{"name":"io.github.mentu-ai/metamcp","slug":"mentu-ai-metamcp","title":"MetaMCP","description":"Route long-tail MCP servers through three lazy tools and reviewed declarative Methods.","url":"https://mcp.market/server/mentu-ai-metamcp","rating":null,"grade":"B","score":71,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":35,"stars":18,"forks":8,"downloads_week":74,"last_push_at":"2026-09-30T16:45:17.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/mentu-ai/metamcp","website":"https://github.com/mentu-ai/metamcp#readme","version":"1.0.0","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@mentu/metamcp","version":"1.0.0","transport":{"type":"stdio"}}],"tools":[{"name":"mcp_call","description":"Call one explicitly named child tool. The target starts lazily. Calls are never replayed implicitly after a timeout or transport failure.","write_action":false,"price_micros":0,"input_schema":null},{"name":"mcp_discover","description":"Search configured servers, cached child tool schemas, and declarative Methods without starting every child. Set refresh=true with a specific server to refresh only that server.","write_action":false,"price_micros":0,"input_schema":null},{"name":"mcp_run","description":"Run a reviewed declarative Method: a bounded, schema-validated sequence of lazy child calls with typed gaps and trace evidence.","write_action":true,"price_micros":0,"input_schema":null}],"scan":{"score":71,"grade":"B","scanned_at":"2026-11-01T13:28:13.368Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-11-01T13:28:13.337Z","components":{"code":{"score":13,"max":25,"notes":["69 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":12,"max":15,"notes":["last push 32 days ago"]},"identity":{"score":9,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/oauth-provider.js: …l.toString(); try { execSync(`open \"${url}\"`, { stdio: 'ignore' }); } …"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@mentu/metamcp","version":"1.0.0","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-08-23T01:06:25.122Z","repositoryUrl":"git+https://github.com/mentu-ai/metamcp.git","weeklyDownloads":74}],"repo":{"found":true,"owner":"mentu-ai","repo":"metamcp","archived":false,"pushedAt":"2026-09-30T16:45:17Z","stars":18,"forks":8,"openIssues":1,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/226790797?v=4","ownerCreatedAt":"2025-06-13T05:02:07Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/216117360?v=4&s=128","source":"registry","width":128,"height":128},"presence":{"stars":18,"forks":8,"downloadsWeek":74,"license":"Apache-2.0","lastPushAt":"2026-09-30T16:45:17.000Z","score":35}}}},"grade_history":[],"reviews":[]}