Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

AIquila — Nextcloud MCP Server

NPM · AIQUILA-MCP · 3 COMPONENTS · SCANNED AUG 3

Nextcloud MCP server — files, calendar, contacts, mail, maps, notes, tasks & 120+ more tools

+35 this week 75 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87
  • No malware found by supply-chain analysis.Pass
  • Only part of the dependency tree could be resolved (143 of 147), so this covers what we could see, not the whole tree.Partial
  • No install/post-install scripts declared.Pass
  • Only part of the dependency tree could be resolved (143 of 147), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency71
  • Repository check failed: the declared repository URL redirects; it must resolve directly. See how to fix → View diagnostics → Fail
  • Cryptographically verified build provenance (signed, bound to elgorro/aiquila). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 2 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability77
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 19161 tokens (~64/item across 296 items; 296 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
  • Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 96% of tool parameters carry a description.Partial
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · aiquila-mcp

# add to Claude Code
claude mcp add elgorro-aiquila-mcp -- npx -y aiquila-mcp
# add to Codex CLI
codex mcp add elgorro-aiquila-mcp -- npx -y aiquila-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "elgorro-aiquila-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "aiquila-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add elgorro-aiquila-mcp --command npx --arg -y --arg aiquila-mcp
# ~/.hermes/config.yaml
mcp_servers:
  elgorro-aiquila-mcp:
    command: "npx"
    args: ["-y", "aiquila-mcp"]
// mcp.json
{
  "mcpServers": {
    "elgorro-aiquila-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "aiquila-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 3 Aug 26 +26
    • CVE-2026-14257 no longer affects this package security
    • Known CVEs: unverified → partial security
    • Provenance: unverified → pass security
    • Install scripts: unverified → pass security
    • The attested source repository moved: elgorro/aiquila security
    • Maintenance: unverified → pass functional
    • Dependency health: unverified → partial functional
    • License: unverified → pass functional
    • Licence: MIT functional
  • 2 Aug 26 +49
    • Malware scan: unverified → pass security
    • Stability: unverified → 0.23 functional
    • Tool coverage: unverified → 100 functional
    • MCP protocol: unverified → pass functional
  • 1 Aug 26 −30
    • Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
    • Tool coverage: 100 → unverified functional
    • Capabilities: pass → unverified functional
  • 31 Jul 26 +30
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 −83
    • Known CVEs: fail → unverified security
    • Provenance: pass → unverified security
    • Malware scan: pass → unverified security
    • Install scripts: pass → unverified security
    • CVE-2026-14257 no longer affects this package security
    • The attested source repository moved: elgorro/aiquila security
    • Security disclosure: fail → unverified functional
    • License: pass → unverified functional
    • Tool coverage: 100 → unverified functional
    • Dependency health: partial → unverified functional
    • Maintenance: pass → unverified functional
    • Licence: MIT functional
  • 29 Jul 26 +64
    • CVE-2026-14257 affects this package: high security
    • Known CVEs: unverified → fail security
    • Install scripts: unverified → pass security
    • Provenance: unverified → pass security
    • The attested source repository moved: elgorro/aiquila security
    • License: unverified → pass functional
    • Tool coverage: unverified → 100 functional
    • Schema quality: unverified → excellent functional
    • Maintenance: unverified → pass functional
    • Licence: MIT functional
  • 28 Jul 26 −21
    • Tool coverage: 100 → unverified functional
    • Dependency health: unverified → partial functional
    • First check of Schema quality: unverified functional
  • 27 Jul 26 40

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:
elgorro/aiquila
Certificate issuer:
https://token.actions.githubusercontent.com
Certificate SAN:
https://github.com/elgorro/aiquila/.github/workflows/mcp-release.yml@refs/heads/main
Rekor log index:
1883073812
Predicate type:
https://slsa.dev/provenance/v1
Subject digest:
sha512:9c9f916562dd30dc67ba9eeae0886e08911e7d33281211c7e3c8111d84c192fe5fb728fa3df399beee3026d43b7cbd2f3e9b0592d3e1cd76d8fb1e8ff
Discovery method:
attestation_endpoint
Dependencies 143 packages

143 packages in the resolved dependency tree · 142 deprecated · 51 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 296 exposed · ~19,161 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
create_project ~68

Create a new AIquila project. Projects bundle files/directories with an optional system prompt that gets injected into conversations.

