AIquila — Nextcloud MCP Server
NPM · AIQUILA-MCP · 3 COMPONENTS
Nextcloud MCP server — 345 tools: files, calendar, contacts, mail, Talk, Deck, photos, maps, notes
Available components
Last scanned (1 hour ago)
Scores higher than 93% of npm servers
Category Documents and Files
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security93
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known medium-severity CVE affects minimatch 9.0.9, reached via webdav > minimatch. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 45 of 124 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency74
- Repository check failed: the declared repository URL redirects; it must resolve directly. See how to fix → View diagnostics → Fail
- Cryptographically verified build provenance (signed, bound to elgorro/aiquila). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 3 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability81
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 23946 tokens (~69/item across 345 items; 345 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 97% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 56 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 345 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Nov 26 0
- Stability: 0.97 → pass security
- 2 Nov 26 0
- Stability: pass → 0.97 functional
- 31 Oct 26 +24
- CVE-2026-118764 affects this package: medium ▼ security
- Known CVEs: unverified → fail ▼ security
- Malware scan: unverified → pass ▲ security
- Dependency health: unverified → 0.83 ▲ functional
- 30 Oct 26 −25
- Malware scan: pass → unverified ▼ security
- Known CVEs: pass → unverified ▼ security
- Dependency health: 0.82 → unverified ▼ functional
- Security disclosure: fail → pass ▲ functional
- MCP protocol: Implements a current MCP spec version (2026-07-28). functional
- Package version: 0.4.19 → 0.5.0 functional
- 27 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- Stability: 0.97 → pass security
- 26 Oct 26 −15
- Malware scan: pass → unverified ▼ security
- Stability: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Schema quality: 20947 → 24000 ▼ functional
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Stability: pass → 0.97 functional
- Package version: 0.4.11 → 0.4.19 functional
- Package version: 0.4.11 → 0.4.18 functional
- 24 Oct 26 0
- Package version: 0.3.23 → 0.4.11 functional
- 20 Oct 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/aiquila-mcp@0.5.0
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | elgorro/aiquila |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/elgorro/aiquila/.github/workflows/mcp-release.yml@refs/heads/main |
| Rekor log index | 3591551501 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:66d9c92b6c9ce09b5ef3db5037e2f50901bd725b1a968e0fa09c7a59c905f0c2f93d6cc105a08fd7af0ce3ed99880384fcefd2acbf804127c295c145a |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-g3hv-75wg-m249 | CVE-2026-118764 | medium | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 124 packages
| Packages resolved | 124 |
|---|---|
| Deprecated | 1 |
| Stale | 44 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
delete_task Delete Task ~53
Delete a task from Nextcloud Tasks by UID. This action is irreversible.
| Name | Type | Req | Description |
|---|---|---|---|
| calendarName | string | – | The calendar name (default: 'tasks') |
| uid | string | yes | The UID of the task to delete |
No output schema declared.
No examples provided.
delete_terms_of_service Delete Terms of Service ~50
Delete a single terms of service entry by its id (see get_terms_of_service). Requires the configured Nextcloud user to be an admin.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | The terms id to delete |
No output schema declared.
No examples provided.
delete_text_workspace Delete Text Workspace ~61
Delete the Text workspace file (Readme.md) for a folder. The folder itself is kept. No-op if the folder has no workspace.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Folder path relative to the user's root (e.g. '/Projects/Acme') |
No output schema declared.
No examples provided.
disable_app Disable App ~51
Disable an enabled Nextcloud app (preserves data but removes functionality). Requires admin privileges
| Name | Type | Req | Description |
|---|---|---|---|
| appId | string | yes | The app ID to disable (e.g., "tasks", "deck", "photos") |
No output schema declared.
No examples provided.
disable_coworker Disable Coworker ~34
Disable a coworker so it stops running on its schedule.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Coworker ID |
No output schema declared.
