AIquila — Nextcloud MCP Server
NPM · AIQUILA-MCP · 3 COMPONENTS
Nextcloud MCP server — 345 tools: files, calendar, contacts, mail, Talk, Deck, photos, maps, notes
Available components
Last scanned (22 hours ago)
Scores higher than 93% of npm servers
Category Documents and Files
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security93
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known medium-severity CVE affects minimatch 9.0.9, reached via webdav > minimatch. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 45 of 124 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency74
- Repository check failed: the declared repository URL redirects; it must resolve directly. See how to fix → View diagnostics → Fail
- Cryptographically verified build provenance (signed, bound to elgorro/aiquila). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 2 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability81
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 23946 tokens (~69/item across 345 items; 345 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 97% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 56 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 345 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Nov 26 0
- Stability: 0.97 → pass security
- 2 Nov 26 0
- Stability: pass → 0.97 functional
- 31 Oct 26 +24
- CVE-2026-118764 affects this package: medium ▼ security
- Known CVEs: unverified → fail ▼ security
- Malware scan: unverified → pass ▲ security
- Dependency health: unverified → 0.83 ▲ functional
- 30 Oct 26 −25
- Malware scan: pass → unverified ▼ security
- Known CVEs: pass → unverified ▼ security
- Dependency health: 0.82 → unverified ▼ functional
- Security disclosure: fail → pass ▲ functional
- MCP protocol: Implements a current MCP spec version (2026-07-28). functional
- Package version: 0.4.19 → 0.5.0 functional
- 27 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- Stability: 0.97 → pass security
- 26 Oct 26 −15
- Malware scan: pass → unverified ▼ security
- Stability: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Schema quality: 20947 → 24000 ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Stability: pass → 0.97 functional
- Package version: 0.4.11 → 0.4.19 functional
- Package version: 0.4.11 → 0.4.18 functional
- 24 Oct 26 0
- Package version: 0.3.23 → 0.4.11 functional
- 20 Oct 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 4 Nov 2026 · Analysed npm/aiquila-mcp@0.5.0
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | elgorro/aiquila |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/elgorro/aiquila/.github/workflows/mcp-release.yml@refs/heads/main |
| Rekor log index | 3591551501 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:66d9c92b6c9ce09b5ef3db5037e2f50901bd725b1a968e0fa09c7a59c905f0c2f93d6cc105a08fd7af0ce3ed99880384fcefd2acbf804127c295c145a |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-g3hv-75wg-m249 | CVE-2026-118764 | medium | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 124 packages
| Packages resolved | 124 |
|---|---|
| Deprecated | 1 |
| Stale | 44 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
create_news_folder Create News Folder ~31
Create a new folder for organizing feeds in the News app.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | The folder name |
No output schema declared.
No examples provided.
create_note Create Note ~65
Create a new note in Nextcloud Notes.
| Name | Type | Req | Description |
|---|---|---|---|
| category | string | – | Category (maps to a subfolder) |
| content | string | yes | Content of the note (Markdown) |
| favorite | boolean | – | Mark as favorite |
| title | string | yes | Title of the note |
No output schema declared.
No examples provided.
create_poll Create Poll ~61
Create a new poll. Type "textPoll" for text options (e.g. lunch choices), "datePoll" for date/time options (e.g. meeting scheduling).
| Name | Type | Req | Description |
|---|---|---|---|
| title | string | yes | Poll title |
| type | string | yes | Poll type |
No output schema declared.
No examples provided.
create_project Create Project ~68
Create a new AIquila project. Projects bundle files/directories with an optional system prompt that gets injected into conversations.
| Name | Type | Req | Description |
|---|---|---|---|
| description | string | – | Project description |
| systemPrompt | string | – | System prompt to inject into conversations using this project |
| title | string | yes | Project title (required) |
No output schema declared.