NameTypeReqDescription
descriptionstringProject description
systemPromptstringSystem prompt to inject into conversations using this project
titlestringyesProject title (required)

No output schema declared.

No examples provided.

create_recipe ~213

Create a new recipe in Nextcloud Cookbook with schema.org Recipe format.

NameTypeReqDescription
cookTimestringCooking time in ISO 8601 duration (e.g., PT1H)
descriptionstringBrief description
imagestringImage URL
keywordsstringComma-separated keywords (e.g., 'pasta,italian')
namestringyesRecipe name
nutritionobjectNutrition information
prepTimestringPreparation time in ISO 8601 duration (e.g., PT30M)
recipeCategorystringCategory (e.g., 'Easy', 'Dessert')
recipeIngredientarrayList of ingredients
recipeInstructionsarrayStep-by-step instructions
recipeYieldnumberNumber of servings
toolarrayKitchen tools needed
totalTimestringTotal time in ISO 8601 duration
urlstringSource URL

No output schema declared.

No examples provided.

create_share ~189

Create a file or folder share in Nextcloud

NameTypeReqDescription
expireDatestringExpiration date (YYYY-MM-DD)
hideDownloadbooleanHide download button for public link shares
labelstringLabel for public link shares
notestringNote to the share recipient
passwordstringPassword-protect the share
pathstringyesFile or folder path to share
permissionsnumberPermission bitmask: 1=read, 2=update, 4=create, 8=delete, 16=share
shareTypenumberyesShare type: 0=user, 1=group, 3=public link, 4=email, 6=federated
shareWithstringRecipient (required for user/group/email/federated; omit for public link)

No output schema declared.

No examples provided.

create_system_tag ~75

Create a new system tag in Nextcloud. Returns the created tag info.

NameTypeReqDescription
namestringyesThe name for the new system tag
userAssignablebooleanWhether users can assign this tag (default: true)
userVisiblebooleanWhether the tag is visible to users (default: true)

No output schema declared.

No examples provided.

create_task ~241

Create a new task in Nextcloud Tasks with optional due date, start date, tags, location, and subtask relationships.

NameTypeReqDescription
calendarNamestringThe calendar name (default: 'tasks')
categoriesarrayTags/categories (e.g. ['work', 'urgent'])
classificationstringTask visibility classification
descriptionstringDetailed description of the task
dtstartstringStart date in YYYYMMDD or YYYYMMDDTHHmmssZ format
duestringDue date in YYYYMMDD or YYYYMMDDTHHmmssZ format (e.g. '20240315' or '20240315T140000Z')
locationstringLocation string
percentCompletenumberCompletion percentage (0-100)
prioritynumberTask priority (0=undefined, 1=highest, 5=medium, 9=lowest)
relatedTostringParent task UID (creates a subtask relationship)
summarystringyesThe task summary/title
urlstringCustom URL reference

No output schema declared.

No examples provided.

deck_archive_card ~62

Archive or unarchive a Deck card.

NameTypeReqDescription
archivebooleantrue to archive, false to unarchive
boardIdintegeryesBoard ID
cardIdintegeryesCard ID
stackIdintegeryesStack ID

No output schema declared.

No examples provided.

deck_assign_label ~74

Assign a label to a Deck card. Use deck_get_board to see available labels and their IDs.

NameTypeReqDescription
boardIdintegeryesBoard ID
cardIdintegeryesCard ID
labelIdintegeryesLabel ID (from deck_get_board)
stackIdintegeryesStack ID

No output schema declared.

No examples provided.

deck_assign_user ~63

Assign a user to a Deck card.

NameTypeReqDescription
boardIdintegeryesBoard ID
cardIdintegeryesCard ID
stackIdintegeryesStack ID
userIdstringyesUser ID (login name) to assign

No output schema declared.

No examples provided.

deck_create_board ~50

Create a new Deck board.

NameTypeReqDescription
colorstringHex color without # (e.g. "0800fd"). Defaults to "0800fd"
titlestringyesBoard title

No output schema declared.

No examples provided.

deck_create_card ~92

Create a new card in a Deck stack.

NameTypeReqDescription
boardIdintegeryesBoard ID
descriptionstringCard description (Markdown)
duedatestringDue date in ISO 8601 format (e.g. 2025-12-31)
stackIdintegeryesStack ID (from deck_list_stacks)
titlestringyesCard title

No output schema declared.

