ToolTrust
C25/100
Smithery

zonlabs-mcp-assistant

mcpsmithery

@Smithery

# MCP Assistant MCP Assistant provides access to **100+ MCP servers** like GitHub, Notion, Zapier, Supabase, etc. * **Connect & Manage Integrations**: You can configure and connect these integrations/connectors directly from the [MCP Assistant Dashboard](https://mcp-assistant.in/mcp). * **Advanced Features**: It exposes **meta-tools for dynamic MCP discovery** and a **CodeMode tool** that executes programs inside a secure sandbox for programmatic tool calling, workflow execution, and result processing, avoiding expensive LLM tool-calling loops. ## Endpoint Use this URL with your Assistant such as (OpenCode, Cursor, Codex, ClaudeCode, Antigravity etc.): ```text https://api.mcp-assistant.in/mcp ``` --- ## Key Features * **Unified Gateway**: Access 100+ third-party integrations (GitHub, Notion, Zapier, Slack, Discord, Supabase) through a single endpoint. * **Dynamic Tool Discovery**: Run semantic searches across all connected tool schemas. * **CodeMode Sandbox**: Execute JavaScript/TypeScript scripts on the server side using the `@mcp-ts/codemode` secure sandbox. Run multi-step programmatic workflows or batch actions directly from a single LLM request to avoid expensive round-trips. * **Standard OAuth Authentication**: Fully compatible with client-side OAuth handlers—log in securely via your browser to authorize access to your integrations. --- ## Primary Tools Provided | Tool | Description | | :--- | :--- | | `search_mcp_tools` | Performs a semantic/phrase search across all your connected tools and returns normalized discovery results. | | `get_mcp_tool_schema` | Retrieves the exact input/output JSON schemas and execution helper details for any tool. | | `codemode_run` | Instantly executes a script inside the CodeMode sandbox to chain multiple tool calls, format outputs, or filter large responses. | | `list_mcp_servers` | Lists all connected MCP servers and the number of tools each provides. | --- ## Client Configuration ### VS Code Add the server connection to your VS Code settings: ```json { "servers": { "mcp-assistant": { "type": "http", "url": "https://api.mcp-assistant.in/mcp" } } } ``` ### Cursor / Antigravity / Claude Desktop Add to your client configuration file: ```json { "mcpServers": { "mcp-assistant": { "url": "https://api.mcp-assistant.in/mcp" } } } ```

By Smithery | 9 findings | Scanned 7/5/2026 | tooltrust-scanner/v0.3.19

1 Critical1 High1 Low6 Info

Risk Summary

Needs Approval

Dep Visibility plus Excessive Permissions raises enough risk that this tool should not be auto-trusted.

Potential impact: This finding indicates the tool should be reviewed before it is trusted.

Recommended action: Keep this tool behind manual approval and avoid unattended runs until the risky capabilities are narrowed or removed.

Suggested policy: keep this tool behind manual approval, do not allow unattended runs, and re-scan after narrowing risky permissions.

Security Findings (9)

  • CriticalAS-006

    💻Arbitrary Code Execution

    heuristic signal

    codemode_run:tool name or description implies arbitrary script/code execution (evaluate_script, execute javascript, etc.)

    Fix: This tool can execute arbitrary code or shell commands on the host system. Remove it unless strictly required. If kept: (1) restrict access to trusted users/agents only, (2) require human approval before each invocation (Claude Desktop: set approval_required: true; other clients: enable equivalent confirmation), (3) use the most restrictive sandbox or read-only mode available, and (4) never expose this tool to untrusted input sources.

  • HighAS-003

    🔀Scope Mismatch

    search_mcp_tools:tool name "search_mcp_tools" implies read-only operation but declares exec permission

    Fix: Ensure tool names, descriptions, and permission declarations are internally consistent. Use explicit naming conventions that fully reflect actual capabilities.

  • LowAS-011

    ℹ️Missing Rate-Limit / Timeout

    search_mcp_tools:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

    Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

  • InfoAS-014

    ℹ️Dependency Inventory Unavailable ×4

    Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

    list_mcp_serverssearch_mcp_toolsget_mcp_tool_schemacodemode_run

    Fix: Review and remediate the identified issue.

  • InfoAS-002

    ⚠️Excessive Permissions ×2

    declared capabilities: code/command execution, network access

    search_mcp_tools

    declared capabilities: code/command execution

    codemode_run

    Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

Scan this tool yourself

Reproduce this audit locally, integrate into CI, or let your agent audit its own tools.

Install once, then scan any MCP server:

$ curl -sfL https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-scanner/main/install.sh | bash
$ tooltrust-scanner scan --server "npx -y zonlabs-mcp-assistant"

Adjust the package name if your npm registry name differs from the tool ID. View source

Add badge to your README

Copy this Markdown to show your ToolTrust grade on GitHub.

[![ToolTrust Grade C](https://raw.githubusercontent.com/AgentSafe-AI/tooltrust-directory/main/docs/badges/grade-c.svg)](https://github.com/AgentSafe-AI/tooltrust-directory)