# MockHero (npm · @mockherodev/mcp-server)

Generate realistic relational test data — 156 field types, 22 locales, JSON/CSV/SQL, free previews.

- Trust score: 67/100 (medium)
- Change this week: +23
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `mockhero.dev`: 74/100, [markdown](https://verifymcp.io/servers/dinosaur24-mockhero/mcp-agent.md), [page](https://verifymcp.io/servers/dinosaur24-mockhero/mcp-agent)
- npm · `@mockherodev/mcp-server`: 67/100 (this document), [markdown](https://verifymcp.io/servers/dinosaur24-mockhero/mockherodev-mcp-server.md), [page](https://verifymcp.io/servers/dinosaur24-mockhero/mockherodev-mcp-server)

## Channel facts

- Registry: `npm`
- Package: `@mockherodev/mcp-server`
- Version: `0.2.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 86/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 30 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 66/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 1506 tokens (~167/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add dinosaur24-mockhero -- npx -y @mockherodev/mcp-server
```

### Codex

```bash
codex mcp add dinosaur24-mockhero -- npx -y @mockherodev/mcp-server
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "dinosaur24-mockhero": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@mockherodev/mcp-server"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add dinosaur24-mockhero --command npx --arg -y --arg @mockherodev/mcp-server
```

### Hermes

```yaml
mcp_servers:
  dinosaur24-mockhero:
    command: "npx"
    args: ["-y", "@mockherodev/mcp-server"]
```

### Other

```json
{
  "mcpServers": {
    "dinosaur24-mockhero": {
      "command": "npx",
      "args": [
        "-y",
        "@mockherodev/mcp-server"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 67, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-08-02 (score 66, +47)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [functional improvement] Schema quality: unverified → good
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Stability: unverified → 0.23
- [functional] Licence: MIT

### 2026-07-31 (score 19, −7)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 26, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 44)

First indexed and scored.

## MCP tools (9)

### `generate_test_data` (~329 tokens)

Generate realistic test data for database tables.

Send either a structured schema (tables with fields) or a plain English description.
Supports relational data with foreign keys, locale-aware names and addresses,
22 locales, 156 field types, and multiple output formats (JSON, CSV, SQL).

The killer feature: define multiple tables with "ref" fields, and all foreign key
relationships are correct — orders reference real user IDs, reviews link to real
products. One call seeds your entire database.

Auto-locale: add a "country" field as an enum with country codes (DE, FR, US, etc.)
and names, emails, phones automatically match each row's nationality.

Explicit table schemas up to 100 records can run free as a proof-of-work preview
without an API key; plain-English prompt generation, larger requests, and
production usage require a MockHero API key (see create_agent_checkout and
claim_agent_api_key for the loginless purchase flow).

Input parameters:

- `format` (string): Output format
- `locale` (string): Default locale (en, de, fr, es, ja, etc.). Auto-detected from country field if present.
- `prompt` (string): Plain English description (e.g. "50 users with German names and 200 orders linked to them"). Requires a MockHero API key.
- `seed` (number): Seed for reproducible output. Same seed + same schema = identical data.
- `sql_dialect` (string): SQL dialect (only when format=sql)
- `tables` (array): Structured schema — array of table definitions

### `generate_from_template` (~266 tokens)

Generate test data using a pre-built schema template.

Pick a template (ecommerce, blog, saas, social) and optionally adjust the scale,
locale, format, and seed. The template handles all the table definitions,
field types, and foreign key relationships for you.

Scale multiplier: 1.0 = default counts, 2.0 = double, 0.5 = half.
Example: ecommerce template at scale 2.0 generates 100 users, 200 products, etc.

Small template previews up to 100 records can run free without an API key
(use a small scale such as 0.05); larger or production usage requires a
MockHero API key (see create_agent_checkout for the loginless purchase flow).

Input parameters:

- `format` (string): Output format
- `locale` (string): Default locale (en, de, fr, es, etc.)
- `scale` (number): Scale multiplier for record counts (default 1.0). Free keyless previews are capped at 100 records — use a small scale such as 0.05.
- `seed` (number): Seed for reproducible output
- `sql_dialect` (string): SQL dialect (only when format=sql)
- `template` (string, required): Template name

### `detect_schema` (~124 tokens)

Convert an existing database schema or JSON sample into MockHero's schema format.

Send a SQL CREATE TABLE statement and get back the structured schema ready to use
with generate_test_data. Or send a sample JSON record and MockHero will infer
the field types.

