SvGrid
NPM · @SVGRID/MCP · SCANNED AUG 20
Version-pinned Svelte 5 data grid APIs, 373 demo sources, and SvelteKit app scaffolding.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 30 of 97 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency35
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- License check failed: the license (SEE LICENSE IN LICENSE) isn't a recognized OSI-approved license. See how to fix → Fail
- Actively maintained (last published 0 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability77
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 2694 tokens (~81/item across 33 items; 33 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage85
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 55% of tool parameters carry a description.Partial
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · @svgrid/mcp
claude mcp add com-svgrid-svgrid -- npx -y @svgrid/mcp
codex mcp add com-svgrid-svgrid -- npx -y @svgrid/mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-svgrid-svgrid": {
"type": "local",
"command": [
"npx",
"-y",
"@svgrid/mcp"
],
"enabled": true
}
}
} openclaw mcp add com-svgrid-svgrid --command npx --arg -y --arg @svgrid/mcp
mcp_servers:
com-svgrid-svgrid:
command: "npx"
args: ["-y", "@svgrid/mcp"] {
"mcpServers": {
"com-svgrid-svgrid": {
"command": "npx",
"args": [
"-y",
"@svgrid/mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Aug 26 +10
- Known CVEs: unverified → pass ▲ security
- Dependency health: unverified → 0.86 ▲ functional
- 19 Aug 26 55
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Aug 2026 · Analysed npm/@svgrid/mcp@2.3.3
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Dependencies 97 packages
| Packages resolved | 97 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
get_api_reference ~46
Return the curated SvGrid public-API surface, grouped by category (components, headless, scheduler, data ops, export, row models, features, virtualization, accessibility, utilities).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_doc ~47
Return the markdown content of a specific documentation page by slug.
| Name | Type | Req | Description |
|---|---|---|---|
| slug | string | yes | Doc slug, e.g. "getting-started" or "help/columns/column-definitions" |
No output schema declared.
No examples provided.
get_example_source ~62
Return the full .svelte source of a specific demo by id (e.g. "11-stock-market"). The source is what a user would copy into their project as-is.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Demo id, e.g. "11-stock-market" |
No output schema declared.
No examples provided.
introspect_source ~144
SvGrid Studio (commercial): infer an EntitySchema from a data source. Pass a Drizzle schema file (kind:"drizzle", source: the file text) or sample rows (kind:"json", rows, name). Returns a DRAFT EntitySchema to review/refine before scaffolding code.
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | yes | Source kind. |
| name | string | – | Entity/table name (required for kind:"json"). |
| rows | array | – | For kind:"json": a non-empty array of sample row objects. |
| source | string | – | For kind:"drizzle": the text of a schema file containing a pgTable / sqliteTable / mysqlTable definition. |
No output schema declared.
No examples provided.
list_docs ~36
List every documentation page with slug and title. Slugs use forward slashes, e.g. "help/columns/column-definitions".
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
list_examples ~34
List every SvGrid example demo with id, title, and short blurb. Use to discover what is available before fetching source.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
scaffold_entity ~158
SvGrid Studio (commercial): generate runnable SvelteKit files from an EntitySchema - the $lib schema module, a +server.ts API route (createKitHandlers), and a +page.svelte with SvGrid + SvGridEditPanel. Returns files as { path, contents, description }. AFTER writing the files, run the project's own svelte-check / tsc to verify they compile, and fix any errors. Generated bodies are wrapped in svgrid:managed markers so regeneration preserves edits outside them.
| Name | Type | Req | Description |
|---|---|---|---|
| apiRoute | string | – | API route. Defaults to /api/{route}. |
| route | string | – | Route segment. Defaults to schema.name. |
| schema | object | yes | The EntitySchema (from introspect_source, optionally edited). |
No output schema declared.
No examples provided.
search_docs ~63
Case-insensitive substring search across all SvGrid docs. Returns matching slugs with a one-line excerpt around the first hit.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Max results, default 10 |
| query | string | yes | Free-text query, e.g. "row virtualization" |
No output schema declared.
No examples provided.
studio_add_block ~87
Add a data block to a screen. `kind` is one of the palette kinds (grid, chart, kpi, gauge, tree, tabs, accordion, pivot, board, calendar, detail, master-detail, filter, record, lookup, dashboard). Use studio_describe_project for screen ids.
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | yes | Block kind. |
| screenId | string | yes | – |
No output schema declared.
No examples provided.
studio_add_component ~87
Add a UI component block to a screen (button, badge, alert, card, stat, timeline, sparkline, chip, ...). `props` overrides the registry defaults. See studio_capabilities for component keys.
| Name | Type | Req | Description |
|---|---|---|---|
| component | string | yes | Registry component key. |
| props | object | – | Prop overrides (incl. _content for text). |
| screenId | string | yes | – |
No output schema declared.