No examples provided.
create_recipe Create Recipe ~213
Create a new recipe in Nextcloud Cookbook with schema.org Recipe format.
| Name | Type | Req | Description |
|---|---|---|---|
| cookTime | string | – | Cooking time in ISO 8601 duration (e.g., PT1H) |
| description | string | – | Brief description |
| image | string | – | Image URL |
| keywords | string | – | Comma-separated keywords (e.g., 'pasta,italian') |
| name | string | yes | Recipe name |
| nutrition | object | – | Nutrition information |
| prepTime | string | – | Preparation time in ISO 8601 duration (e.g., PT30M) |
| recipeCategory | string | – | Category (e.g., 'Easy', 'Dessert') |
| recipeIngredient | array | – | List of ingredients |
| recipeInstructions | array | – | Step-by-step instructions |
| recipeYield | number | – | Number of servings |
| tool | array | – | Kitchen tools needed |
| totalTime | string | – | Total time in ISO 8601 duration |
| url | string | – | Source URL |
No output schema declared.
No examples provided.
create_share Create Share ~189
Create a file or folder share in Nextcloud
| Name | Type | Req | Description |
|---|---|---|---|
| expireDate | string | – | Expiration date (YYYY-MM-DD) |
| hideDownload | boolean | – | Hide download button for public link shares |
| label | string | – | Label for public link shares |
| note | string | – | Note to the share recipient |
| password | string | – | Password-protect the share |
| path | string | yes | File or folder path to share |
| permissions | number | – | Permission bitmask: 1=read, 2=update, 4=create, 8=delete, 16=share |
| shareType | number | yes | Share type: 0=user, 1=group, 3=public link, 4=email, 6=federated |
| shareWith | string | – | Recipient (required for user/group/email/federated; omit for public link) |
No output schema declared.
No examples provided.
create_system_tag Create System Tag ~75
Create a new system tag in Nextcloud. Returns the created tag info.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | The name for the new system tag |
| userAssignable | boolean | – | Whether users can assign this tag (default: true) |
| userVisible | boolean | – | Whether the tag is visible to users (default: true) |
No output schema declared.
No examples provided.
create_task Create Task ~241
Create a new task in Nextcloud Tasks with optional due date, start date, tags, location, and subtask relationships.
| Name | Type | Req | Description |
|---|---|---|---|
| calendarName | string | – | The calendar name (default: 'tasks') |
| categories | array | – | Tags/categories (e.g. ['work', 'urgent']) |
| classification | string | – | Task visibility classification |
| description | string | – | Detailed description of the task |
| dtstart | string | – | Start date in YYYYMMDD or YYYYMMDDTHHmmssZ format |
| due | string | – | Due date in YYYYMMDD or YYYYMMDDTHHmmssZ format (e.g. '20240315' or '20240315T140000Z') |
| location | string | – | Location string |
| percentComplete | number | – | Completion percentage (0-100) |
| priority | number | – | Task priority (0=undefined, 1=highest, 5=medium, 9=lowest) |
| relatedTo | string | – | Parent task UID (creates a subtask relationship) |
| summary | string | yes | The task summary/title |
| url | string | – | Custom URL reference |
No output schema declared.
No examples provided.
deck_archive_card Archive Deck Card ~62
Archive or unarchive a Deck card.
| Name | Type | Req | Description |
|---|---|---|---|
| archive | boolean | – | true to archive, false to unarchive |
| boardId | integer | yes | Board ID |
| cardId | integer | yes | Card ID |
| stackId | integer | yes | Stack ID |
No output schema declared.
No examples provided.
deck_assign_label Assign Deck Label ~74
Assign a label to a Deck card. Use deck_get_board to see available labels and their IDs.
| Name | Type | Req | Description |
|---|---|---|---|
| boardId | integer | yes | Board ID |
| cardId | integer | yes | Card ID |
| labelId | integer | yes | Label ID (from deck_get_board) |
| stackId | integer | yes | Stack ID |
No output schema declared.
No examples provided.
deck_assign_user Assign Deck User ~63
Assign a user to a Deck card.
| Name | Type | Req | Description |
|---|---|---|---|
| boardId | integer | yes | Board ID |
| cardId | integer | yes | Card ID |
| stackId | integer | yes | Stack ID |
| userId | string | yes | User ID (login name) to assign |
No output schema declared.
