Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Clipboard

PYPI · MCP-CLIPBOARD

Read and write the system clipboard — tables, text, code, JSON, URLs, images, and more.

Available components

+3 this week 87 Trust /100

Last scanned (9 hours ago)

Scores higher than 90% of PyPI servers

Category Productivity and Notes

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security100
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • Runs hatchling.build at install time, a recognised build step with no custom scripting around it. View diagnostics → Pass
  • 2 of 30 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to cmeans/mcp-clipboard). View diagnostics → Pass
  • Clear OSI-approved license (Apache-2.0).Pass
  • Actively maintained (last published 16 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability64
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 2961 tokens (~423/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management70
  • Stability observed for 21 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage71
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 0% of tool parameters carry a description.Fail
  • Structured output schemas are declared (86% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass
What we tested

Checks we ran (16)

  • Malware scan
  • Known CVEs
  • Install scripts
  • Dependency health
  • Source repository
  • Provenance
  • License
  • Maintenance
  • Security disclosure
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this package (2)

  • Endpoint SecurityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.
  • Transport & ReachabilityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 +16
    • Malware scan: unverified → pass ▲ security
  • 3 Nov 26 −15
    • Malware scan: pass → unverified ▼ security
  • 2 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 57 to 60. That category is still filling its 30-day observation window: 17 days of observed history at the previous scan, 18 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Oct 26 +16
    • Malware scan: unverified → pass ▲ security
  • 30 Oct 26 −15
    • Malware scan: pass → unverified ▼ security
  • 29 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

  • 27 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.

  • 25 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed pypi/mcp-clipboard@2.6.3

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem pypi
Reason Verified
Discovered via Registry attestation endpoint
Source repo cmeans/mcp-clipboard
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/cmeans/mcp-clipboard/.github/workflows/publish.yml@refs/tags/v2.6.3
Rekor log index 3327422743
Predicate type PyPI publish attestation https://docs.pypi.org/attestations/publish/v1
Subject digest sha256:dc971712f74ec63cf860942f86c8c250ac158c47c5f0a7601bfa0458c2242f21

Background: How many MCP packages publish verified provenance →

Install scripts 1 script
Hook Tier Command
build_backend Known build tool hatchling.build

Background: Why install scripts are a supply-chain risk →

Dependencies 30 packages
Packages resolved 30
Stale 1
No linked repository 1
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 7 exposed · ~2,402 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
clipboard_copy ~351

Copy text to the user's system clipboard. Replaces whatever is currently on the clipboard with the provided content. WHEN TO CALL THIS TOOL: Call this tool when the user says "copy this", "put this on my clipboard", "copy to clipboard", "send to clipboard", or any phrase that implies writing content to the clipboard. Also call this tool when you have produced formatted output (cleaned-up JSON, a markdown table, reformatted code, an HTML table, etc.) and the user wants to use it outside the conversation — copying to clipboard lets them paste it elsewhere. Args: content: The text to place on the clipboard. Any string is accepted. mime_type: MIME type for the clipboard content (default: "text/plain"). Use "text/html" to write HTML that applications can paste as rich text. Use "text/rtf" to write RTF content. Use "image/svg+xml" to write an SVG; SVG is XML, so it rides this text-write path rather than `clipboard_copy_image`. Binary image MIME types (image/png, image/jpeg, etc.) and audio/* / video/* are rejected — for PNG or JPEG, use `clipboard_copy_image`. Note: On Wayland and X11, any text/* MIME type is accepted, plus image/svg+xml. On macOS and Windows, only text/plain, text/html, text/rtf, and image/svg+xml are supported. Returns: A confirmation message with the number of characters copied and the MIME type written.

