com.ascent-partners/opencode-workbench
NPM · @SIMONMAK-ASCENT/OPENCODE-WORKBENCH · 2 COMPONENTS
Provision an OpenCode workbench and MCP stack on any Linux box, local or over SSH.
Available components
Last scanned (3 hours ago)
Scores higher than 39% of npm servers
Category Cloud Infrastructure
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 93 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 2 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability68
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2267 tokens (~226/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 15 Oct 26 +30
- Injection markers: unverified → pass ▲ security
- First check of Judged manipulation: pass security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- First check of Destructive annotations: 100 functional
- First check of Tool coverage: 100 functional
- First check of Tool coverage: 100 functional
- First check of Schema quality: fail functional
- First check of Schema quality: excellent functional
- First check of Schema quality: fail functional
- 14 Oct 26 39
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 17 Oct 2026 · Analysed npm/@simonmak-ascent/opencode-workbench@4.0.2
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 93 packages
| Packages resolved | 93 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
apply_clone Apply a Workbench clone ~320
Apply the Workbench profile to a target: clone the repo and install missing components (OpenCode CLI, Node/pnpm, MCP servers, skills, plugins, optional Docker). It OVERWRITES `<home>/.config/opencode/opencode.json`, copies `AGENTS.md`, resets an existing profile repo to `origin/main`, and runs global installs that need write permission (plus SSH for `mode:ssh`) and can take minutes. Writes a names-only `~/.env.workbench` (mode 600); never secret values. Consent-gated and idempotent: without `confirm:true` it returns the plan and changes nothing. Parameter semantics: `components` defaults to required+core; `workspace` defaults to `~/opencode-workbench`; `skipRepo` skips the clone/update; `profileUrl` overrides the git remote; `dryRun` returns the plan. To preview only, use plan_clone.
| Name | Type | Req | Description |
|---|---|---|---|
| components | array | – | Component ids to include; defaults to required+core. |
| confirm | boolean | – | Set true to actually install. When absent, the call returns a plan and makes no changes. |
| dryRun | boolean | – | Report only; make no changes. |
| profileUrl | string | – | Override profile git URL. |
| skipRepo | boolean | – | Do not clone/update the profile repo on the target. |
| target | object | yes | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| workspace | string | – | Target directory for the profile repo. |
| Name | Type | Req | Description |
|---|---|---|---|
| configPath | string | yes | Path of the written opencode.json. |
| degraded | array | yes | Capabilities disabled because required credentials are absent; fill the named env vars to enable them. |
| dryRun | boolean | yes | True when the run made no changes. |
| envPath | string | yes | Path of the written ~/.env.workbench template. |
| envVars | array | yes | Environment variable names listed in the env template. |
| installed | array | yes | Components installed, with exit codes and output. |
| model | string | yes | Default model selected for the target (DeepSeek when its key is present, else the OpenCode Zen free floor). |
| plan | object | – | Presented when confirmation is required. |
| providerMode | string | yes | Which provider the model resolves to. |
| requiresConfirmation | boolean | – | True when the call returned a plan without applying; re-call with confirm:true to install. |
| skipped | array | yes | Component ids skipped (already present or manual). |
| target | string | yes | Label of the target. |
| workspace | string | yes | Directory where the profile repo was cloned. |
No examples provided.
describe_workbench Workbench server info ~96
Describe this MCP server from its bundled profile without contacting any target or making a network call: repository URL, the default component set, components grouped by tier (required/core/optional), and optional MCP add-ons. It takes no parameters, is always safe, and returns instantly. Use it first to resolve a component id for install_component/remove_component/update_component or to see available add-ons; use inspect_target for a machine's live state.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| components | array | yes | Every component with id, tier and description. |
| defaultComponents | array | yes | Component ids installed by default. |
| optionalMcp | array | yes | Optional MCP add-on ids available in the profile. |
| packageRoot | string | yes | Filesystem path of the installed package. |
| repo | string | yes | Web URL of the workbench repository. |
| repoGit | string | yes | Git clone URL of the workbench repository. |
No examples provided.