No examples provided.
deck_create_board Create Deck Board ~50
Create a new Deck board.
| Name | Type | Req | Description |
|---|---|---|---|
| color | string | – | Hex color without # (e.g. "0800fd"). Defaults to "0800fd" |
| title | string | yes | Board title |
No output schema declared.
No examples provided.
deck_create_card Create Deck Card ~92
Create a new card in a Deck stack.
| Name | Type | Req | Description |
|---|---|---|---|
| boardId | integer | yes | Board ID |
| description | string | – | Card description (Markdown) |
| duedate | string | – | Due date in ISO 8601 format (e.g. 2025-12-31) |
| stackId | integer | yes | Stack ID (from deck_list_stacks) |
| title | string | yes | Card title |
No output schema declared.
No examples provided.
deck_create_stack Create Deck Stack ~58
Create a new stack (column) on a Deck board.
| Name | Type | Req | Description |
|---|---|---|---|
| boardId | integer | yes | Board ID (from deck_list_boards) |
| order | integer | – | Position order (0-based) |
| title | string | yes | Stack title |
No output schema declared.
No examples provided.
deck_get_board Get Deck Board ~53
Get details of a Deck board including its labels and access control list (ACL). Use deck_list_stacks to see the columns and cards.
| Name | Type | Req | Description |
|---|---|---|---|
| boardId | integer | yes | Board ID (from deck_list_boards) |
No output schema declared.
No examples provided.
deck_get_card Get Deck Card ~67
Get full details of a Deck card including description, labels, and assigned users.
| Name | Type | Req | Description |
|---|---|---|---|
| boardId | integer | yes | Board ID |
| cardId | integer | yes | Card ID (from deck_list_stacks) |
| stackId | integer | yes | Stack ID (from deck_list_stacks) |
No output schema declared.
No examples provided.
deck_list_boards List Deck Boards ~29
List all Deck boards. Returns id, title, owner, and label count for each board.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
deck_list_stacks List Deck Stacks ~54
List all stacks (columns) of a Deck board, including the cards in each stack. This gives a full overview of the board layout.
| Name | Type | Req | Description |
|---|---|---|---|
| boardId | integer | yes | Board ID (from deck_list_boards) |
No output schema declared.
No examples provided.
deck_move_card Move Deck Card ~102
Move a card to a different stack (column) on the same board. This is the core kanban action for changing card status.
| Name | Type | Req | Description |
|---|---|---|---|
| boardId | integer | yes | Board ID |
| cardId | integer | yes | Card ID |
| order | integer | – | Position in target stack (0 = top). Defaults to 0 |
| stackId | integer | yes | Current stack ID of the card |
| targetStackId | integer | yes | Destination stack ID |
No output schema declared.
No examples provided.
deck_update_card Update Deck Card ~130
Update an existing Deck card. Provide only the fields you want to change. Fetches the current card first to preserve unchanged fields.
| Name | Type | Req | Description |
|---|---|---|---|
| boardId | integer | yes | Board ID |
| cardId | integer | yes | Card ID (from deck_list_stacks) |
| description | string | – | New description (Markdown) |
| done | boolean | – | Mark card as done |
| duedate | string|null | – | Due date (ISO 8601) or null to clear |
| stackId | integer | yes | Stack ID (from deck_list_stacks) |
| title | string | – | New title |
No output schema declared.
No examples provided.
decline_pending_share Decline Pending Share ~33
Decline a pending federated/remote share
| Name | Type | Req | Description |
|---|---|---|---|
| shareId | number | yes | The pending share ID to decline |
No output schema declared.
No examples provided.
delete Delete File or Folder ~36
Delete a file or folder from Nextcloud
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | The path in Nextcloud (e.g., '/Documents/file.txt') |
No output schema declared.
