Balmas MCP server

by balmasai.com·com.balmasai/balmas-mcp·v0.3.0

Agents read cleaned copies of your files: PII replaced with local consistent tokens. Read-only.

B71/100grade B

What users say

No reviews yet

Safety scan

B71/100

Adoption

Growing

0 stars59 downloads/wk

Reviews

Nobody has reviewed Balmas yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

list_files
List the files the agent may request, inside the folders the user allowed. Returns names, sizes and types only \u2014 never file contents.
read_clean_file
Read a file's text content AFTER local anonymization: names, ID numbers, phones, emails, companies and other sensitive values are replaced with consistent tokens (PERSON_001, ID_001\u2026) before anything is returned. The same original value always maps to the same token for the whole session, so cross-file references stay coherent. The raw content never reaches the agent.
restore_text
Replace the session's anonymization tokens (PERSON_001, ID_001\u2026) in the given text with the original real values, so the final deliverable shown to the user contains the actual names and numbers. Works only for tokens created earlier in this session by read_clean_file. Runs locally.

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

1 medium

Code scan2 source files scanned20/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenancelast push 17 days ago15/15
Maintainer identitynamespace and repository owner differ; GitHub account older than a year5/10

mediumeval / new Function usedexec.eval

dist/index.js: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…

Overall 71/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y balmas-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add balmas-mcp -- npx -y balmas-mcp

Is Balmas MCP server safe?: Mostly: it is graded B (71/100). Read the Balmas safety report
How do I install Balmas?: It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Balmas need an API key?: Yes. The registry entry asks for BALMAS_API_KEY.
Is Balmas maintained?: The last commit was 17 days ago (2026-09-03). The latest release is v0.3.0.
What can I use instead of Balmas?: Servers from other publishers that do the same job: Token Optimizer MCP server.

Same job from other publishers: the closest match first, then the best rated.

Token Optimizer
Context-window optimization: caching, compression & smart file tools that cut tokens 60-90%.
not reviewed
Established
C