inspect_target Inspect a Linux target ~224
Probe one Linux machine — this host (`local`) or a remote host over SSH (`ssh`) — and report its OS, kernel, architecture, package manager, Node/npm, OpenCode, Docker, and per-tool detection flags, plus the names (never values) of credentials present. Read-only: it runs one shell probe as the target user (over SSH when `mode:ssh`), installs nothing, writes nothing, contacts no external service, and can take a few seconds per hop. Parameter semantics: `target.mode` selects local vs ssh (default `local`); `target.host` is required only for ssh; `target.user` defaults to the ssh config/current user; `target.cwd` sets the directory for relative checks; `target.port`/`identityFile` pass straight to ssh. Use it to see what a clone would touch, then plan_clone to turn that into an ordered plan and apply_clone to perform it.
| Name | Type | Req | Description |
|---|---|---|---|
| target | object | yes | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| Name | Type | Req | Description |
|---|---|---|---|
| arch | string | – | CPU architecture (e.g. x86_64, aarch64). |
| configDir | string | yes | OpenCode config directory on the target. |
| dockerRunning | boolean | – | Whether the Docker daemon is reachable. |
| envPresent | string | – | Space-separated names of credentials present on the target (values are never read). |
| has | object | yes | Detection flags for git, curl, node, npm, corepack, pnpm, docker, uv, gh, opencode, sudo. |
| home | string | yes | Home directory on the target. |
| kernel | string | – | Kernel name and release. |
| nodeVersion | string | – | Installed Node.js version, if any. |
| npmModules | string | – | npm global modules directory. |
| opencodeBin | string | – | Path to the opencode binary, if installed. |
| osId | string | – | OS identifier (e.g. ubuntu, debian, rhel). |
| osName | string | – | Human-readable OS name. |
| osVersion | string | – | OS version string. |
| packageManager | string | – | Detected package manager (apt-get, dnf, yum, apk, pacman, zypper, or none). |
| user | string | yes | Detected user on the target. |
| workspaceDefault | string | yes | Default directory where the profile repo will be cloned. |
No examples provided.
install_component Install one Workbench component ~237
Install a single Workbench component by id (e.g. `node`, `opencode`, `npm-mcps`, `skills`) on a target; `component` must be an id from describe_workbench. Overwrites that component's files when present (e.g. `skills`/`plugins` replace the copies under `<home>/.config/opencode`); global installs need write permission and can take minutes. Idempotent and consent-gated: without `confirm:true` it returns the plan. Parameter semantics: `component` is required; `workspace` defaults to `~/opencode-workbench`; `confirm` defaults to false (plan only). Use it for one targeted component; use apply_clone to install the full default set.
| Name | Type | Req | Description |
|---|---|---|---|
| component | string | yes | Component id from describe_workbench. |
| confirm | boolean | – | Set true to actually install. When absent, the call returns a plan and makes no changes. |
| target | object | yes | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| workspace | string | – | Target directory for the profile repo. |
| Name | Type | Req | Description |
|---|---|---|---|
| configPath | string | yes | Path of the written opencode.json. |
| degraded | array | yes | Capabilities disabled because required credentials are absent; fill the named env vars to enable them. |
| dryRun | boolean | yes | True when the run made no changes. |
| envPath | string | yes | Path of the written ~/.env.workbench template. |
| envVars | array | yes | Environment variable names listed in the env template. |
| installed | array | yes | Components installed, with exit codes and output. |
| model | string | yes | Default model selected for the target (DeepSeek when its key is present, else the OpenCode Zen free floor). |
| plan | object | – | Presented when confirmation is required. |
| providerMode | string | yes | Which provider the model resolves to. |
| requiresConfirmation | boolean | – | True when the call returned a plan without applying; re-call with confirm:true to install. |
| skipped | array | yes | Component ids skipped (already present or manual). |
| target | string | yes | Label of the target. |
| workspace | string | yes | Directory where the profile repo was cloned. |
No examples provided.
list_required_credentials List required credentials ~179
List the credentials the profile references, which the target already provides, and how to acquire each missing one. Value-blind: it reads only whether each env var is set — no values, no network, no writes — via one read-only probe. Parameter semantics: `target` selects the machine (`local` or SSH) and its `home` sets the returned `template` path and the env file the presence check reads; there are no other parameters. Returns `present`/`missing` var-name arrays plus one guidance record per credential (`var`, `purpose`, `url`, `method`, `command`). Use it after plan_clone to see what would degrade; act on one credential with run_auth_flow.
