ToolTrust
B15/100
matlab

matlab-mcp-core-server

mcp0.6.1

@matlab

Run MATLAB® using AI applications with the official MATLAB MCP Server from MathWorks®. This MCP server for MATLAB supports a wide range of coding agents like Claude Code® and Visual Studio® Code.

By matlab | 3 findings | Scanned 3/24/2026 | tooltrust-scanner/v0.2.1

1 High2 Medium

Security Findings (3)

  • HighRug-Pull (Post-Install Description Change)

    Tool set changed silently at v0.6.1: 5 tool(s) added, 9 tool(s) removed without a version bump.

    + 5 added

    analyze_memory_safetycheck_const_correctnesscheck_include_guardcheck_namingsuggest_modern_cpp

    − 9 removed

    execute_integration_actionget_integration_actionsget_integrationsinitialize_conversation_sessionmemory_about_usermemory_get_spacememory_get_spacesmemory_ingestmemory_search
    Rule: AS-012Fix: The set of tools exposed by this server changed between scans of the same version — a sign the package was silently updated without a version bump. Audit the changelog and all tool definitions before trusting this server. Pin to a specific commit hash rather than a floating version tag.
  • MediumExcessive Permission Surface ×2
    • check_naming:tool declares fs permission
    • check_include_guard:tool declares fs permission
    Rule: AS-002Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

Scan this tool yourself

Reproduce this audit locally or block risky tools in CI.

Install once, then scan any MCP server:

$ curl -sfL https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/install.sh | bash
$ tooltrust-scanner scan --server "npx -y matlab-mcp-core-server"

Adjust the package name if your npm registry name differs from the tool ID. View source

Add badge to your README

Copy this Markdown to show your ToolTrust grade on GitHub.

[![ToolTrust Grade B](https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-directory/main/docs/badges/grade-b.svg)](https://github.com/AgentSafe-AI/tooltrust-directory)