Stubs MCP server

by talix.app·app.talix/stubs·v0.6.0

Pull one-time .env links from stubs.talix.app into a project. Returns key names, never values.

B82/100grade B

What users say

No reviews yet

Safety scan

B82/100

Adoption

Growing

0 stars1.1k downloads/wk

Reviews

Nobody has reviewed Stubs yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

check_stub
Check whether a one-time Stubs link is still sealed, without opening it.
pull_stub
Open a one-time Stubs link and write its values into the project's env file. Returns key names only. Never read or print the env file afterwards; run commands that need the values with `npx -y --loglevel=warn -- @talix/stubs@… run -- <cmd>` (with `--env <name>` before the `--` if you pulled with `env`), which masks them in the output.

scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it

1 medium

Code scan2 source files scanned20/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 2 days ago15/15
Maintainer identitynamespace and repository owner differ; website matches verified namespace6/10

mediumeval / new Function usedexec.eval

dist/stubs.js: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…

Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 82/100; higher than 63% of 48,255 servers
Tools: 2; the typical server has 7
Tools that change things: 0%; typical: 0%. Fewer write tools means less an agent can break
Downloads a week: 1,147; more than 95% of 12,191 servers with a package

What its tools let an agent do: 2 read

Runs npx -y @talix/stubs on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add stubs -- npx -y @talix/stubs

Is Stubs MCP server safe?: Mostly: it is graded B (82/100). Read the Stubs safety report
How do I install Stubs?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Stubs need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Stubs maintained?: The last commit was 25 days ago (2026-10-10). The latest release is v0.6.0.
How does Stubs compare with other MCP servers?: safety score 82/100 (higher than 63% of 48,255 servers); tools 2 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.