| Name | Type | Req | Description |
|---|---|---|---|
| target | object | yes | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| Name | Type | Req | Description |
|---|---|---|---|
| credentials | array | yes | Every credential the profile references with its acquisition guidance. |
| missing | array | yes | Credential names not present. |
| present | array | yes | Credential names already present on the target. |
| target | string | yes | Label of the inspected target. |
| template | string | yes | Path of the env file to fill in. |
No examples provided.
plan_clone Plan a Workbench clone ~232
Return a read-only plan for a target: compare it against the Workbench profile and list each component as `install`, `present`, or `manual`, with the commands that would run. It still runs a detection probe on the target (same access as inspect_target) but clones nothing and writes nothing. Parameter semantics: `components` restricts the diff to those ids (default: required+core); `workspace` sets the expected profile path on the target (default `~/opencode-workbench`); `profileUrl` overrides the git remote. Use it to preview before apply_clone, which performs the changes.
| Name | Type | Req | Description |
|---|---|---|---|
| components | array | – | Component ids to include; defaults to required+core. |
| dryRun | boolean | – | Report only; make no changes. |
| profileUrl | string | – | Override profile git URL. |
| skipRepo | boolean | – | Do not clone/update the profile repo on the target. |
| target | object | yes | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| workspace | string | – | Target directory for the profile repo. |
| Name | Type | Req | Description |
|---|---|---|---|
| inspect | object | yes | Full inspection of the target. |
| steps | array | yes | Per-component plan. |
| target | string | yes | Label of the inspected target. |
| toInstall | array | yes | Component ids that will be installed. |
No examples provided.
remove_component Remove one Workbench component ~285
Uninstall one Workbench component by id from a target — the inverse of install_component — for a bounded, documented subset with an automated uninstall (e.g. `opencode`, `pnpm`, `npm-mcps`, `skills`, `docker-containers`); `component` must be an id from describe_workbench. Idempotent: an already-absent component reports `absent`; a component with no automated uninstall (system packages such as git/curl/node) reports `manual`. Destructive and consent-gated: without `confirm:true` it returns a preview and changes nothing, and it deletes only that component's files — never `opencode.json` or the profile repo. Parameter semantics: `workspace` sets the profile path some removals need; `dryRun` reports without changing. Use it to tear down one component; for several, call it per id.
| Name | Type | Req | Description |
|---|---|---|---|
| component | string | yes | Component id from describe_workbench. |
| confirm | boolean | – | Set true to actually remove. When absent, the call returns a preview and makes no changes. |
| dryRun | boolean | – | Report the action without changing anything. |
| target | object | yes | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| workspace | string | – | Profile repo directory (used by components whose removal needs it). |
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | What happened: removed, updated, already absent, or manual (no automated uninstall). |
| code | number | yes | Exit code of the action. |
| id | string | yes | Component id acted on. |
| output | string | yes | Captured output (truncated). |
| requiresConfirmation | boolean | – | True when the call returned a preview without acting; re-call with confirm:true. |
| target | string | yes | Label of the target. |
No examples provided.
run_auth_flow Acquire one credential (best-effort) ~202
Return the acquisition plan for one credential on a target: the provider URL, the exact non-interactive command when one exists (e.g. `opencode auth login`, `opencode mcp auth vercel`, `gh auth login`), and whether it is already present. Read-only and value-blind: it emits guidance and re-checks presence with one read-only probe; it does not run the commands or handle secret values. Parameter semantics: `var` must be an env var name returned by list_required_credentials (unknown names error); `target` selects the machine and its `home` is where the value should be written. Use it for a single credential; it does not replace that listing.
| Name | Type | Req | Description |
|---|---|---|---|
| target | object | yes | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| var | string | yes | Credential env var name from list_required_credentials (e.g. OPENCODE_API_KEY). |
| Name | Type | Req | Description |
|---|---|---|---|
| command | string | – | Command for the agent/user to run. |
| method | string | yes | Acquisition method. |
| next | string | yes | What to do next. |
| present | boolean | yes | Whether the credential is present now. |
| target | string | yes | Label of the target. |
| url | string | – | Provider URL to open. |
| var | string | yes | Credential being acquired. |
| verified | boolean | yes | True when the credential is present and ready. |
No examples provided.