No examples provided.
delete_all_form_submissions Delete All Form Submissions ~39
Delete every submission for a form. The form itself is kept. This cannot be undone.
| Name | Type | Req | Description |
|---|---|---|---|
| formId | integer | yes | Form ID |
No output schema declared.
No examples provided.
delete_all_notifications Delete All Notifications ~17
Delete all notifications for the current user
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
delete_announcement Delete Announcement ~39
Delete an announcement by its ID. Requires the configured Nextcloud user to be an admin.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | The announcement ID to delete |
No output schema declared.
No examples provided.
delete_bookmark Delete Bookmark ~33
Delete a bookmark by its ID. This action is irreversible.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | The bookmark ID to delete |
No output schema declared.
No examples provided.
delete_bookmark_folder Delete Bookmark Folder ~36
Delete a bookmark folder and all its contents. This action is irreversible.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | The folder ID to delete |
No output schema declared.
No examples provided.
delete_bookmark_tag Delete Bookmark Tag ~35
Delete a bookmark tag. The tag will be removed from all bookmarks.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Tag name to delete |
No output schema declared.
No examples provided.
delete_contact Delete Contact ~57
Delete a contact from a Nextcloud address book by UID. This action is irreversible.
| Name | Type | Req | Description |
|---|---|---|---|
| addressBookName | string | – | The address book name (default: 'contacts') |
| uid | string | yes | The UID of the contact to delete |
No output schema declared.
No examples provided.
delete_coworker Delete Coworker ~31
Delete a coworker and its run history.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Coworker ID |
No output schema declared.
No examples provided.
delete_event Delete Calendar Event ~59
Delete a calendar event from Nextcloud by UID. This action is irreversible.
| Name | Type | Req | Description |
|---|---|---|---|
| calendarName | string | yes | The calendar name. Use list_calendars to find available calendar names. |
| uid | string | yes | The UID of the event to delete |
No output schema declared.
No examples provided.
delete_feed Delete News Feed ~33
Delete (unsubscribe from) a feed and all its items.
| Name | Type | Req | Description |
|---|---|---|---|
| feedId | number | yes | The feed ID to delete |
No output schema declared.
No examples provided.
delete_form Delete Form ~34
Permanently delete a form and all of its submissions. This cannot be undone.
| Name | Type | Req | Description |
|---|---|---|---|
| formId | integer | yes | Form ID |
No output schema declared.
No examples provided.
delete_form_option Delete Form Option ~47
Delete an option from a choice question.
| Name | Type | Req | Description |
|---|---|---|---|
| formId | integer | yes | Form ID |
| optionId | integer | yes | Option ID |
| questionId | integer | yes | Question ID |
No output schema declared.
No examples provided.
delete_form_question Delete Form Question ~36
Delete a question from a form.
| Name | Type | Req | Description |
|---|---|---|---|
| formId | integer | yes | Form ID |
| questionId | integer | yes | Question ID |
No output schema declared.
No examples provided.
delete_form_share Delete Form Share ~35
Revoke a form share.
| Name | Type | Req | Description |
|---|---|---|---|
| formId | integer | yes | Form ID |
| shareId | integer | yes | Share ID |
No output schema declared.
No examples provided.
delete_form_submission Delete Form Submission ~36
Delete a single submission by ID.
| Name | Type | Req | Description |
|---|---|---|---|
| formId | integer | yes | Form ID |
| submissionId | integer | yes | Submission ID |
No output schema declared.
No examples provided.
delete_map Delete Map ~29
Delete a custom map. This action is irreversible.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Map ID to delete |
No output schema declared.
No examples provided.
delete_map_contact_address Delete Map Contact Address ~149
Remove an address and its coordinates from a contact, taking it off the map. The contact itself is kept. Use list_map_contacts to get the exact ADR and GEO values.
| Name | Type | Req | Description |
|---|---|---|---|
| adr | string | yes | The ADR value to remove, exactly as returned by list_map_contacts |
| bookid | string | yes | Address book ID |
| geo | string | yes | The GEO value to remove, exactly as returned by list_map_contacts |
| myMapId | number | – | ID of a custom map to scope the operation to; omit for the user's default map |
| uid | string | yes | Contact UID |
| uri | string | yes | Contact URI (e.g. "abc123.vcf") |
No output schema declared.