No examples provided.

deck_create_stack ~58

Create a new stack (column) on a Deck board.

NameTypeReqDescription
boardIdintegeryesBoard ID (from deck_list_boards)
orderintegerPosition order (0-based)
titlestringyesStack title

No output schema declared.

No examples provided.

deck_get_board ~53

Get details of a Deck board including its labels and access control list (ACL). Use deck_list_stacks to see the columns and cards.

NameTypeReqDescription
boardIdintegeryesBoard ID (from deck_list_boards)

No output schema declared.

No examples provided.

deck_get_card ~67

Get full details of a Deck card including description, labels, and assigned users.

NameTypeReqDescription
boardIdintegeryesBoard ID
cardIdintegeryesCard ID (from deck_list_stacks)
stackIdintegeryesStack ID (from deck_list_stacks)

No output schema declared.

No examples provided.

deck_list_boards ~29

List all Deck boards. Returns id, title, owner, and label count for each board.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

deck_list_stacks ~54

List all stacks (columns) of a Deck board, including the cards in each stack. This gives a full overview of the board layout.

NameTypeReqDescription
boardIdintegeryesBoard ID (from deck_list_boards)

No output schema declared.

No examples provided.

deck_move_card ~102

Move a card to a different stack (column) on the same board. This is the core kanban action for changing card status.

NameTypeReqDescription
boardIdintegeryesBoard ID
cardIdintegeryesCard ID
orderintegerPosition in target stack (0 = top). Defaults to 0
stackIdintegeryesCurrent stack ID of the card
targetStackIdintegeryesDestination stack ID

No output schema declared.

No examples provided.

deck_update_card ~127

Update an existing Deck card. Provide only the fields you want to change. Fetches the current card first to preserve unchanged fields.

NameTypeReqDescription
boardIdintegeryesBoard ID
cardIdintegeryesCard ID (from deck_list_stacks)
descriptionstringNew description (Markdown)
donebooleanMark card as done
duedateDue date (ISO 8601) or null to clear
stackIdintegeryesStack ID (from deck_list_stacks)
titlestringNew title

No output schema declared.

No examples provided.

decline_pending_share ~33

Decline a pending federated/remote share

NameTypeReqDescription
shareIdnumberyesThe pending share ID to decline

No output schema declared.

No examples provided.

delete ~36

Delete a file or folder from Nextcloud

NameTypeReqDescription
pathstringyesThe path in Nextcloud (e.g., '/Documents/file.txt')

No output schema declared.

No examples provided.

delete_all_form_submissions ~39

Delete every submission for a form. The form itself is kept. This cannot be undone.

NameTypeReqDescription
formIdintegeryesForm ID

No output schema declared.

No examples provided.

delete_all_notifications ~17

Delete all notifications for the current user

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

delete_announcement ~39

Delete an announcement by its ID. Requires the configured Nextcloud user to be an admin.

NameTypeReqDescription
idnumberyesThe announcement ID to delete

No output schema declared.

No examples provided.

delete_bookmark ~33

Delete a bookmark by its ID. This action is irreversible.

NameTypeReqDescription
idnumberyesThe bookmark ID to delete

No output schema declared.

No examples provided.

delete_bookmark_folder ~36

Delete a bookmark folder and all its contents. This action is irreversible.

NameTypeReqDescription
idnumberyesThe folder ID to delete

No output schema declared.

No examples provided.

delete_bookmark_tag ~35

Delete a bookmark tag. The tag will be removed from all bookmarks.

NameTypeReqDescription
namestringyesTag name to delete

No output schema declared.

No examples provided.

delete_contact ~57

Delete a contact from a Nextcloud address book by UID. This action is irreversible.

NameTypeReqDescription
addressBookNamestringThe address book name (default: 'contacts')
uidstringyesThe UID of the contact to delete

No output schema declared.

No examples provided.

delete_coworker ~31

Delete a coworker and its run history.

NameTypeReqDescription
idnumberyesCoworker ID

No output schema declared.

No examples provided.

delete_event ~59

Delete a calendar event from Nextcloud by UID. This action is irreversible.

NameTypeReqDescription
calendarNamestringyesThe calendar name. Use list_calendars to find available calendar names.
uidstringyesThe UID of the event to delete

No output schema declared.

No examples provided.

delete_feed ~33

Delete (unsubscribe from) a feed and all its items.