NameTypeReqDescription
contentstringyes–
mime_typestring––
NameTypeReqDescription
resultstringyes–

No examples provided.

clipboard_copy_image ~277

Write an image to the user's system clipboard. Replaces whatever is currently on the clipboard with the provided image so it can be pasted into other applications (Slack, Gmail, Figma, image editors, etc.). WHEN TO CALL THIS TOOL: Call this tool when the user says "copy this image", "put this on my clipboard", or any phrase that implies writing an image to the clipboard. Also call it when you have produced or fetched an image (a chart, a screenshot, a generated image) and the user wants to paste it elsewhere. For text content, use `clipboard_copy` instead. Args: image_data: Base64-encoded image bytes. The same encoding that `clipboard_paste` returns for image content can be passed back in. mime_type: Either "image/png" or "image/jpeg". Pass-through, no re-encoding. The image header is verified against the declared MIME type to catch mismatches. Returns: A confirmation message with the byte count and the MIME type written. Limits: The image must not exceed `MCP_CLIPBOARD_MAX_IMAGE_BYTES` (default 10 MB). Set the env var to raise the limit.

NameTypeReqDescription
image_datastringyes–
mime_typestring––
NameTypeReqDescription
resultstringyes–

No examples provided.

clipboard_copy_markdown ~548

Render markdown to HTML and place both formats on the system clipboard so the user can paste rich text into apps that prefer formatted content (Slack, Gmail, Notion, Word, Google Docs, Discord) AND plain markdown into apps that prefer source (text editors, terminals). WHEN TO CALL THIS TOOL: Call this tool when the user wants formatted output to paste into a rich-text target — bulleted lists, headings, links, code, bold/italic emphasis. Examples: "summarize these emails as a list and copy it", "copy this as formatted text", "put this on my clipboard so I can paste it into Slack with formatting", "give me a markdown bullet list and copy it." For plain text without formatting intent, use `clipboard_copy` instead. Args: text: Markdown source. Standard CommonMark syntax (headings, lists, emphasis, code blocks, links, etc.) is rendered to HTML. Raw HTML tags in the source are escaped, not passed through — if you need to write hand-crafted HTML, call `clipboard_copy` with `mime_type="text/html"` instead. Returns: A confirmation message with the input character count and the rendered HTML byte count. Platform behavior: - macOS and Windows: both `text/html` and `text/plain` (the markdown source) land on the clipboard atomically. Each paste target picks the format it prefers — Slack/Gmail/Notion get the rendered HTML; vim/terminal/text editors get the markdown source. - Wayland: `wl-copy` is single-MIME-per-invocation, so only `text/html` is set explicitly. However, `wl-copy` auto-advertises `text/plain` (and the X-style aliases `UTF8_STRING`/`STRING`/`TEXT`) for UTF-8 content, and the bytes returned for those targets are the **rendered HTML markup** — NOT the markdown source. A vim user pasting after this tool runs will see `<h1>Title</h1>...` etc. To get the markdown source on the clipboard, call `clipboard_copy` with the markdown source directly. - X1…

NameTypeReqDescription
textstringyes–
NameTypeReqDescription
resultstringyes–

No examples provided.

clipboard_list_formats ~144

List the MIME types / formats currently on the system clipboard. Diagnostic tool — use clipboard_paste to actually read and return clipboard content. Lists what formats are present. For spreadsheet data, you want to see "text/html" (best) or "text/plain" (fallback with tab-separated values). Args: selection: Which buffer to list. Defaults to "clipboard". Pass "primary" to list formats on the X11/Wayland PRIMARY selection. macOS and Windows have no PRIMARY analog and will return an error if "primary" is passed. Returns: A list of available clipboard formats.

NameTypeReqDescription
selectionstring––
NameTypeReqDescription
resultstringyes–

No examples provided.

