Spoolis
NPM · @SPOOLIS/MCP · 2 COMPONENTS · SCANNED SEP 24
Verify work against acceptance criteria; signed receipts attest what passed and was earned.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 95 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency19
- Repository check failed: no source repository is declared. See how to fix → View diagnostics → Fail
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 12 days ago).Pass
- Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified
Schema Quality & AI Usability61
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2245 tokens (~124/item across 18 items; 18 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage67
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 0% of tool parameters carry a description.Fail
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 18 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the Spoolis MCP server?
Spoolis runs locally as an npm package, launched with npx -y @spoolis/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @spoolis/mcp
claude mcp add com-spoolis-mcp -- npx -y @spoolis/mcp
{
"mcpServers": {
"com-spoolis-mcp": {
"command": "npx",
"args": [
"-y",
"@spoolis/mcp"
]
}
}
} {
"servers": {
"com-spoolis-mcp": {
"command": "npx",
"args": [
"-y",
"@spoolis/mcp"
]
}
}
} codex mcp add com-spoolis-mcp -- npx -y @spoolis/mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-spoolis-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"@spoolis/mcp"
],
"enabled": true
}
}
} openclaw mcp add com-spoolis-mcp --command npx --arg -y --arg @spoolis/mcp
mcp_servers:
com-spoolis-mcp:
command: "npx"
args: ["-y", "@spoolis/mcp"] {
"McpServers": {
"com-spoolis-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@spoolis/mcp"
]
}
}
} assistant mcp add com-spoolis-mcp -t stdio -c npx -a -y @spoolis/mcp
{
"mcpServers": {
"com-spoolis-mcp": {
"command": "npx",
"args": [
"-y",
"@spoolis/mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 24 Sept 26 +1
- Stability: 0.97 → pass security
- 22 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 70 to 73. That category is still filling its 30-day observation window: 21 days of observed history at the previous scan, 22 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 63 to 67. That category is still filling its 30-day observation window: 19 days of observed history at the previous scan, 20 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +15
- Malware scan: unverified → pass ▲ security
- 11 Sept 26 −14
- Tool safety: pass → unverified ▼ security
- Stability: 0.53 → unverified ▼ security
- Malware scan: pass → unverified ▼ security
- Tool coverage: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- First check of Schema quality: unverified functional
- Package version: 0.1.4 → 0.1.5 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 24 Sept 2026 · Analysed npm/@spoolis/mcp@0.1.5
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 95 packages
| Packages resolved | 95 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
abandon_spool Spool abandonment ~62
Abandon an active Spool (the agreement object) before payment is committed. Use when the initiator no longer wants to proceed; this ends the agreement and cannot verify work or settle value. Works in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
accept_spool Spool acceptance ~78
Confirm the compiled contract by accepting a proposed Spool (the agreement object). Use only after reviewing its terms and acceptance criteria; this records agreement acceptance but does not verify fulfillment or settle payment. Production agent agreements require the current quote digest. Works in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
| quote_digest | string | – | – |
No output schema declared.
No examples provided.
amend_spool Spool amendment ~93
Change acceptance criteria or unit-based earned-value rules on a proposed Spool (the agreement object). Use before acceptance when the draft does not match the intended purchase; this replaces proposal details and does not accept or verify the work. Works in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| add_conditions | array | – | – |
| id | string | yes | – |
| remove_condition_ids | array | – | – |
| unitization | object | – | – |
No output schema declared.
No examples provided.
cancel_spool Spool cancellation ~70
Cancel a Spool (the agreement object) that should not continue. Use only when cancellation is an allowed action; this changes lifecycle state and does not verify fulfillment or settle payment. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
commit_payment Payment commitment ~90
Ask the configured settlement adapter to authorize and, where supported, hold the maximum value for a Spool (the agreement object). Use after terms are accepted when the selected payment path requires commitment; this may create a payment authorization or hold, but does not verify work or determine earned value. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
compile_spool Spool draft ~96
Turn purchase intent into a proposed DRAFT Spool (the agreement object) with explicit acceptance criteria and earned-value rules. Use before both parties confirm terms; do not use for one-call unilateral result verification. This creates a persisted draft to inspect, then accept_spool confirms it, amend_spool changes conditions or unitization, and abandon_spool discards it. Works in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| source | string | yes | – |
No output schema declared.