update_component Update one Workbench component ~234
Update one Workbench component in place by id: re-run its install script to fetch the current version (e.g. `opencode` re-runs the official installer; `npm-mcps` reinstalls the latest globals). It OVERWRITES the component's files, needs write permission, and can take minutes for global installs; the resolved version may change. Parameter semantics: `component` must be an id from describe_workbench; `workspace` defaults to `~/opencode-workbench`; `dryRun` previews; `confirm` defaults to false — set `confirm:true` to apply. For the whole profile use apply_clone.
| Name | Type | Req | Description |
|---|---|---|---|
| component | string | yes | Component id from describe_workbench. |
| confirm | boolean | – | Set true to actually update. When absent, the call returns a preview and makes no changes. |
| dryRun | boolean | – | Report the action without changing anything. |
| target | object | yes | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| workspace | string | – | Profile repo directory (used by components whose update needs it). |
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | What happened: removed, updated, already absent, or manual (no automated uninstall). |
| code | number | yes | Exit code of the action. |
| id | string | yes | Component id acted on. |
| output | string | yes | Captured output (truncated). |
| requiresConfirmation | boolean | – | True when the call returned a preview without acting; re-call with confirm:true. |
| target | string | yes | Label of the target. |
No examples provided.
verify_clone Verify a Workbench clone ~258
Re-check a target after a clone: return a per-component `present`/`missing` list plus whether `opencode.json` and `~/.env.workbench` exist. Read-only and idempotent: it runs a detection probe (SSH or local) and checks files, writing nothing. `target` selects the machine (`local` or SSH) and its `home` is where the `opencode.json` and `~/.env.workbench` checks run; `components` restricts the check to those ids (omit it to check every component, the default); `workspace` sets the profile path used by component checks. Use it after apply_clone and after component changes; for a pre-clone preview use plan_clone.
| Name | Type | Req | Description |
|---|---|---|---|
| components | array | – | Component ids to include; defaults to required+core. |
| dryRun | boolean | – | Report only; make no changes. |
| profileUrl | string | – | Override profile git URL. |
| skipRepo | boolean | – | Do not clone/update the profile repo on the target. |
| target | object | yes | The machine to operate on: this host (local) or a remote host over SSH (ssh). |
| workspace | string | – | Target directory for the profile repo. |
| Name | Type | Req | Description |
|---|---|---|---|
| components | array | yes | Per-component presence detection. |
| configExists | boolean | yes | Whether opencode.json exists on the target. |
| envExists | boolean | yes | Whether ~/.env.workbench exists on the target. |
| missing | array | yes | Component ids detected as missing. |
| target | string | yes | Label of the target. |
No examples provided.
How do I install the com.ascent-partners/opencode-workbench MCP server?
com.ascent-partners/opencode-workbench runs locally as an npm package, launched with npx -y @simonmak-ascent/opencode-workbench. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @simonmak-ascent/opencode-workbench
claude mcp add com-ascent-partners-opencode-workbench -- npx -y @simonmak-ascent/opencode-workbench
What is the com.ascent-partners/opencode-workbench MCP server?
com.ascent-partners/opencode-workbench is an MCP server listed in the public MCP registry as com.ascent-partners/opencode-workbench. Provision an OpenCode workbench and MCP stack on any Linux box, local or over SSH. This page covers its npm package (@simonmak-ascent/opencode-workbench).
Is the com.ascent-partners/opencode-workbench MCP server safe to use?
com.ascent-partners/opencode-workbench scores 69 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 17 October 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the com.ascent-partners/opencode-workbench MCP server expose?
com.ascent-partners/opencode-workbench exposes 10 tools: describe_workbench, inspect_target, plan_clone, apply_clone, verify_clone, and 5 more. Their descriptions and schemas cost roughly 2,267 tokens of context every time the server is loaded.
Is the com.ascent-partners/opencode-workbench MCP server still maintained?
com.ascent-partners/opencode-workbench is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the com.ascent-partners/opencode-workbench MCP server under?
com.ascent-partners/opencode-workbench declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.