clipboard_paste ~644

Paste clipboard contents. Reads the user's system clipboard and returns the content. This is the primary clipboard tool. WHEN TO CALL THIS TOOL: Call this tool when the user says "paste", "paste it", "paste the data", "what's on my clipboard", "read my clipboard", "read what I copied", "what did I copy", "show clipboard", "from my clipboard", "use what I copied", "I copied something", "check my clipboard", or ANY phrase that implies reading from or pasting from the clipboard. Also call this tool when the user references data that is NOT present in the conversation — for example: "format this list" but no list was given, "clean up this JSON" but no JSON is in the message, "here's a table" but no table was provided, "analyze this data" with nothing attached. In these cases, the data is likely on the clipboard. Check it BEFORE asking the user to provide the data manually. Do NOT ask the user to paste or provide data — just call this tool. Handles any clipboard content: tables (from spreadsheets, HTML), plain text, code, JSON, URLs, rich text, and images. Tables are auto-detected and formatted per output_format. Non-tabular content is returned with smart formatting. Images on the clipboard are returned directly as image content. Args: output_format: Format for table data (case-insensitive). Only applies when the clipboard contains a table. Ignored for non-tabular content. Options: - "markdown" (default): GitHub-flavored Markdown table - "json": Array of objects keyed by header row - "csv": Comma-separated values - "slack": monospace code block with dashed-underline header row (avoids Slack mrkdwn escaping issues) - "jira": ||Header|| / |Cell| wiki markup (also works for Confluence) - "confluence": same as jira - "html": <table> with <thead>/<th>/<tbody>/<td> - "notion": GFM pipe table (Notion renders these natively) include_schema: When True and the clipboard contains a table, append…

NameTypeReqDescription
include_schemaboolean––
output_formatstring––
selectionstring––

No output schema declared.

No examples provided.

clipboard_read_raw ~278

Read raw clipboard content in a specific MIME format. Diagnostic tool only — use clipboard_paste instead for normal clipboard access. This tool returns the clipboard content as-is without any parsing or restructuring. Use clipboard_list_formats first to see what MIME types are available. Supports any non-binary MIME type. The most common values are text/* types, plus image/svg+xml (text-readable despite the image/ prefix). application/* types pass through as well (application/json, application/xml, application/xhtml+xml, etc.) because the only blocked prefixes are image/, audio/, video/, and the exact type application/octet-stream. Binary MIME types are rejected; use clipboard_paste for images. Args: mime_type: The MIME type to read from the clipboard. Common values: "text/plain", "text/html", "image/svg+xml", "application/json" selection: Which buffer to read. Defaults to "clipboard". Pass "primary" to read the X11/Wayland PRIMARY selection (middle-click buffer). macOS and Windows have no PRIMARY analog and will return an error if "primary" is passed. Returns: The raw clipboard content in the requested format, or an error message.

NameTypeReqDescription
mime_typestring––
selectionstring––
NameTypeReqDescription
resultstringyes–

No examples provided.

clipboard_version ~160

Return the version of mcp-clipboard currently running. Use this when you need to record or report which mcp-clipboard build is serving the current MCP session — for example, in test harnesses, diagnostic dumps, or when the user asks which version is installed. The version is read from the package metadata at runtime, so it always matches the wheel actually serving the call. Returns: A dict with keys "name" (always "mcp-clipboard") and "version" (the installed version string, e.g. "2.6.1"). If the package metadata cannot be located (uninstalled source checkout), returns "0.0.0+dev" as the version.

Input schema present but exposes no named parameters.

Structured output declared, but exposes no named fields.

No examples provided.

Install

How do I install the Clipboard MCP server?

Clipboard runs locally as a PyPI package, launched with uvx mcp-clipboard. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

pypi · mcp-clipboard

# add to Claude Code
claude mcp add cmeans-mcp-clipboard -- uvx mcp-clipboard
Common questions

What is the Clipboard MCP server?

Clipboard is an MCP server listed in the public MCP registry as io.github.cmeans/mcp-clipboard. Read and write the system clipboard, tables, text, code, JSON, URLs, images, and more. This page covers its PyPI package (mcp-clipboard).

Is the Clipboard MCP server safe to use?

Clipboard scores 87 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Clipboard MCP server expose?

Clipboard exposes 7 tools: clipboard_paste, clipboard_read_raw, clipboard_list_formats, clipboard_copy, clipboard_copy_image, and 2 more. Their descriptions and schemas cost roughly 2,402 tokens of context every time the server is loaded.

Is the Clipboard MCP server still maintained?

Clipboard is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Clipboard MCP server under?

Clipboard declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

What did VerifyMCP test on the Clipboard MCP server?

VerifyMCP ran 16 checks on Clipboard, covering Malware scan, Known CVEs, Install scripts, Dependency health and 12 more. Endpoint Security and Transport & Reachability do not apply to a PyPI package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.