Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

SvGrid

NPM · @SVGRID/MCP · SCANNED AUG 20

Version-pinned Svelte 5 data grid APIs, 373 demo sources, and SvelteKit app scaffolding.

Available components

65 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 30 of 97 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency35
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
  • License check failed: the license (SEE LICENSE IN LICENSE) isn't a recognized OSI-approved license. See how to fix → Fail
  • Actively maintained (last published 0 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability77
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 2694 tokens (~81/item across 33 items; 33 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage85
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 55% of tool parameters carry a description.Partial
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @svgrid/mcp

# add to Claude Code
claude mcp add com-svgrid-svgrid -- npx -y @svgrid/mcp
# add to Codex CLI
codex mcp add com-svgrid-svgrid -- npx -y @svgrid/mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-svgrid-svgrid": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@svgrid/mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-svgrid-svgrid --command npx --arg -y --arg @svgrid/mcp
# ~/.hermes/config.yaml
mcp_servers:
  com-svgrid-svgrid:
    command: "npx"
    args: ["-y", "@svgrid/mcp"]
// mcp.json
{
  "mcpServers": {
    "com-svgrid-svgrid": {
      "command": "npx",
      "args": [
        "-y",
        "@svgrid/mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Aug 26 +10
    • Known CVEs: unverified → pass security
    • Dependency health: unverified → 0.86 functional
  • 19 Aug 26 55

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Aug 2026 · Analysed npm/@svgrid/mcp@2.3.3

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm
Dependencies 97 packages
Packages resolved 97
Stale 30
Tree resolution Complete
MCP tools · 33 exposed · ~2,694 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
get_api_reference ~46

Return the curated SvGrid public-API surface, grouped by category (components, headless, scheduler, data ops, export, row models, features, virtualization, accessibility, utilities).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

get_doc ~47

Return the markdown content of a specific documentation page by slug.

NameTypeReqDescription
slugstringyesDoc slug, e.g. "getting-started" or "help/columns/column-definitions"

No output schema declared.

No examples provided.

get_example_source ~62

Return the full .svelte source of a specific demo by id (e.g. "11-stock-market"). The source is what a user would copy into their project as-is.

NameTypeReqDescription
idstringyesDemo id, e.g. "11-stock-market"

No output schema declared.

No examples provided.

introspect_source ~144

SvGrid Studio (commercial): infer an EntitySchema from a data source. Pass a Drizzle schema file (kind:"drizzle", source: the file text) or sample rows (kind:"json", rows, name). Returns a DRAFT EntitySchema to review/refine before scaffolding code.

NameTypeReqDescription
kindstringyesSource kind.
namestringEntity/table name (required for kind:"json").
rowsarrayFor kind:"json": a non-empty array of sample row objects.
sourcestringFor kind:"drizzle": the text of a schema file containing a pgTable / sqliteTable / mysqlTable definition.

No output schema declared.

No examples provided.

list_docs ~36

List every documentation page with slug and title. Slugs use forward slashes, e.g. "help/columns/column-definitions".

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

list_examples ~34

List every SvGrid example demo with id, title, and short blurb. Use to discover what is available before fetching source.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

scaffold_entity ~158

SvGrid Studio (commercial): generate runnable SvelteKit files from an EntitySchema - the $lib schema module, a +server.ts API route (createKitHandlers), and a +page.svelte with SvGrid + SvGridEditPanel. Returns files as { path, contents, description }. AFTER writing the files, run the project's own svelte-check / tsc to verify they compile, and fix any errors. Generated bodies are wrapped in svgrid:managed markers so regeneration preserves edits outside them.

NameTypeReqDescription
apiRoutestringAPI route. Defaults to /api/{route}.
routestringRoute segment. Defaults to schema.name.
schemaobjectyesThe EntitySchema (from introspect_source, optionally edited).

No output schema declared.

No examples provided.

search_docs ~63

Case-insensitive substring search across all SvGrid docs. Returns matching slugs with a one-line excerpt around the first hit.

NameTypeReqDescription
limitnumberMax results, default 10
querystringyesFree-text query, e.g. "row virtualization"

No output schema declared.

No examples provided.

studio_add_block ~87

Add a data block to a screen. `kind` is one of the palette kinds (grid, chart, kpi, gauge, tree, tabs, accordion, pivot, board, calendar, detail, master-detail, filter, record, lookup, dashboard). Use studio_describe_project for screen ids.