No examples provided.
studio_add_entity ~145
Add an entity (a table/model) + its default screen. Pass either `schema` (an EntitySchema, e.g. from introspect_source) OR an introspection request (`kind`:"drizzle" with `source`, or `kind`:"json" with `rows` + `name`).
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | – | Introspect a source instead of passing a schema. |
| name | string | – | For kind:"json": the entity name. |
| rows | array | – | For kind:"json": sample rows. |
| schema | object | – | An EntitySchema. |
| source | string | – | For kind:"drizzle": the schema file text. |
No output schema declared.
No examples provided.
studio_add_screen ~86
Add a screen. With `entity`, adds an entity-bound screen (default grid). Without it, adds a freestanding page (needs `title`).
| Name | Type | Req | Description |
|---|---|---|---|
| entity | string | – | Entity name to bind (omit for a freestanding page). |
| route | string | – | Route segment (freestanding only). |
| title | string | – | Title (required for a freestanding page). |
No output schema declared.
No examples provided.
studio_capabilities ~48
List what can be added: block kinds (grid/chart/kpi/board/...), UI component keys (button/badge/timeline/...), theme presets, data-source kinds, and deploy targets.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
studio_describe_project ~55
Return a human-readable summary of the CURRENT project: entities (+ fields + data source), screens (+ blocks, with ids), theme, RBAC, auth, data layer, deploy target. Call this to see state before editing.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
studio_generate_app ~65
Generate the full runnable SvelteKit app from the current model - every file (routes, $lib, package.json, auth, data layer, CI/CD, studio.config.json). Returns [{ path, contents }]. Write them, then run the project's svelte-check to verify.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
studio_get_config ~40
Return the current project model as a studio.config.json string. Write it to `studio.config.json` and the visual designer can Load it (round-trip).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
studio_load_project ~60
Load an existing project from a studio.config.json string (e.g. one exported earlier or shipped with a generated app). Validates it. Use this to continue editing an app the designer produced.
| Name | Type | Req | Description |
|---|---|---|---|
| config | string | yes | The studio.config.json contents. |
No output schema declared.
No examples provided.
studio_move_block ~53
Reorder a block within its screen: `dir` -1 moves it earlier, 1 later.
| Name | Type | Req | Description |
|---|---|---|---|
| blockId | string | yes | – |
| dir | number | yes | – |
| screenId | string | yes | – |
No output schema declared.
No examples provided.
studio_new_project ~49
Start a NEW, empty SvGrid Studio project (the model the visual designer edits). Add entities/screens next. Replaces any project currently in this session.
| Name | Type | Req | Description |
|---|---|---|---|
| title | string | – | App title. |
No output schema declared.
No examples provided.
studio_remove_block ~40
Remove a block from a screen. Get ids from studio_describe_project.
| Name | Type | Req | Description |
|---|---|---|---|
| blockId | string | yes | – |
| screenId | string | yes | – |
No output schema declared.
No examples provided.
studio_remove_screen ~29
Remove a screen (and its blocks) from the project.
| Name | Type | Req | Description |
|---|---|---|---|
| screenId | string | yes | – |
No output schema declared.
No examples provided.
studio_set_access ~72
Configure role-based access control (RBAC). `roles` is an array of { role, screens: "*"|string[], actions: "*"|("create"|"update"|"delete")[] }.
| Name | Type | Req | Description |
|---|---|---|---|
| defaultRole | string | – | – |
| enabled | boolean | yes | – |
| roles | array | – | – |
No output schema declared.
No examples provided.
studio_set_auth ~116
Configure the authentication starter. Options: enabled, protect, register, userAdmin, twoFactor, email, oauth (["github","google","oidc"]). register/userAdmin/oauth/2FA need the Drizzle data layer + a SQL entity; userAdmin also needs RBAC.
| Name | Type | Req | Description |
|---|---|---|---|
| boolean | – | – | |
| enabled | boolean | yes | – |
| oauth | array | – | – |
| protect | boolean | – | – |
| register | boolean | – | – |
| twoFactor | boolean | – | – |
| userAdmin | boolean | – | – |
No output schema declared.
No examples provided.
studio_set_data_layer ~45
Turn the typed Drizzle data layer (schema.ts + typed repos + drizzle-kit migrations) on or off. Applies to SQL-bound entities.
| Name | Type | Req | Description |
|---|---|---|---|
| enabled | boolean | yes | – |
No output schema declared.