This is useful when you have migration files or an existing database and want to
generate test data that matches your schema without manually writing the definition.
No API key required.

Input parameters:

- `sample_json` (object): Example JSON record to infer schema from
- `sql` (string): SQL CREATE TABLE statement(s) to convert

### `list_field_types` (~88 tokens)

List all 156 available field types for test data generation.

Returns every supported type organized by category (Identity, Location, Financial,
Temporal, Technical, Content, Logic, Social, HR, Ecommerce, Security, AI/ML,
Healthcare, Edge Cases, Special) with descriptions, parameters, and examples.

Use this to discover what types are available before building a schema.
No API key required.

### `list_templates` (~116 tokens)

List pre-built schema templates for common application patterns.

Available templates:
\- ecommerce: Customers, products, orders, order items, reviews (5 tables)
\- blog: Authors, posts, comments, tags, post_tags (5 tables)
\- saas: Organizations, members, subscriptions, invoices (4 tables)
\- social: Users, posts, likes, follows, messages (5 tables)

Each template includes realistic field types, proper foreign key relationships,
weighted enum distributions, and auto-locale detection via country fields.
No API key required.

### `estimate_agent_usage` (~270 tokens)

Estimate MockHero agent-plan cost before generating data. No login or API key is required; when MOCKHERO_API_KEY is configured the estimate uses actual daily usage.

Agent plan pricing: 500 free records per day, then $0.001 per 100 records
(rounded up per request), billed monthly through Polar as Merchant of Record.

Send the same tables/template/prompt you plan to generate. For prompt-based
estimates you must also pass estimated_records because this tool does not run
prompt-to-schema conversion.

Input parameters:

- `daily_used_before` (integer): Optional assumption for records already used today when no API key is supplied.
- `estimated_records` (integer): Required for prompt estimates because this tool does not run prompt-to-schema conversion.
- `format` (string): Output format
- `locale` (string): Default locale such as en, de, fr, es, or ja.
- `prompt` (string): Plain-English data request. Requires estimated_records.
- `scale` (number): Multiplier for template record counts.
- `seed` (number): Seed for reproducible output.
- `sql_dialect` (string): SQL dialect (only when format=sql)
- `tables` (array): Structured schema — array of table definitions
- `template` (string): Pre-built template name

### `create_agent_checkout` (~132 tokens)

Create a loginless Polar Checkout URL for MockHero's metered agent plan. Polar is the Merchant of Record for checkout, tax collection, and remittance.

No MockHero account or login is required — supply a billing email and receive a
Polar checkout URL plus a one-time claim_token. After the checkout is paid, poll
check_agent_checkout_status, then call claim_agent_api_key to receive the API key.

Agent plan: 500 free records per day, then $0.001 per 100 records, billed monthly.

Input parameters:

- `email` (string, required): Billing email for the agent or the agent operator.

### `check_agent_checkout_status` (~89 tokens)

Poll a Polar checkout created by create_agent_checkout using the returned claim_token.

Returns the checkout status (pending, paid, claimed, expired) and the next action
to take (complete_checkout, claim_api_key, already_claimed, expired). Once status
is paid, call claim_agent_api_key with the same token.

Input parameters:

- `token` (string, required): claim_token returned by create_agent_checkout.

### `claim_agent_api_key` (~92 tokens)

Claim the MockHero API key after Polar marks the loginless agent checkout as paid. The key is returned once.

Store the returned key securely and restart this MCP server with
MOCKHERO_API_KEY set (or export it in the environment) to unlock plain-English
prompt generation, requests above 100 records, and production usage.

Input parameters:

- `token` (string, required): claim_token returned by create_agent_checkout.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/dinosaur24-mockhero/mockherodev-mcp-server#diagnostics

## Score history

- 2026-08-03: 67
- 2026-08-02: 66
- 2026-08-01: 19
- 2026-07-31: 19
- 2026-07-30: 26
- 2026-07-28: 44
- 2026-07-27: 44

## Links

- npm package: https://www.npmjs.com/package/@mockherodev/mcp-server
- Socket report: https://socket.dev/npm/package/@mockherodev/mcp-server
- Repository: https://github.com/dinosaur24/mockhero
- Website: https://mockhero.dev/docs/mcp
- Changelog RSS feed: https://verifymcp.io/servers/dinosaur24-mockhero/mockherodev-mcp-server/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/dinosaur24-mockhero/mockherodev-mcp-server/changelog.json
- HTML version of this page: https://verifymcp.io/servers/dinosaur24-mockhero/mockherodev-mcp-server