NameTypeReqDescription
kindstringyesBlock kind.
screenIdstringyes

No output schema declared.

No examples provided.

studio_add_component ~87

Add a UI component block to a screen (button, badge, alert, card, stat, timeline, sparkline, chip, ...). `props` overrides the registry defaults. See studio_capabilities for component keys.

NameTypeReqDescription
componentstringyesRegistry component key.
propsobjectProp overrides (incl. _content for text).
screenIdstringyes

No output schema declared.

No examples provided.

studio_add_entity ~145

Add an entity (a table/model) + its default screen. Pass either `schema` (an EntitySchema, e.g. from introspect_source) OR an introspection request (`kind`:"drizzle" with `source`, or `kind`:"json" with `rows` + `name`).

NameTypeReqDescription
kindstringIntrospect a source instead of passing a schema.
namestringFor kind:"json": the entity name.
rowsarrayFor kind:"json": sample rows.
schemaobjectAn EntitySchema.
sourcestringFor kind:"drizzle": the schema file text.

No output schema declared.

No examples provided.

studio_add_screen ~86

Add a screen. With `entity`, adds an entity-bound screen (default grid). Without it, adds a freestanding page (needs `title`).

NameTypeReqDescription
entitystringEntity name to bind (omit for a freestanding page).
routestringRoute segment (freestanding only).
titlestringTitle (required for a freestanding page).

No output schema declared.

No examples provided.

studio_capabilities ~48

List what can be added: block kinds (grid/chart/kpi/board/...), UI component keys (button/badge/timeline/...), theme presets, data-source kinds, and deploy targets.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

studio_describe_project ~55

Return a human-readable summary of the CURRENT project: entities (+ fields + data source), screens (+ blocks, with ids), theme, RBAC, auth, data layer, deploy target. Call this to see state before editing.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

studio_generate_app ~65

Generate the full runnable SvelteKit app from the current model - every file (routes, $lib, package.json, auth, data layer, CI/CD, studio.config.json). Returns [{ path, contents }]. Write them, then run the project's svelte-check to verify.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

studio_get_config ~40

Return the current project model as a studio.config.json string. Write it to `studio.config.json` and the visual designer can Load it (round-trip).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

studio_load_project ~60

Load an existing project from a studio.config.json string (e.g. one exported earlier or shipped with a generated app). Validates it. Use this to continue editing an app the designer produced.

NameTypeReqDescription
configstringyesThe studio.config.json contents.

No output schema declared.

No examples provided.

studio_move_block ~53

Reorder a block within its screen: `dir` -1 moves it earlier, 1 later.

NameTypeReqDescription
blockIdstringyes
dirnumberyes
screenIdstringyes

No output schema declared.

No examples provided.

studio_new_project ~49

Start a NEW, empty SvGrid Studio project (the model the visual designer edits). Add entities/screens next. Replaces any project currently in this session.

NameTypeReqDescription
titlestringApp title.

No output schema declared.

No examples provided.

studio_remove_block ~40

Remove a block from a screen. Get ids from studio_describe_project.

NameTypeReqDescription
blockIdstringyes
screenIdstringyes

No output schema declared.

No examples provided.

studio_remove_screen ~29

Remove a screen (and its blocks) from the project.

NameTypeReqDescription
screenIdstringyes

No output schema declared.

No examples provided.

studio_set_access ~72

Configure role-based access control (RBAC). `roles` is an array of { role, screens: "*"|string[], actions: "*"|("create"|"update"|"delete")[] }.

NameTypeReqDescription
defaultRolestring
enabledbooleanyes
rolesarray

No output schema declared.

No examples provided.

studio_set_auth ~116

Configure the authentication starter. Options: enabled, protect, register, userAdmin, twoFactor, email, oauth (["github","google","oidc"]). register/userAdmin/oauth/2FA need the Drizzle data layer + a SQL entity; userAdmin also needs RBAC.

NameTypeReqDescription
emailboolean
enabledbooleanyes
oautharray
protectboolean
registerboolean
twoFactorboolean
userAdminboolean

No output schema declared.

