Local-first desktop console for running a portfolio of websites: authenticated backend tabs per site, plan-then-confirm provider actions, SEO tooling, a design-token studio, and a localhost + MCP API so an AI agent can operate it safely.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio counts 33 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
analyze_website
-
apply_style_preset
-
automation_log
-
browser_click
-
browser_console
-
browser_evaluate
-
browser_find
-
browser_navigate
-
browser_network
-
browser_press
-
browser_screenshot
-
browser_snapshot
-
browser_type
-
check_console_health
-
crawl_site
-
create_website
-
execute_website_action
-
extract_brand
-
focus_window
-
get_console_openapi
-
get_deployment_map
-
list_dns_records
-
list_style_presets
-
list_vercel_env
-
list_websites
-
map_site
-
open_backend
-
open_page
-
plan_website_action
-
refresh_site_intel
-
scrape_page
-
set_provider_key
-
set_site_style
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit a038543 · analyzer v33 · 2w ago
danger signals1
- over-broad OAuth scope https://mail.google.com/ BarnsL-WebOps-Console-a038543/src/App.tsx :57
gmail: "https://mail.google.com/",
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 27
network 1
- net BarnsL-WebOps-Console-a038543/mcp/src/index.ts :17
const response = await fetch(`${baseUrl}${path}`, {
secrets 1
- secrets BarnsL-WebOps-Console-a038543/mcp/src/index.ts :7
const token = process.env.WEBOPS_TOKEN;
tool registrations 33
- check_console_health BarnsL-WebOps-Console-a038543/mcp/src/index.ts :33
- list_websites BarnsL-WebOps-Console-a038543/mcp/src/index.ts :39
- create_website BarnsL-WebOps-Console-a038543/mcp/src/index.ts :45
- analyze_website BarnsL-WebOps-Console-a038543/mcp/src/index.ts :60
- refresh_site_intel BarnsL-WebOps-Console-a038543/mcp/src/index.ts :69
- list_style_presets BarnsL-WebOps-Console-a038543/mcp/src/index.ts :75
- apply_style_preset BarnsL-WebOps-Console-a038543/mcp/src/index.ts :81
- set_site_style BarnsL-WebOps-Console-a038543/mcp/src/index.ts :87
- list_dns_records BarnsL-WebOps-Console-a038543/mcp/src/index.ts :100
- list_vercel_env BarnsL-WebOps-Console-a038543/mcp/src/index.ts :106
- set_provider_key BarnsL-WebOps-Console-a038543/mcp/src/index.ts :118
- get_deployment_map BarnsL-WebOps-Console-a038543/mcp/src/index.ts :128
- plan_website_action BarnsL-WebOps-Console-a038543/mcp/src/index.ts :134
- execute_website_action BarnsL-WebOps-Console-a038543/mcp/src/index.ts :145
- scrape_page BarnsL-WebOps-Console-a038543/mcp/src/index.ts :154
- crawl_site BarnsL-WebOps-Console-a038543/mcp/src/index.ts :164
- map_site BarnsL-WebOps-Console-a038543/mcp/src/index.ts :178
- extract_brand BarnsL-WebOps-Console-a038543/mcp/src/index.ts :187
- open_page BarnsL-WebOps-Console-a038543/mcp/src/index.ts :200
- open_backend BarnsL-WebOps-Console-a038543/mcp/src/index.ts :211
- focus_window BarnsL-WebOps-Console-a038543/mcp/src/index.ts :221
- browser_evaluate BarnsL-WebOps-Console-a038543/mcp/src/index.ts :227
- browser_click BarnsL-WebOps-Console-a038543/mcp/src/index.ts :233
- browser_type BarnsL-WebOps-Console-a038543/mcp/src/index.ts :239
- browser_press BarnsL-WebOps-Console-a038543/mcp/src/index.ts :245
- browser_navigate BarnsL-WebOps-Console-a038543/mcp/src/index.ts :251
- browser_snapshot BarnsL-WebOps-Console-a038543/mcp/src/index.ts :257
- browser_find BarnsL-WebOps-Console-a038543/mcp/src/index.ts :263
- browser_screenshot BarnsL-WebOps-Console-a038543/mcp/src/index.ts :269
- browser_console BarnsL-WebOps-Console-a038543/mcp/src/index.ts :275
- browser_network BarnsL-WebOps-Console-a038543/mcp/src/index.ts :281
- automation_log BarnsL-WebOps-Console-a038543/mcp/src/index.ts :287
- get_console_openapi BarnsL-WebOps-Console-a038543/mcp/src/index.ts :293
declared dependencies 34
- @modelcontextprotocol/sdk@^1.17.0
- @tauri-apps/api@^2.8.0
- @tauri-apps/plugin-opener@^2.5.4
- lucide-react@^0.468.0
- react@^18.3.1
- react-dom@^18.3.1
- zod@^3.24.1
- @tauri-apps/cli@^2.8.0
- @types/node@^22.10.1
- @types/react@^18.3.12
- @types/react-dom@^18.3.1
- @vitejs/plugin-react@^4.3.4
- tsx@^4.19.2
- typescript@^5.7.2
- vite@^6.0.1
- vitest@^2.1.8
- tauri-build@2.0
- axum@0.8
- chrono@0.4
- reqwest@0.12
- serde@1
- serde_json@1
- tauri@2.8
- tauri-plugin-opener@2
- tauri-plugin-updater@2
- tauri-plugin-shell@2
- tokio-tungstenite@0.24
- futures-util@0.3
- hickory-resolver@0.24
- scraper@0.20
- url@2
- thiserror@2
- tokio@1
- uuid@1