Mcp Server

DollhouseMCP/mcp-serverAGPL-3.028🔧 196 tools

D3.5SpiderScore (registry)
Decision
Allow with Risk
Confidence
90%

Mcp Server has risks — usable with isolation (3.54/10, 0 critical, 2 high).

Recommended Actions

  • medium
    Review Before Production
    Moderate quality score — manual review recommended
Risk Flags (2)
  • high
    token_leakage×2
    Secret or token may be leaked through error messages, logs, or return values
  • medium
    ts_input_reflection
    User input reflected directly in tool output -- may enable prompt injection via reflection
How This Was Decided
  • negativew=0.5Overall quality score = 3.54/10 (grade D)
  • negativew=0.52 high-severity issue(s) detected
  • negativew=0.3Tool description clarity score = 1.5/10
Source: SpiderRating automated security scanUpdated: 2026-03-21Protocol: v1.1

Description Quality

Composite: 1.5 / 10

3-Layer Breakdown

Description (38%)
1.5
Security (34%)
7.3
Metadata (28%)
8.1

Description Dimensions

Intent Clarity
1.1
Permission Scope
0.3
Side Effects
2.1
Capability Disclosure
3.0
Operational Boundaries
1.5

Security Analysis

7.3
Score
0
Critical
2
High
1
Medium
0
Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

1 MEDIUM2 HIGH

Metadata Health

Provenance (40%)
10.0
Maintenance (35%)
8.0
Popularity (25%)
5.3

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/DollhouseMCP__mcp-server.svg)](https://spiderrating.com/servers/DollhouseMCP/mcp-server)