to tap. Blocks until the user responds or the timeout is reached. Requires ZEPH_HOOK_ID environment variable. The user may also attach screenshots or files to the answer: those arrive as local absolute paths in the `attachments` field of the result, and reading them is part of reading the answer. NOTE: unlike zeph_notify and zeph_file, this tool is never end-to-end encrypted — the hook route it uses cannot carry the sender key — so do not put secrets in the question or expect a private answer.

id string body string label string style enum title string placeholder string
readOnlyHint false openWorldHint true destructiveHint false

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs
shell high
Server uses shell capabilities via: child_process
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 39

info
Tool 'zeph_clipboard' annotations are consistent annotation_checker · 80%
info
Tool 'zeph_prompt' annotations are consistent annotation_checker · 80%
info
Tool 'zeph_session_rename' annotations are consistent annotation_checker · 80%
info
Tool 'zeph_list' annotations are consistent annotation_checker · 80%
info
Tool 'zeph_dismiss' annotations are consistent annotation_checker · 80%
info
Tool 'zeph_dismiss_all' annotations are consistent annotation_checker · 80%
info
Tool 'zeph_input' annotations are consistent annotation_checker · 80%
info
Tool 'zeph_notify' annotations are consistent annotation_checker · 80%
info
Tool 'zeph_broadcast' annotations are consistent annotation_checker · 80%
info
Tool 'zeph_file' annotations are consistent annotation_checker · 80%
info
Tool 'zeph_ask' annotations are consistent annotation_checker · 80%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: vitest@2.1.9 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.9 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Buffer.from base64 in zeph-to-mcp-server-383b76a/src/crypto.ts:51 entropy_analyzer · 75%
medium
Buffer.from base64 in zeph-to-mcp-server-383b76a/src/lan-auth.ts:156 entropy_analyzer · 75%
medium
Buffer.from base64 in zeph-to-mcp-server-383b76a/src/crypto.test.ts:38 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: zeph_clipboard manifest_parser · 85%
info
Tool: zeph_prompt manifest_parser · 85%
info
Tool: zeph_session_rename manifest_parser · 85%
info
Tool: zeph_list manifest_parser · 85%
info
Tool: zeph_dismiss manifest_parser · 85%
info
Tool: zeph_dismiss_all manifest_parser · 85%
info
Tool: zeph_input manifest_parser · 85%
info
Tool: zeph_notify manifest_parser · 85%
info
Tool: zeph_broadcast manifest_parser · 85%
info
Tool: zeph_file manifest_parser · 85%
info
Tool: zeph_ask manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (13) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 183 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%