Klavis

Klavis-AI/klavisApache-2.0⭐ 5,664🔧 1369 tools

F2.0SpiderScore (registry)

Klavis AI: MCP integration platforms that let AI agents use tools reliably at any scale

Use cases:chat-messagingemailkb-memorygit-opscalendar-scheduling
⚠ Hard constraint applied: critical vulnerability
Decision
Not Recommended
Confidence
90%

Klavis is not recommended — low score (2.0/10) with 5 critical issues.

Recommended Actions

  • high
    Run In Container
    5 critical vulnerabilities require isolation
  • high
    Limit Permissions
    Restrict tool access to minimum required scope

Do Not

  • ✗running in production without container isolation
  • ✗exposing this tool to untrusted input
  • ✗using for security-sensitive tasks
Risk Flags (7)
  • critical
    ts_unsafe_eval
    Dynamic code execution via eval() with non-literal argument
  • critical
    command_injection
    Command injection risk — subprocess called with shell=True and non-literal command
  • critical
    metadata_secret_leak×2
    Hardcoded secret or API key found in source code
  • high
    path_traversal
    Potential path traversal -- user input may escape intended directory
  • high
    token_leakage×11
    Secret or token may be leaked through error messages, logs, or return values
  • medium
    timing_attack_comparison
    Secret compared with == operator -- timing side-channel may leak value length
  • medium
    input_reflection×3
    User input reflected directly in tool output -- may enable prompt injection via reflection
How This Was Decided
  • negativew=0.5Overall quality score = 2.0/10 (grade F)
  • negativew=0.85 critical security issue(s) detected
  • negativew=0.5210 high-severity issue(s) detected
  • negativew=0.3Tool description clarity score = 1.8/10
Source: SpiderRating automated security scanUpdated: 2026-03-16Protocol: v1.1

Description Quality

Composite: 1.8 / 10

3-Layer Breakdown

Description (38%)
1.8
Security (34%)
9.4
Metadata (28%)
9.7

Description Dimensions

Intent Clarity
3.7
Permission Scope
0.1
Side Effects
2.1
Capability Disclosure
1.4
Operational Boundaries
2.1

Security Analysis

9.4
Score
5
Critical
210
High
20
Medium
155
Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

5 CRITICAL210 HIGH20 MEDIUM155 LOW

Metadata Health

Provenance (40%)
10.0
Maintenance (35%)
9.0
Popularity (25%)
10.0

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/Klavis-AI__klavis.svg)](https://spiderrating.com/servers/Klavis-AI/klavis)
🛡️

Protect Your Agents

Get a free API key. Every MCP tool call checked against 15,923 rated servers in real-time.

Get Free API Key →
📊

Monitor All Your Servers

Dashboard for your entire MCP portfolio. Score tracking, alerts, and compliance reports.

Start Free Trial →
⭐

Scan Locally (Open Source)

Run SpiderShield on your own machine. 46+ security rules, zero data leaves your system.

Star on GitHub →

Similar Servers

Aio Mcpathapong/aio-mcp
3.8D
MistCLoaKY233/MIST
2.0F
Openwebui Mcp Setupsonzentherevolution/openwebui-mcp-setup
2.0F
Sagemcpsagemcp/sagemcp
1.9F
Directordirector-run/director
1.9F