No examples provided.
studio_set_deploy_target ~52
Set the deploy target: auto | vercel | netlify | cloudflare | node. Picks the SvelteKit adapter + emits provider config + a CI/CD pipeline.
| Name | Type | Req | Description |
|---|---|---|---|
| target | string | yes | – |
No output schema declared.
No examples provided.
studio_set_entity_source ~116
Bind an entity to a data source. `source` is an EntityDataSource, e.g. { "kind": "sql", "table": "customers", "dialect": "postgres" } | { "kind": "memory" } | { "kind": "pglite", "table": "..." } | { "kind": "supabase", ... } | { "kind": "rest", ... }.
| Name | Type | Req | Description |
|---|---|---|---|
| entity | string | yes | – |
| source | object | yes | The EntityDataSource. |
No output schema declared.
No examples provided.
studio_set_job ~237
Add, replace, or remove a scheduled background job. Emits a secret-guarded /api/cron route plus the schedule config for the deploy target (vercel.json crons on Vercel, a GitHub Actions schedule elsewhere). `kind`:"email" sends a summary of `entity` to `to` (needs auth email enabled); `kind`:"code" runs a body you supply. Omit `cron` to REMOVE the job.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | – | code: the handler body (TypeScript). |
| cron | string | – | 5-field cron in UTC, e.g. '0 6 * * *'. Omit to remove the job. |
| enabled | boolean | – | Default true. A disabled job keeps its handler but is skipped by the scheduled run. |
| entity | string | – | email: entity to summarize. |
| id | string | yes | Stable job id. |
| kind | string | – | – |
| name | string | – | Human label. |
| subject | string | – | email: subject line (defaults to the job name). |
| to | string | – | email: recipient address. |
No output schema declared.
No examples provided.
studio_set_screen_layout ~73
Set how a screen arranges its blocks: grid (12-column, default) | stack (single column) | split (locked resizable panes) | dock (draggable/tabbable workspace) | canvas (free-form cell placement).
| Name | Type | Req | Description |
|---|---|---|---|
| layout | string | yes | – |
| screenId | string | yes | – |
No output schema declared.
No examples provided.
studio_set_tenancy ~119
Turn multi-tenancy on/off: every row is scoped to the signed-in user's tenant, enforced SERVER-side in each API route (reads filtered, creates stamped, update/delete ownership-checked). Requires auth + the Drizzle data layer + a SQL entity; without them it degrades to off. `sharedEntities` stay global (reference/lookup tables every tenant reads).
| Name | Type | Req | Description |
|---|---|---|---|
| enabled | boolean | yes | – |
| field | string | – | Scoping column. Default 'tenantId'. |
| sharedEntities | array | – | Entities to leave global. |
No output schema declared.
No examples provided.
studio_set_theme ~50
Set the theme preset + mode + accent. Presets come from studio_capabilities.
| Name | Type | Req | Description |
|---|---|---|---|
| accent | string | – | Hex accent color. |
| mode | string | – | – |
| preset | string | – | – |
No output schema declared.
No examples provided.
studio_update_block ~202
Configure an EXISTING block: its config (columns, editing mode, export buttons, grouping, chart dimension/measure, rowLink, formatRules, ...), its width (span/colSpan), height, or CSS class. `config` is merged into the block's current config. Get block ids from studio_describe_project. This is how you configure a block after studio_add_block, which only adds a default one.
| Name | Type | Req | Description |
|---|---|---|---|
| blockId | string | yes | – |
| className | string | – | – |
| colSpan | number | – | Width on the 12-column grid (1-12). |
| config | object | – | Partial BlockConfig, merged in. Grid example: { "editing": "inline", "export": { "xlsx": true }, "grouping": ["region"] }. |
| height | number | – | Block height in px. |
| screenId | string | yes | – |
| span | number | – | Legacy 3-col width. |
No output schema declared.
No examples provided.
studio_update_screen ~154
Update a screen: title, route, nav entry, CSS class, or `renderMode`. Set renderMode "ssr" to emit idiomatic SvelteKit (a +page.server.ts `load` + form `actions`, progressive enhancement) instead of the default client-fetch SPA page; it applies to memory/sql-backed screens whose blocks are a single grid or read-only blocks, and falls back to "spa" otherwise.
| Name | Type | Req | Description |
|---|---|---|---|
| className | string | – | – |
| nav | object | – | { show?: boolean, label?: string }. |
| renderMode | string | – | Output shape for this screen. |
| route | string | – | – |
| screenId | string | yes | – |
| title | string | – | – |
No output schema declared.
No examples provided.
studio_validate ~24
Validate the current project. Returns any errors (block codegen) + warnings.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.