npm JavaScript analyzed 1.1.1

@anchord/mcp-server

v1.1.1
npm

MCP server for Anchord — identity resolution and pre-write safety checks for AI agents. Read-only. Backed by the hosted Anchord API.

maintainer
anchord_npm
licence
MIT
first seen
2026-08-13
last seen
2026-08-13
releases · 30d
0
short id

@anchord/mcp-server is an MCP server distributed on npm, maintained by anchord_npm, tracked here since August 2026. It has shipped 3 releases (currently 1.1.1) and exposes 11 tools. Tools include get_entity, get_entity_export, guard_write, guard_write_batch, ingest_record, link_source_record, and 5 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 11 tools appear to reach network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-08-15: 11 tools added and 11 tools removed.

full security breakdown →
tools 11
  • get_entity
  • get_entity_export
  • guard_write
  • guard_write_batch
  • ingest_record
  • link_source_record
  • resolve_company
  • resolve_company_batch
  • resolve_person
  • resolve_person_batch
  • unlink_source_record
release cadence · 90d 0 releases

No releases yet.

recent releases last 3
version date src
1.1.1 2026-04-06 npm
1.1.0 2026-04-05 npm
1.0.0 2026-04-03 npm

view all →