Human-friendly Qingflow command line interface for auth, record operations, import, tasks, and stable builder flows.
@qingflow-tech/qingflow-cli is an MCP server distributed on npm, maintained by josephyan, tracked here since July 2026. It has shipped 56 releases (currently 1.1.41) and exposes 147 tools. Tools include app_associated_resources_apply, app_charts_apply, app_create, app_custom_buttons_apply, app_delete, app_edit_finished, and 141 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.
Reading the source raised 2 review prompts — exfiltration combo and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.
full security breakdown →-
app_associated_resources_apply -
app_charts_apply -
app_create -
app_custom_buttons_apply -
app_delete -
app_edit_finished -
app_flow_apply -
app_flow_get -
app_flow_get_schema -
app_get -
app_get_associated_resources -
app_get_base -
app_get_buttons -
app_get_charts -
app_get_edit_version_no -
app_get_fields -
app_get_flow -
app_get_form_schema -
app_get_layout -
app_get_views
06-18 00:00 08-01 00:00 now
| version | date | src |
|---|---|---|
| 1.1.41 | 2026-07-15 | npm |
| 1.1.40 | 2026-07-09 | npm |
| 1.1.39 | 2026-07-08 | npm |
| 1.1.38 | 2026-07-08 | npm |
| 1.1.37 | 2026-07-04 | npm |
| 1.1.35 | 2026-07-03 | npm |
| 1.1.34 | 2026-07-03 | npm |
| 1.1.33 | 2026-07-01 | npm |
| 1.1.2 | 2026-07-01 | npm |
| 1.1.1 | 2026-06-24 | npm |