Connect
8 clients · secrets stay placeholdersQuality 77 / 100good
protocol75 · weight 25
- warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a
protocol.statelessonly applies to 2026-07-28 servers
- pass
protocol.transportstreamable HTTP
- n/a
protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
- n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
- n/a
auth.secret_in_urlno templated URL
tool hygiene71 · weight 30
- pass
tools.descriptionsevery tool has a description
- pass
tools.description_lengthdescriptions are concise
- pass
tools.schemasevery tool has an object input schema
- fail
tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: list_components (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_component (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_install_instructions (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
- pass
tools.token_costabout 384 tokens to load every tool
- pass
tools.api_dumptools are not a one-to-one API dump
dependencies67 · weight 15
- pass
deps.known_vulnsno known advisory in 126 resolved packages
- fail
deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or later
- pass
3 tools, about 384 tokens to load them all · tool set 52dda40dc53b · checked 2026-10-20 12:13 UTC
Tool changes
No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
Trust 90 / 100
+repository +namespace-matches-repo +website +reachable +uptime-100% ~updated-159d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
Dependencies
[email protected] npm125 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
Official server.json
{
"name": "io.github.petalframework/petal-components-mcp",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://mcp.petal.build/mcp",
"type": "streamable-http"
}
],
"version": "0.1.0",
"packages": [
{
"version": "0.1.0",
"transport": {
"type": "stdio"
},
"identifier": "petal-components-mcp",
"registryType": "npm"
}
],
"repository": {
"url": "https://github.com/petalframework/petal-components-mcp",
"source": "github"
},
"websiteUrl": "https://petal.build/components/mcp",
"description": "Phoenix LiveView component schemas from petal_components, exposed to AI coding assistants."
}