github Python analyzed 774d7bc

sandraschi/calibremcp

github

Calibre library automation via FastMCP — metadata, shelves, RAG-friendly export. Companion to Calibre, not a replacement. For Cursor / Claude Desktop.

maintainer
sandraschi
licence
MIT
first seen
2026-07-27
last seen
2026-09-06
releases · 30d
0
short id

sandraschi/calibremcp is an MCP server distributed on github, maintained by sandraschi, tracked here since July 2026. It has shipped 3 releases and exposes 55 tools. Tools include agentic_calibre_workflow, agentic_library_workflow, analyze_library, analyze_library_health, bookcase_catalog, calibre_metadata_export_json, and 49 more. Its composite risk grade is D — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 3 review prompts — dangerous code, exfiltration combo and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 55 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-06: 1 tool added and 25 tools removed.

full security breakdown →
tools 20 of 55
  • agentic_calibre_workflow
  • agentic_library_workflow
  • analyze_library
  • analyze_library_health
  • bookcase_catalog
  • calibre_metadata_export_json
  • calibre_metadata_index_build
  • calibre_metadata_search
  • calibre_rag
  • conversational_calibre_assistant
  • export_books
  • find_duplicate_books
  • get_series_analysis
  • get_tag_statistics
  • help_tool
  • intelligent_library_processing
  • library_discovery
  • manage_ai_operations
  • manage_analysis
  • manage_authors
All 55 tools →
release cadence · 90d 1 releases
06-14 00:00 07-28 00:00 now
recent releases last 3
version date src
v1.8.6 2026-07-10 github
v1.8.6-beta.1 2026-06-09 github
v1.0.0 2025-08-02 github

view all →