Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

EvoBurrow MCP

MCPB · EVOBURROW-MCP-2.0.0-BETA.1.MCPB

Unofficial guarded A1 Evo AcoustiX, REW, and Denon/Marantz calibration tools.

0 this week 57 Trust /100

Last scanned (18 hours ago)

Scores higher than 91% of MCPB servers

Category IoT and Hardware

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: we found no dependency list to check in this bundle: either it runs a compiled binary, whose bundled manifests we do not read, or none of the package.json, requirements.txt, pyproject.toml or uv.lock files it ships for its runtime declares a dependency we can read (a requirements.txt that only points at a setup.py project, a local path, or a nested requirements file we cannot follow counts as none).Unverified
Provenance & Transparency100
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to daredoole/evoburrow-mcp). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 68 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability53
  • AI-judged instruction clarity (fair).Partial
  • Tool/resource definitions use about 2969 tokens (~56/item across 53 items; 53 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage67
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 0% of tool parameters carry a description.Fail
Tool Safety75
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • 0 of 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "rew_launch_execute" implies "execute" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
  • An AI judge read all 53 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 25 Oct 26 0
    • Stability: 0.97 → pass security
  • 24 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 23 Oct 26 −1
    • Stability: pass → 0.93 functional
  • 17 Oct 26 0
    • Stability: 0.97 → pass security
  • 16 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 13 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Oct 26 +3
    • Source repository: unverified → pass ▲ security
    • Stability: pass → 0.83 functional
  • 10 Oct 26 −4
    • Provenance: pass → unverified ▼ security
    • Stability: 0.90 → pass security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Nov 2026 · Analysed mcpb/https://github.com/daredoole/evoburrow-mcp/releases/download/v2.0.0-beta.1/evoburrow-mcp-2.0.0-beta.1.mcpb

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem mcpb
Reason Verified
Discovered via GitHub artifact attestations
Source repo daredoole/evoburrow-mcp
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/daredoole/evoburrow-mcp/.github/workflows/release.yml@refs/tags/v2.0.0-beta.1
Rekor log index 2618321800
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha256:6c4315411daab1c1a915fc829ea79976a53085b92011114d332d500b7f4eab58

Background: How many MCP packages publish verified provenance →

MCP tools · 53 exposed · ~2,969 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
a1_analyze_measurements ~62

Analyze ADY impulse responses: timing, polarity, RMS/crest factor, and broad-band spectral balance. Interpretations are flagged separately.

NameTypeReqDescription
filestringyes–
homestring––
sampleRateHzinteger––

No output schema declared.

No examples provided.

a1_compare_calibrations ~43

Compare two OCA calibration exports channel by channel.

NameTypeReqDescription
baselinestringyes–
candidatestringyes–
homestring––

No output schema declared.

No examples provided.

a1_crossover_headroom_advisor ~63

Evaluate OCA crossovers and approximate FIR/trim headroom using supplied speaker low-frequency limits.

NameTypeReqDescription
filestringyes–
homestring––
sampleRateHzinteger––
speakersarray––

No output schema declared.

No examples provided.

a1_diagnose_logs ~41

Summarize A1 Evo session logs with evidence lines and conservative remediation.

NameTypeReqDescription
filestring––
homestring––

No output schema declared.

No examples provided.

a1_inspect_artifact ~50

Inspect an ADY, AVR, OCA, target-curve, HTML report, or session log with bounded output.

NameTypeReqDescription
filestringyes–
homestring––

No output schema declared.

No examples provided.

a1_launch ~45

Launch the interactive A1 Evo application in a separate terminal. Requires confirmation.

NameTypeReqDescription
confirmboolean––
executablestring––
homestring––

No output schema declared.

No examples provided.

a1_measurement_quality ~61

Score ADY measurement repeatability and flag timing, level, polarity, clipping, and missing-position anomalies. Scores are transparent heuristics.

NameTypeReqDescription
filestringyes–
homestring––
sampleRateHzinteger––

No output schema declared.

No examples provided.

a1_subwoofer_integration_audit ~62

Audit OCA bass-management settings and optional ADY sub/main timing without changing the AVR.