No examples provided.

studio_set_data_layer ~45

Turn the typed Drizzle data layer (schema.ts + typed repos + drizzle-kit migrations) on or off. Applies to SQL-bound entities.

NameTypeReqDescription
enabledbooleanyes

No output schema declared.

No examples provided.

studio_set_deploy_target ~52

Set the deploy target: auto | vercel | netlify | cloudflare | node. Picks the SvelteKit adapter + emits provider config + a CI/CD pipeline.

NameTypeReqDescription
targetstringyes

No output schema declared.

No examples provided.

studio_set_entity_source ~116

Bind an entity to a data source. `source` is an EntityDataSource, e.g. { "kind": "sql", "table": "customers", "dialect": "postgres" } | { "kind": "memory" } | { "kind": "pglite", "table": "..." } | { "kind": "supabase", ... } | { "kind": "rest", ... }.

NameTypeReqDescription
entitystringyes
sourceobjectyesThe EntityDataSource.

No output schema declared.

No examples provided.

studio_set_job ~237

Add, replace, or remove a scheduled background job. Emits a secret-guarded /api/cron route plus the schedule config for the deploy target (vercel.json crons on Vercel, a GitHub Actions schedule elsewhere). `kind`:"email" sends a summary of `entity` to `to` (needs auth email enabled); `kind`:"code" runs a body you supply. Omit `cron` to REMOVE the job.

NameTypeReqDescription
codestringcode: the handler body (TypeScript).
cronstring5-field cron in UTC, e.g. '0 6 * * *'. Omit to remove the job.
enabledbooleanDefault true. A disabled job keeps its handler but is skipped by the scheduled run.
entitystringemail: entity to summarize.
idstringyesStable job id.
kindstring
namestringHuman label.
subjectstringemail: subject line (defaults to the job name).
tostringemail: recipient address.

No output schema declared.

No examples provided.

studio_set_screen_layout ~73

Set how a screen arranges its blocks: grid (12-column, default) | stack (single column) | split (locked resizable panes) | dock (draggable/tabbable workspace) | canvas (free-form cell placement).

NameTypeReqDescription
layoutstringyes
screenIdstringyes

No output schema declared.

No examples provided.

studio_set_tenancy ~119

Turn multi-tenancy on/off: every row is scoped to the signed-in user's tenant, enforced SERVER-side in each API route (reads filtered, creates stamped, update/delete ownership-checked). Requires auth + the Drizzle data layer + a SQL entity; without them it degrades to off. `sharedEntities` stay global (reference/lookup tables every tenant reads).

NameTypeReqDescription
enabledbooleanyes
fieldstringScoping column. Default 'tenantId'.
sharedEntitiesarrayEntities to leave global.

No output schema declared.

No examples provided.

studio_set_theme ~50

Set the theme preset + mode + accent. Presets come from studio_capabilities.

NameTypeReqDescription
accentstringHex accent color.
modestring
presetstring

No output schema declared.

No examples provided.

studio_update_block ~202

Configure an EXISTING block: its config (columns, editing mode, export buttons, grouping, chart dimension/measure, rowLink, formatRules, ...), its width (span/colSpan), height, or CSS class. `config` is merged into the block's current config. Get block ids from studio_describe_project. This is how you configure a block after studio_add_block, which only adds a default one.

NameTypeReqDescription
blockIdstringyes
classNamestring
colSpannumberWidth on the 12-column grid (1-12).
configobjectPartial BlockConfig, merged in. Grid example: { "editing": "inline", "export": { "xlsx": true }, "grouping": ["region"] }.
heightnumberBlock height in px.
screenIdstringyes
spannumberLegacy 3-col width.

No output schema declared.

No examples provided.

studio_update_screen ~154

Update a screen: title, route, nav entry, CSS class, or `renderMode`. Set renderMode "ssr" to emit idiomatic SvelteKit (a +page.server.ts `load` + form `actions`, progressive enhancement) instead of the default client-fetch SPA page; it applies to memory/sql-backed screens whose blocks are a single grid or read-only blocks, and falls back to "spa" otherwise.

NameTypeReqDescription
classNamestring
navobject{ show?: boolean, label?: string }.
renderModestringOutput shape for this screen.
routestring
screenIdstringyes
titlestring

No output schema declared.

No examples provided.

studio_validate ~24

Validate the current project. Returns any errors (block codegen) + warnings.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.