No examples provided.
complete_spool Completed Spool ~72
Read a Spool (the agreement object) whose outcome is already completed. Use for compatibility when a completed result is expected; it has no side effects and does not run verification or settlement. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
create_counterparty_invite Counterparty invite ~101
Create a 15-minute, single-use grant that lets the other party join a Spool (the agreement object). Use when a counterparty needs scoped access without signing in; do not use as payment authority. This creates a credential that expires after use or 15 minutes. Requires the initiator's full-scope key. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
create_spool Spool creation ~216
Create a production Spool (the agreement object) from structured terms and acceptance criteria. Use when both parties will participate in the agreement lifecycle; do not use for one-call unilateral verification. This persists a proposed agreement and may send the counterparty invite reported in the response handoff block. The type field defaults to the person or business service path, while agent selects the agent settlement rail. Conditions may declare verification_method third_party with an external_judge so verification consumes your own evaluator's bound result instead of Spoolis judging those conditions. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| agreement | object | – | – |
| conditions | array | yes | – |
| deliverable | object | yes | – |
| dispute_policy | object | – | – |
| economics | object | – | – |
| gated_action | string | – | – |
| gated_action_note | string | – | – |
| parties | array | yes | – |
| terms | array | yes | – |
| type | string | – | – |
| value | object | yes | – |
No output schema declared.
No examples provided.
decline_spool Spool decline ~69
Decline a proposed Spool (the agreement object). Use when the counterparty rejects its terms; this ends the proposal without accepting it, verifying work, or settling payment. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
get_receipt_status Outcome Receipt status ~55
Check whether an Outcome Receipt is still current or has been superseded, before acting on it. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| receipt_id | string | yes | – |
No output schema declared.
No examples provided.
get_spool Spool details ~98
Read a Spool (the agreement object), including hash-covered evidence requirements, dispute policy, and salted unit identity configuration. Use for status checks; it has no side effects. A party named in who_may_dispute can supersede an issued receipt through POST /api/v1/receipts/{receipt_id}/supersede. There is no review queue or UI. Works in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
get_spool_events Spool event history ~61
Read the canonical audit history for a Spool (the agreement object), including agreement, fulfillment, verification, and settlement events. Use to reconstruct what happened; it has no side effects. Works in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
propose_spool Spool proposal ~77
Move a draft Spool (the agreement object) into the proposed state so the counterparty can review it. Use after the acceptance criteria are ready; this changes agreement state and does not accept terms or settle payment. Production only: set SPOOLIS_API_KEY; not available in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | – |
No output schema declared.
No examples provided.
run_sandbox_scenario Sandbox scenario ~264
Evaluate Spoolis without a key or account: run a seeded synthetic scenario through a real demo Spool (the agreement object), verification, and a signed demo Outcome Receipt. Use to observe which units may continue after verification and inspect seeded truth only after the Outcome exists. Scenarios: data_enrichment runs a synthetic company-enrichment delivery with configurable defect and adversarial rates and returns per-unit verdicts with partial earned value; external_judge_two_consumers walks a signed external evaluator judgment, bound to the agreement and evidence, through one shared Outcome consumed independently by billing and workflow, then shows tamper rejection and missing-unit uncertainty; qualified_meetings runs ten vendor-reported meetings through buyer acceptance criteria and returns seven accepted, two rejected, and one uncertain with a signed receipt; production_migration verifies local delivery checks plus buyer-owned billing telemetry through the external evaluator path, then shows deploy blocking and remediation. This persists only run parameters and aggregate results; modeled economics are labeled modeled. Works in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| adversarial_case_count | integer | – | – |
| defect_rate | number | – | – |
| modeled_cost_per_unit | number | – | – |
| record_count | integer | – | – |
| scenario | string | yes | – |
| seed | string | – | – |
No output schema declared.
