{"name":"com.balmasai/balmas-mcp","slug":"balmasai-balmas-mcp","title":null,"description":"Agents read cleaned copies of your files: PII replaced with local consistent tokens. Read-only.","url":"https://mcp.market/server/balmasai-balmas-mcp","rating":null,"grade":"B","score":71,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":24,"stars":0,"forks":0,"downloads_week":59,"last_push_at":"2026-09-03T17:00:09.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/YaakovTzedek/balmas-mcp","website":null,"version":"0.3.0","remotes":[],"packages":[{"registryType":"npm","identifier":"balmas-mcp","version":"0.3.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"BALMAS API key (bk_...) - free at balmasai.com/app/team","isRequired":true,"isSecret":true,"name":"BALMAS_API_KEY"}]}],"tools":[{"name":"list_files","description":"List the files the agent may request, inside the folders the user allowed. Returns names, sizes and types only \\u2014 never file contents.","write_action":false,"price_micros":0,"input_schema":null},{"name":"read_clean_file","description":"Read a file's text content AFTER local anonymization: names, ID numbers, phones, emails, companies and other sensitive values are replaced with consistent tokens (PERSON_001, ID_001\\u2026) before anything is returned. The same original value always maps to the same token for the whole session, so cross-file references stay coherent. The raw content never reaches the agent.","write_action":false,"price_micros":0,"input_schema":null},{"name":"restore_text","description":"Replace the session's anonymization tokens (PERSON_001, ID_001\\u2026) in the given text with the original real values, so the final deliverable shown to the user contains the actual names and numbers. Works only for tokens created earlier in this session by read_clean_file. Runs locally.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":71,"grade":"B","scanned_at":"2026-09-20T16:19:04.360Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-20T16:19:04.341Z","components":{"code":{"score":20,"max":25,"notes":["2 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 17 days ago"]},"identity":{"score":5,"max":10,"notes":["namespace and repository owner differ","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/index.js: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"balmas-mcp","version":"0.3.0","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-09-03T05:55:31.834Z","repositoryUrl":"git+https://github.com/YaakovTzedek/balmas-mcp.git","weeklyDownloads":59}],"repo":{"found":true,"owner":"YaakovTzedek","repo":"balmas-mcp","archived":false,"pushedAt":"2026-09-03T17:00:09Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/178766535?v=4","ownerCreatedAt":"2024-08-19T06:19:53Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":0,"forks":0,"downloadsWeek":59,"license":"MIT","lastPushAt":"2026-09-03T17:00:09.000Z","score":24}}}},"grade_history":[],"reviews":[]}