npm JavaScript analyzed 0.21.0 deep scan unknown unconfirmed MCP

callstack/agent-device

v0.21.0
npm

Mobile app automation and verification for AI coding agents. CLI, MCP server, and typed Node.js API for iOS, Android, HarmonyOS, TV, web, macOS, and Linux.

maintainer
callstack
licence
MIT
first seen
2026-06-03
last seen
2026-09-10
releases · 30d
7
short id

callstack/agent-device is an MCP server distributed on npm, maintained by callstack, tracked here since June 2026. It has shipped 277 releases (currently 0.21.0). Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 0 tools appear to reach filesystem, shell / exec, network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 0

No tools recorded for this server yet.

release cadence · 90d 54 releases
06-13 00:00 07-27 00:00 now
recent releases last 10
version date src
v0.21.0 2026-09-08 github
0.21.0 2026-09-08 npm
v0.20.10 2026-08-24 github
0.20.10 2026-08-18 npm
v0.20.9 2026-08-17 github
0.20.9 2026-08-17 npm
0.20.8 2026-08-11 npm
v0.20.7 2026-08-10 github
0.20.7 2026-08-10 npm
v0.20.6 2026-08-07 github

view all →