NameTypeReqDescription
calibrationstringyes–
homestring––
measurementsstring––
sampleRateHzinteger––

No output schema declared.

No examples provided.

a1_target_curve_design ~89

Design a smooth A1-compatible house curve and optionally write it to target_curves after explicit confirmation.

NameTypeReqDescription
bassBoostDbnumber––
bassShelfEndHznumber––
confirmWriteboolean––
filenamestring––
homestring––
pointsinteger––
trebleTiltDbnumber––

No output schema declared.

No examples provided.

a1_terminal_capabilities ~19

Report guarded terminal workflows and platform support.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

a1_terminal_execute ~59

Execute an exact A1 terminal plan. Requires the full plan, its token, and confirm=true.

NameTypeReqDescription
confirmbooleanyes–
planobjectyes–
timeoutMsinteger––
tokenstringyes–

No output schema declared.

No examples provided.

a1_terminal_plan ~76

Create a hash-bound plan for an A1 transfer or measurement run.

NameTypeReqDescription
actionstringyes–
artifactPathstring––
centeringCheckboolean––
executablestring––
positionsinteger––
presetinteger––
repeatsinteger––

No output schema declared.

No examples provided.

a1_validate_target_curve ~39

Validate an A1 Evo target curve and report engineering-relevant warnings.

NameTypeReqDescription
filestringyes–
homestring––

No output schema declared.

No examples provided.

a1_workspace_scan ~26

Inventory A1 Evo artifacts without modifying them.

NameTypeReqDescription
homestring––

No output schema declared.

No examples provided.

ab_test_plan ~47

Create a level-matched, preset-tracked A/B protocol without changing the AVR.

NameTypeReqDescription
baselineobjectyes–
candidateobjectyes–
trialsinteger––

No output schema declared.

No examples provided.

audio_claims ~55

Retrieve structured engineering claims filtered by topic, model, evidence type, and confidence.

NameTypeReqDescription
evidenceTypestring––
minimumConfidencestring––
modelstring––
topicstring––

No output schema declared.

No examples provided.

audio_knowledge_search ~43

Search curated, provenance-tagged A1 Evo and audio-engineering guidance bundled with this plugin.

NameTypeReqDescription
limitinteger––
querystringyes–

No output schema declared.

No examples provided.

calibration_preset_catalog ~38

Discover, hash, deduplicate, and describe generated A1 OCA calibrations without assigning device slots.

NameTypeReqDescription
homestring––

No output schema declared.

No examples provided.

calibration_preset_commit_binding ~112

Commit an exact proposed preset binding to the workspace registry. Requires matching token and confirm=true.

NameTypeReqDescription
artifactstringyes–
audysseyCurvestring––
confirmboolean––
confirmationTokenstringyes–
homestring––
hoststringyes–
intendedContentstring––
labelstring––
speakerPresetnumberyes–
statusstring––
verificationNotestring––

No output schema declared.

No examples provided.

calibration_preset_propose_binding ~109

Propose binding one exact OCA artifact hash to Denon Speaker Preset 1 or 2; does not write or control the AVR.

NameTypeReqDescription
artifactstringyes–
audysseyCurvestring––
homestring––
hoststringyes–
intendedContentstring––
labelstring––
speakerPresetnumberyes–
statusstring––
verificationNotestring––

No output schema declared.

No examples provided.

calibration_preset_status ~52

Join the local calibration registry with read-only live AVR context, including the active Speaker Preset when supported.

NameTypeReqDescription
homestring––
hoststringyes–
portinteger––

No output schema declared.

No examples provided.

calibration_report_score ~75

Score ADY, OCA, HTML, live REW, and optional AVR evidence with explicit provenance and missing-data confidence.

NameTypeReqDescription
adyFilestring––
avrHoststring––
homestring––
htmlFilestring––
ocaFilestring––

No output schema declared.

No examples provided.

denon_control ~64

Send one allowlisted Denon/Marantz command. State-changing commands require confirm=true.

NameTypeReqDescription
actionstringyes–
confirmboolean––
hoststringyes–
portinteger––
valuestring|number––

No output schema declared.

No examples provided.

denon_decode ~30

Decode Denon/Marantz text-protocol responses into structured status.