NameTypeReqDescription
feedIdnumberyesThe feed ID to delete

No output schema declared.

No examples provided.

delete_form ~34

Permanently delete a form and all of its submissions. This cannot be undone.

NameTypeReqDescription
formIdintegeryesForm ID

No output schema declared.

No examples provided.

delete_form_option ~47

Delete an option from a choice question.

NameTypeReqDescription
formIdintegeryesForm ID
optionIdintegeryesOption ID
questionIdintegeryesQuestion ID

No output schema declared.

No examples provided.

delete_form_question ~36

Delete a question from a form.

NameTypeReqDescription
formIdintegeryesForm ID
questionIdintegeryesQuestion ID

No output schema declared.

No examples provided.

delete_form_share ~35

Revoke a form share.

NameTypeReqDescription
formIdintegeryesForm ID
shareIdintegeryesShare ID

No output schema declared.

No examples provided.

delete_form_submission ~36

Delete a single submission by ID.

NameTypeReqDescription
formIdintegeryesForm ID
submissionIdintegeryesSubmission ID

No output schema declared.

No examples provided.

delete_map ~29

Delete a custom map. This action is irreversible.

NameTypeReqDescription
idnumberyesMap ID to delete

No output schema declared.

No examples provided.

delete_map_device ~36

Delete a GPS tracking device and all its location points. This action is irreversible.

NameTypeReqDescription
idnumberyesDevice ID to delete

No output schema declared.

No examples provided.

delete_map_favorite ~34

Delete a map favorite by its ID. This action is irreversible.

NameTypeReqDescription
idnumberyesFavorite ID to delete

No output schema declared.

No examples provided.

delete_news_folder ~32

Delete a News folder and all feeds it contains.

NameTypeReqDescription
folderIdnumberyesThe folder ID to delete

No output schema declared.

No examples provided.

delete_note ~28

Delete a note by its ID.

NameTypeReqDescription
idintegeryesNote ID (from list_notes)

No output schema declared.

No examples provided.

delete_poll ~29

Permanently delete a poll. This cannot be undone.

NameTypeReqDescription
pollIdintegeryesPoll ID

No output schema declared.

No examples provided.

delete_poll_comment ~34

Delete one of your poll comments by comment ID.

NameTypeReqDescription
commentIdintegeryesComment ID (from list_poll_comments)

No output schema declared.

No examples provided.

delete_poll_option ~34

Delete an option from a poll by option ID.

NameTypeReqDescription
optionIdintegeryesOption ID (from list_poll_options)

No output schema declared.

No examples provided.

delete_poll_share ~39

Revoke a poll share by its token (obtained from list_poll_shares or add_poll_share).

NameTypeReqDescription
tokenstringyesShare token

No output schema declared.

No examples provided.

delete_project ~35

Delete an AIquila project. Associated paths are removed and conversations referencing it are unlinked.

NameTypeReqDescription
idnumberyesProject ID

No output schema declared.

No examples provided.

delete_recipe ~44

Delete a recipe from Nextcloud Cookbook. This removes the entire recipe folder including images. This action is irreversible.

NameTypeReqDescription
folderNamestringyesThe recipe folder name to delete

No output schema declared.

No examples provided.

delete_share ~28

Delete a share in Nextcloud

NameTypeReqDescription
shareIdnumberyesThe share ID to delete

No output schema declared.

No examples provided.

delete_task ~53

Delete a task from Nextcloud Tasks by UID. This action is irreversible.

NameTypeReqDescription
calendarNamestringThe calendar name (default: 'tasks')
uidstringyesThe UID of the task to delete

No output schema declared.

No examples provided.

delete_terms_of_service ~50

Delete a single terms of service entry by its id (see get_terms_of_service). Requires the configured Nextcloud user to be an admin.

NameTypeReqDescription
idnumberyesThe terms id to delete

No output schema declared.

No examples provided.

delete_text_workspace ~61

Delete the Text workspace file (Readme.md) for a folder. The folder itself is kept. No-op if the folder has no workspace.

NameTypeReqDescription
pathstringyesFolder path relative to the user's root (e.g. '/Projects/Acme')

No output schema declared.

No examples provided.

disable_app ~51

Disable an enabled Nextcloud app (preserves data but removes functionality). Requires admin privileges

NameTypeReqDescription
appIdstringyesThe app ID to disable (e.g., "tasks", "deck", "photos")

No output schema declared.

No examples provided.