github TypeScript re-analysis due

ni-c/woodpecker-ci-mcp

Name: ni-c/woodpecker-ci-mcp
Author: ni-c

MCP server for Woodpecker CI: read repositories, pipelines and logs, and drive builds, secrets and crons

maintainer: ni-c
licence: MIT
first seen: 2026-08-29
last seen: 2026-09-12
releases · 30d: 3
short id

ni-c/woodpecker-ci-mcp is an MCP server distributed on github, maintained by ni-c, tracked here since August 2026. It has shipped 3 releases and exposes 71 tools. Tools include activate_repository, approve_pipeline, cancel_pipeline, chown_repository, create_agent, create_cron, and 65 more. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 71 tools appear to reach network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →

tools 20 of 71