NameTypeReqDescription
linesarrayyes–

No output schema declared.

No examples provided.

denon_execute_plan ~51

Apply one exact baseline-bound AVR plan, verify every write, and roll back on partial failure.

NameTypeReqDescription
confirmboolean––
confirmationTokenstringyes–
planobjectyes–

No output schema declared.

No examples provided.

denon_probe ~39

Probe common Denon/Marantz LAN control ports without changing receiver state.

NameTypeReqDescription
hoststringyes–
timeoutMsinteger––

No output schema declared.

No examples provided.

denon_propose_changes ~62

Capture and save a baseline, then create a deterministic AVR diff and confirmation token; does not write to the receiver.

NameTypeReqDescription
changesobjectyes–
homestring––
hoststringyes–
portinteger––

No output schema declared.

No examples provided.

denon_quick_select_audit ~86

Safely recall selected Denon Quick Select slots while muted, capture their state, and restore the exact baseline. State-changing recalls require explicit confirmation.

NameTypeReqDescription
confirmRecallboolean––
confirmRecordboolean––
homestring––
hoststringyes–
portinteger––
slotsarray––

No output schema declared.

No examples provided.

denon_snapshot ~56

Read live AVR state and optionally save a workspace backup.

NameTypeReqDescription
confirmSaveboolean––
homestring––
hoststringyes–
portinteger––
saveboolean––

No output schema declared.

No examples provided.

denon_speaker_preset_audit ~64

Recall Denon Speaker Presets while muted, capture their Audyssey processing state, and restore the exact baseline.

NameTypeReqDescription
confirmboolean––
hoststringyes–
portinteger––
presetsarray––

No output schema declared.

No examples provided.

denon_status ~53

Query power, volume, mute, input, and sound mode over the Denon/Marantz text protocol.

NameTypeReqDescription
hoststringyes–
portinteger––
timeoutMsinteger––

No output schema declared.

No examples provided.

receiver_models ~36

List explicitly profiled Denon/Marantz models and capability confidence.

NameTypeReqDescription
brandstring––
modelstring––

No output schema declared.

No examples provided.

rew_audio_configure ~49

Apply an exact REW audio configuration plan. The token and confirm=true are mandatory.

NameTypeReqDescription
confirmboolean––
confirmationTokenstringyes–
planobjectyes–

No output schema declared.

No examples provided.

rew_audio_configure_plan ~93

Create a confirmation-bound plan to select REW audio driver, devices, channels, and sample rate.

NameTypeReqDescription
driverstring––
inputstring––
inputChannelstring––
inputDevicestring––
outputstring––
outputChannelstring––
outputDevicestring––
sampleRateHzinteger––

No output schema declared.

No examples provided.

rew_audio_inventory ~30

Inspect REW audio readiness, selected devices/channels, calibration file, and available choices without changing anything.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

rew_capability_negotiate ~28

Probe the live REW API and report which read-only command surfaces are available.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

rew_crossover_analysis ~64

Analyze phase agreement and predicted vector summation through a crossover band.

NameTypeReqDescription
crossoverHznumberyes–
mainIdstringyes–
ppointeger––
spanOctavesnumber––
subIdstringyes–

No output schema declared.

No examples provided.

rew_generate_trace ~53

Generate an allowlisted derived trace in live REW from selected measurements.

NameTypeReqDescription
confirmboolean––
measurementIndicesarrayyes–
parametersobject––
processNamestringyes–

No output schema declared.

No examples provided.

rew_input_level_check ~50

Monitor the connected REW microphone for a bounded period and report peak/RMS headroom. Starts capture but emits no sweep.

NameTypeReqDescription
confirmboolean––
durationMsinteger––

No output schema declared.

No examples provided.

rew_install_discover ~36

Find a local REW installation across Windows, macOS, and Linux without starting it.

NameTypeReqDescription
executablePathstring––

No output schema declared.

No examples provided.

rew_launch_execute ~47

Start the exact planned REW executable after explicit confirmation and verify its local API.

NameTypeReqDescription
confirmboolean––
confirmationTokenstringyes–
planobjectyes–

No output schema declared.