No examples provided.
delete_map_device Delete Map Device ~36
Delete a GPS tracking device and all its location points. This action is irreversible.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Device ID to delete |
No output schema declared.
No examples provided.
delete_map_favorite Delete Map Favorite ~60
Delete a map favorite by its ID. This action is irreversible.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Favorite ID to delete |
| myMapId | number | – | ID of a custom map to scope the operation to; omit for the user's default map |
No output schema declared.
No examples provided.
delete_news_folder Delete News Folder ~32
Delete a News folder and all feeds it contains.
| Name | Type | Req | Description |
|---|---|---|---|
| folderId | number | yes | The folder ID to delete |
No output schema declared.
No examples provided.
delete_note Delete Note ~28
Delete a note by its ID.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | Note ID (from list_notes) |
No output schema declared.
No examples provided.
delete_poll Delete Poll ~29
Permanently delete a poll. This cannot be undone.
| Name | Type | Req | Description |
|---|---|---|---|
| pollId | integer | yes | Poll ID |
No output schema declared.
No examples provided.
delete_poll_comment Delete Poll Comment ~34
Delete one of your poll comments by comment ID.
| Name | Type | Req | Description |
|---|---|---|---|
| commentId | integer | yes | Comment ID (from list_poll_comments) |
No output schema declared.
No examples provided.
delete_poll_option Delete Poll Option ~34
Delete an option from a poll by option ID.
| Name | Type | Req | Description |
|---|---|---|---|
| optionId | integer | yes | Option ID (from list_poll_options) |
No output schema declared.
No examples provided.
delete_poll_share Delete Poll Share ~39
Revoke a poll share by its token (obtained from list_poll_shares or add_poll_share).
| Name | Type | Req | Description |
|---|---|---|---|
| token | string | yes | Share token |
No output schema declared.
No examples provided.
delete_project Delete Project ~35
Delete an AIquila project. Associated paths are removed and conversations referencing it are unlinked.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Project ID |
No output schema declared.
No examples provided.
delete_recipe Delete Recipe ~44
Delete a recipe from Nextcloud Cookbook. This removes the entire recipe folder including images. This action is irreversible.
| Name | Type | Req | Description |
|---|---|---|---|
| folderName | string | yes | The recipe folder name to delete |
No output schema declared.
No examples provided.
delete_share Delete Share ~28
Delete a share in Nextcloud
| Name | Type | Req | Description |
|---|---|---|---|
| shareId | number | yes | The share ID to delete |
No output schema declared.
No examples provided.
How do I install the AIquila — Nextcloud MCP Server server?
AIquila — Nextcloud MCP Server runs locally as an npm package, launched with npx -y aiquila-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · aiquila-mcp
claude mcp add elgorro-aiquila-mcp -- npx -y aiquila-mcp
What is the AIquila — Nextcloud MCP Server server?
AIquila — Nextcloud MCP Server is listed in the public MCP registry as io.github.elgorro/aiquila-mcp. Nextcloud MCP server, 345 tools: files, calendar, contacts, mail, Talk, Deck, photos, maps, notes. This page covers its npm package (aiquila-mcp).
Is the AIquila — Nextcloud MCP Server server safe to use?
AIquila — Nextcloud MCP Server scores 89 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 4 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the AIquila — Nextcloud MCP Server server expose?
AIquila — Nextcloud MCP Server exposes 345 tools: list_files, read_file, write_file, create_folder, delete, and 340 more. Their descriptions and schemas cost roughly 23,946 tokens of context every time the server is loaded.
Is the AIquila — Nextcloud MCP Server server still maintained?
AIquila — Nextcloud MCP Server is still listed as active in the MCP registry. We last reached this channel on 4 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the AIquila — Nextcloud MCP Server server under?
AIquila — Nextcloud MCP Server declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.