MCP.Market

Supstack MCP server

by DrBaher·io.github.DrBaher/supstack·v0.18.2

Evidence-based supplement research, dosing, safety, and interactions as agent-callable tools.

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
New

0 stars44 downloads/wk

Reviews

Write one

Nobody has reviewed Supstack yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Supstack tools (13, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • compare

    Compare 2\u20133 supplements side by side

  • define

    Look up a supplement-science glossary term

  • export

    Export your local stack as Markdown or JSON

  • goals

    List health goal ids (use them with `rate` and `recommend`)

  • interactions

    Check interactions across supplements, or vs a medication (--medication)

  • rate

    Rate your stack (A\u2013F) by how well it covers your goals

  • research

    Full evidence summary for one supplement (detail + safety; optional protocol & synergies)

  • search

    Search supplements by name, or filter by goal/category/type/evidence/safety

  • stack

    Manage your stack \u2014 local (add | remove | list) or cloud (pull | push | sync)

  • studies

    Search the research library of peer-reviewed studies

  • supstack_experiment_abandon

    Stop one of the signed-in user's in-progress experiments (sets it to 'abandoned' \u2014 no verdict). A completed or already-abandoned experiment is rejected.

  • supstack_experiment_check_inwrite action

    Submit a check-in for one of the signed-in user's experiments. `answers` maps the experiment's check-in question ids to the user's answers (get the questions from supstack_experiments_get \u2192 protocol.checkIn.questions, or supstack_experiment_protocol). On the FINAL check-in the verdict is computed and returned. The check-in number is derived server-side.

  • supstack_experiment_start

    Start an N-of-1 experiment for the signed-in user. `answers` maps baseline question ids (from supstack_experiment_protocol) to the user's answers. If required baseline answers are missing, returns a 400 listing them \u2014 gather those and retry. Returns the created experiment with its first check-in date.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan19 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 82 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Supstack compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
88/100
higher than 80% of 4,460 AI and agents servers
Tools
13
the typical AI and agents server has 6
Tools that change things
8%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
44
more than 36% of 1,538 AI and agents servers with a package

What its tools let an agent do: 12 read · 1 change

Install Supstack in Claude Code, Cursor or VS Code

Runs npx -y @supstack/cli on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add supstack -- npx -y @supstack/cli
Add to Cursor

What the publisher says

From the Supstack repository's README, as published. We do not edit it. Read it on GitHub

@supstack/cli

Evidence-based supplement intelligence in your terminal — and an MCP server for AI agents.

A thin client over the public SupStack API. Read-only, no account required. One capability registry powers both the CLI and the MCP server.

Status: Phase 2 (accounts) in progress. All read commands below work, plus

an MCP server and login/whoami. Install with npm install -g @supstack/cli.

Install

# Homebrew (macOS / Linux)
brew install drbaher/supstack/supstack

# or npm
npm install -g @supstack/cli

# or run without installing
npx -y @supstack/cli define adaptogen

Then enable shell completion: supstack completion install.

From source (in this directory): npm install && npm run build && node dist/index.js define adaptogen.

Usage

supstack research magnesium --protocol       # full evidence summary for one supplement
supstack search --goal deep-sleep -n 5       # search by name or filter
supstack compare magnesium glycine           # 2–3 head-to-head
supstack studies "sleep" --type rct          # research library
supstack interactions caffeine l-theanine --pathway   # interaction check (deep pair analysis)
supstack interactions magnesium potassium --medication lisinopril   # supplement × drug check
supstack stack add magnesium --dose 400mg --timing bedtime   # local stack (+ dose/timing/brand)
supstack stack sync                          # sync local ⇄ your account (login required)
supstack goals --category sleep              # list goal ids (for rate/recommend)
supstack rate --goals deep-sleep,sharpen-focus   # grade your stack A–F by goal coverage
supstack experiments start magnesium deep-sleep  # run an N-of-1 experiment (requires login)
supstack export --format md                  # export your stack
supstack define bioavailability              # glossary lookup
supstack <command> --json                    # machine-readable output on any command
supstack --help

Account (Phase 2)

supstack login          # sign in via device-code flow (opens the browser to confirm)
supstack whoami         # show the signed-in account
supstack logout         # sign out and revoke this device's token

login shows a one-time code, opens https://supstack.me/activate, and finishes once you approve in the browser. The token lives in ~/.supstack/config.json (0600). Reads work fully anonymously — an account unlocks personalized features.

Once logged in, sync your stack with your account:

supstack stack pull     # local ← your account
supstack stack push     # local → your account (keeps dosage/timing/brand for kept items)
supstack stack sync     # additive merge of both; preserves existing cloud metadata

supstack profile                              # view your health profile
supstack profile set --age 35 --sex male --weight 80 --weight-unit kg
supstack recommend                            # personalized picks from your goals + stack
supstack experiments list                     # your N-of-1 experiments + verdicts
supstack track log                            # log today's stack as taken
supstack track adherence                      # your adherence rate, streak, per-supplement

As an MCP server

supstack mcp   # stdio MCP server exposing all capabilities as tools

This gives an agent the full SupStack toolset. Read-only (no account needed): supstackresearch, supstacksearch, supstackcompare, supstackstudies, supstackinteractions, supstackstack, supstackratestack, supstackexport, supstackdefine.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Supstack: common questions

Is Supstack MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the Supstack safety report
How do I install Supstack?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Supstack need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Supstack maintained?
The last commit was 121 days ago (2026-07-06). The latest release is v0.18.2.
What can I use instead of Supstack?
Servers from other publishers that do the same job: HOL Guard MCP server, Watch Skill MCP server and OpenWorkProof MCP server.
How does Supstack compare with other AI and agents MCP servers?
safety score 88/100 (higher than 80% of 4,460 AI and agents servers); tools 13 (the typical AI and agents server has 6); tools that change things 8% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Supstack

Same job from other publishers: the closest match first, then the best rated.

  • HOL Guard
    Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
    A
  • Watch Skill
    Watch video and live sessions, keep timestamped evidence, and verify an agent's own work.
    B
  • OpenWorkProof
    Verifiable agent evidence; opt-in Codex guard and reference SOC alert review.
    A
  • Gemini
    Model Context Protocol server for Google Gemini AI with chat, research, and grounding
    A
  • Vibe Check
    Metacognitive AI agent oversight: adaptive CPI interrupts for alignment, reflection and safety
    B

More from DrBaher →