No examples provided.

rew_launch_plan ~40

Create a hash-bound plan to start the exact discovered REW executable.

NameTypeReqDescription
executablePathstring––
startupTimeoutSecondsinteger––

No output schema declared.

No examples provided.

rew_load_file ~46

Load a workspace-contained .mdat into live REW. Explicit confirmation is mandatory.

NameTypeReqDescription
confirmboolean––
filestringyes–
homestring––

No output schema declared.

No examples provided.

rew_measurement_cancel ~34

Cancel a REW measurement currently in progress. This does not change AVR calibration data.

NameTypeReqDescription
confirmboolean––

No output schema declared.

No examples provided.

rew_multiseat_analysis ~77

Analyze seat consistency, modal clusters, outliers, and estimate Schroeder frequency when room volume and RT60 are supplied.

NameTypeReqDescription
highHznumber––
idsarrayyes–
lowHznumber––
roomVolumeM3number––
rt60Secondsnumber––

No output schema declared.

No examples provided.

rew_post_measurement_execute ~68

Execute an exact post-calibration plan: configure safe sweep settings, switch/verify preset, run and label each sweep, save the MDAT, and restore the original preset.

NameTypeReqDescription
confirmboolean––
confirmationTokenstringyes–
planobjectyes–

No output schema declared.

No examples provided.

rew_post_measurement_plan ~160

Build a guarded, level-matched post-calibration sweep plan. It can switch Denon Speaker Presets and REW output channels automatically after the microphone and HDMI path are ready.

NameTypeReqDescription
avrInputstring––
avrVolumeDbnumber––
endHznumber––
homestring––
hoststringyes–
levelDbfsnumber––
maxSplDbnumber––
minSnrDbnumber––
repetitionsinteger––
runsarrayyes–
saveFilestring––
startHznumber––
sweepLengthstring––
timingReferencestring––

No output schema declared.

No examples provided.

rew_probe ~29

Check the local REW API and report version/capabilities.

NameTypeReqDescription
timeoutMsinteger––

No output schema declared.

No examples provided.

rew_save_all ~52

Save all live REW measurements to a workspace-contained MDAT file.

NameTypeReqDescription
confirmboolean––
homestring––
notestring––
saveFilestringyes–

No output schema declared.

No examples provided.

rew_trace ~70

Fetch a bounded live REW trace including magnitude/phase, group delay, distortion, decay/RT60, or impulse.

NameTypeReqDescription
idstringyes–
kindstringyes–
maxPointsinteger––
ppointeger––
smoothingstring––

No output schema declared.

No examples provided.

Install

How do I install the EvoBurrow MCP server?

EvoBurrow MCP ships as an MCPB bundle, a single file you download and open in an MCP host that supports MCPB bundles, such as Claude Desktop. The host reads the launch command from the bundle's own manifest, so there is no command to copy. The MCP registry declares no SHA-256 for this bundle, so there is no published digest to check the download against.

mcpb · evoburrow-mcp-2.0.0-beta.1.mcpb

Download bundle

The MCP registry declares no SHA-256 for this bundle, so there is no published digest to check it against. Open it with an MCPB-capable host such as Claude Desktop.

Common questions

What is the EvoBurrow MCP server?

EvoBurrow MCP is listed in the public MCP registry as io.github.daredoole/evoburrow-mcp. Unofficial guarded A1 Evo AcoustiX, REW, and Denon/Marantz calibration tools. This page covers its MCPB bundle (https://github.com/daredoole/evoburrow-mcp/releases/download/v2.0.0-beta.1/evoburrow-mcp-2.0.0-beta.1.mcpb).

Is the EvoBurrow MCP server safe to use?

EvoBurrow MCP scores 57 out of 100 on VerifyMCP. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the EvoBurrow MCP server expose?

EvoBurrow MCP exposes 53 tools: rew_install_discover, rew_launch_plan, rew_launch_execute, rew_capability_negotiate, a1_workspace_scan, and 48 more. Their descriptions and schemas cost roughly 2,969 tokens of context every time the server is loaded.

What licence is the EvoBurrow MCP server under?

EvoBurrow MCP declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.