MCP.Market

Stashbox MCP server

by smeet666·io.github.smeet666/mcp-stashbox·v2.1.0
No reviews yet

Search scenes, performers, studios and tags across the public stash-box catalogues.

A92/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

0 stars71 downloads/wk

Reviews

Write one

Nobody has reviewed Stashbox yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Stashbox tools (2)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • find_by_fingerprint

    Identify a file from the hashes held for it, across every configured stash-box catalogue. MD5 and OSHASH name the bytes of a file; PHASH states a likeness a re-encode, a crop or another scene from one shoot can satisfy. Each record reached is answered as one card, read on every catalogue that holds it.

  • get_sources

    What each configured stash-box catalogue was measured answering, and the day its surface was read from it. Whether a key is held for a catalogue is a fact about this install and changes nothing about what the catalogue does. Reaches no catalogue and takes no argument.

Public scan report

scanner v0.1.10 · 2026-10-30 · same rubric, same numbers if you re-run it

no findings
  • Code scan6 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Stashbox compares

Against every graded Web search MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 3,470 Web search servers
Tools
2
the typical Web search server has 5
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
71
more than 49% of 827 Web search servers with a package

What its tools let an agent do: 2 read

Release history: 2 versions in the registry since 2026-08-29, latest 2026-10-29, typically one every 61 days.

Install Stashbox in Claude Code, Cursor or VS Code

Runs npx -y mcp-stashbox on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-stashbox -- npx -y mcp-stashbox
Add to Cursor

What the publisher says

From the Stashbox repository's README, as published. We do not edit it. Read it on GitHub

mcp-stashbox

A stash-box is a shared metadata catalogue: it records scenes, the performers credited on them, the studios that released them, and the tags they are filed under, each curated by submission and review. A catalogue holds no media — a record names where something was published and carries nothing of it — and it identifies a file by the fingerprints computed from it. Five such catalogues run independently, each issuing its own key to a registered account.

This server connects a chat client to all of them at once. You can search the scenes, performers, studios and tags of every catalogue you hold a key for, read one record as a single card assembled from every catalogue that holds it, identify a file from its fingerprints, and ask what each catalogue was measured answering. It needs a key per catalogue, and reads only the catalogues it has one for.

Version française

Install

One-click install

Claude Code

claude mcp add stashbox --env STASHBOX_STASHDB_KEY=your-key -- npx -y mcp-stashbox

Claude Desktop, Cursor, and any client using the standard config format

{
  "mcpServers": {
    "stashbox": {
      "command": "npx",
      "args": ["-y", "mcp-stashbox"],
      "env": {
        "STASHBOX_STASHDB_KEY": "your-key"
      }
    }
  }
}

Node 24 or later is required. Set a key for each catalogue you want read; the others are named as absent from every answer.

With Docker

{
  "mcpServers": {
    "stashbox": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "STASHBOX_STASHDB_KEY",
        "ghcr.io/smeet666/mcp-stashbox:2.0.1"
      ]
    }
  }
}

-i keeps stdin open, which is where the protocol travels, and -t is left out because a TTY rewrites the stream. The container needs outbound HTTPS to the catalogues you hold keys for, and the keys from your environment: no volume, no port.

Bundle, without npm

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Stashbox: common questions

Is Stashbox MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Stashbox safety report
How do I install Stashbox?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Stashbox need an API key?
No secret keys are declared. It reads 12 settings from the environment.
Is Stashbox maintained?
The last commit was 5 days ago (2026-10-30). The latest release is v2.1.0.
What can I use instead of Stashbox?
Servers from other publishers that do the same job: Jshookmcp MCP server, GitHits MCP server and Sui Knowledge Base (kapa.ai) MCP server.
How does Stashbox compare with other Web search MCP servers?
safety score 92/100 (higher than 90% of 3,470 Web search servers); tools 2 (the typical Web search server has 5); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Stashbox

Same job from other publishers: the closest match first, then the best rated.

  • Jshookmcp
    Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
    C
  • GitHits
    Search public open-source code, documentation, metadata, vulnerabilities, changelogs, and examples.
    A
  • Sui Knowledge Base (kapa.ai)
    Semantic search across Sui documentation and knowledge sources, powered by kapa.ai
    A
  • Free Search
    No-API-key web search, page fetching and document reading across many engines. Local-first.
    B
  • Ref Tools
    Token-efficient search for coding agents over public and private documentation.
    A

More from smeet666 →