Is clawops MCP server safe?

Yes, with the usual care.

B74/100grade B

Safe to use. Minor gaps such as a missing repository or slower maintenance.

What to know before installing

Public scan report

scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high

Code scan90 source files scanned13/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 0 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

highShell command built from a string (injection risk)exec.shell-concat

dist/harden-72JMRT4E.js: …c) { const { stdout, code } = await exec(`test -f ${SENTINEL} && echo yes || echo no`); …

Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

AppCrane
Deploy and manage apps on your own AppCrane instance, the self-hosted PaaS for AI-built apps.
not reviewed
Growing
B
Mockzilla
Mock OpenAPI specs locally, or log in to deploy hosted mocks on mockzilla.org from your MCP client.
not reviewed
Growing
C
Flux Cloud
Deploy, pay for and manage apps on Flux Cloud, the decentralized cloud. Prices in USD.
not reviewed
Growing
A