No examples provided.
submit_evidence Evidence submission ~117
Attach fulfillment evidence to an acceptance criterion in a Spool (the agreement object). Use after work is delivered and before verification; this persists evidence but does not decide whether it passes or what was earned. Works in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| claim_class | string | – | – |
| condition_id | string | yes | – |
| id | string | yes | – |
| metadata | object | – | – |
| on_behalf_of | string | – | – |
| provenance | string | – | – |
| source | string | yes | – |
| type | string | yes | – |
No output schema declared.
No examples provided.
verify_result Result verification ~382
Get a signed, durable, portable Outcome Receipt: a verdict artifact, per unit for unitized work, another system can fetch and independently verify. Spoolis makes it by verifying returned work against explicit acceptance criteria. Use when an agent, vendor, or tool reports work as done and the next action depends on whether the delivery actually met the agreed criteria. This runs in one call using exactly one of inline conditions or a locally registered recipe slug and hash, creating an inspectable unilateral Spool, the versioned acceptance policy. The maximum amount field is optional for verification-only runs. Omit it when nobody is paying; the earned amount is then zero and the receipt omits committed value. The maximum amount field is required when unit is present because unit math needs the cap. Recipe verification uses the hosted conditions exactly as written and fails closed when the hash differs. The external provider does not accept conditions in Spoolis. For a batch delivery where items can pass, fail, or remain uncertain individually, pass unit (its unit count matching the item count) AND evidence type dataset with exactly one row per delivered item, keeping a field present with a null value when it is missing; that returns distinct per-unit verdicts and earned value only for passing units. Text evidence with unit is batch-only and settles all-or-nothing. For a keyless production alternative, use POST /api/v1/verify/x402. Sandbox dataset evidence is limited to 100 records. Works in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| conditions | string|array | – | – |
| evidence | object | yes | – |
| gated_action | string | – | – |
| gated_action_note | string | – | – |
| idempotency_key | string | – | – |
| max_amount_cents | integer | – | – |
| recipe | object | – | – |
| settlement | string | – | – |
| unit | object | – | – |
No output schema declared.
No examples provided.
verify_spool Spool verification ~210
Issue a signed, durable, portable Outcome Receipt from this Spool, the versioned acceptance policy. The receipt is a verdict artifact, per unit for unitized work, another system can fetch and independently verify. Spoolis makes it by evaluating submitted evidence against the acceptance criteria and determining what was earned. Use after evidence is attached; this records the verdict and required evidence as present, missing, stale, unavailable, or provenance unsatisfied. Missing required evidence defaults to uncertain. Conditions with verification_method third_party keep your own judge: verification consumes the declared external evaluator's result, bound to this agreement and evidence per its declared proof requirement, instead of Spoolis judging those conditions itself. Unitized receipts may include salted public unit identities. Sandbox dataset evidence is limited to 100 records. Canonical recipe: compile -> verify -> Outcome Receipt -> verifyReceipt -> optional status check -> consumer acts on earned. Works in the no-key sandbox.
| Name | Type | Req | Description |
|---|---|---|---|
| confirmations | array | – | – |
| id | string | yes | – |
No output schema declared.
No examples provided.
What is the Spoolis MCP server?
Spoolis is an MCP server listed in the public MCP registry as com.spoolis/mcp. Verify work against acceptance criteria; signed receipts attest what passed and was earned. This page covers its npm package (@spoolis/mcp).
Is the Spoolis MCP server safe to use?
Spoolis scores 74 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 24 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Spoolis MCP server expose?
Spoolis exposes 18 tools: verify_result, run_sandbox_scenario, compile_spool, create_spool, get_spool, and 13 more. Their descriptions and schemas cost roughly 2,211 tokens of context every time the server is loaded.
Is the Spoolis MCP server still maintained?
Spoolis is still listed as active in the MCP registry. We last reached this channel on 24 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Spoolis MCP server under?
Spoolis declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.