No examples provided.
disable_user Disable User ~43
Disable a Nextcloud user account (prevents login but preserves data). Requires admin privileges
| Name | Type | Req | Description |
|---|---|---|---|
| userId | string | yes | The user ID (login name) to disable |
No output schema declared.
No examples provided.
empty_trash Empty Trash ~22
Permanently delete all files in the trash (cannot be undone)
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
enable_app Enable App ~44
Enable a disabled Nextcloud app. Requires admin privileges
| Name | Type | Req | Description |
|---|---|---|---|
| appId | string | yes | The app ID to enable (e.g., "tasks", "deck", "photos") |
No output schema declared.
No examples provided.
enable_coworker Enable Coworker ~33
Enable a coworker so it runs on its schedule.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Coworker ID |
No output schema declared.
No examples provided.
enable_user Enable User ~37
Enable a disabled Nextcloud user account. Requires admin privileges
| Name | Type | Req | Description |
|---|---|---|---|
| userId | string | yes | The user ID (login name) to enable |
No output schema declared.
No examples provided.
export_form_submissions Export Form Submissions ~86
Export a form's submissions as a spreadsheet into the user's Nextcloud storage. Returns the destination path. Use read_file / get_file_info afterwards to work with the export.
| Name | Type | Req | Description |
|---|---|---|---|
| fileFormat | string | yes | Export file format |
| formId | integer | yes | Form ID |
| path | string | yes | Target folder path inside the user's Nextcloud (e.g. "/Exports") |
No output schema declared.
No examples provided.
export_map_devices Export Map Devices ~79
Export device location data as a GPX file to the user's Nextcloud /Maps folder.
| Name | Type | Req | Description |
|---|---|---|---|
| all | boolean | – | If true, filename is not prefixed with 'filtered-' |
| begin | number | – | Start timestamp filter |
| deviceIdList | array | yes | Device IDs to export |
| end | number | – | End timestamp filter |
No output schema declared.
No examples provided.
export_map_favorites Export Map Favorites ~92
Export favorites as a GPX file to the user's Nextcloud /Maps folder. Filter by categories and time range.
| Name | Type | Req | Description |
|---|---|---|---|
| all | boolean | – | If true, filename is not prefixed with 'filtered-' |
| begin | number | – | Start timestamp filter |
| categoryList | array | yes | Categories to export (e.g. ['Restaurant', 'Home']) |
| end | number | – | End timestamp filter |
No output schema declared.
No examples provided.
export_map_route Export Map Route ~121
Export a route or track as a GPX file to the user's Nextcloud /Maps folder.
| Name | Type | Req | Description |
|---|---|---|---|
| coords | array | yes | Ordered list of coordinates |
| myMapId | number | – | Target map ID (defaults to /Maps folder) |
| name | string | yes | Route name (used as filename) |
| totDist | number | – | Total distance (for metadata) |
| totTime | number | – | Total time (for metadata) |
| type | string | yes | GPX structure type: 'route' (<rte>) or 'track' (<trk>) |
No output schema declared.
No examples provided.
extract_archive Extract Archive ~79
Extract a zip archive in Nextcloud into a destination folder. Runs server-side.
| Name | Type | Req | Description |
|---|---|---|---|
| archive | string | yes | Path to the .zip file (e.g., '/Documents/backup.zip') |
| destination | string | yes | Folder to extract into (e.g., '/Documents/restored') |
| overwrite | boolean | – | Whether to overwrite entries that already exist |
No output schema declared.
No examples provided.
generate_image Generate Image ~97
Generate an image from a text prompt using Nextcloud's text-to-image AI provider (e.g. Stable Diffusion via LocalAI). Returns the task ID; use get_task_result to check completion.
| Name | Type | Req | Description |
|---|---|---|---|
| prompt | string | yes | Text description of the image to generate |
| savePath | string | – | Optional Nextcloud path to save the generated image (e.g. '/Photos/generated.png'). If omitted, only the task ID is returned. |
No output schema declared.
No examples provided.
generate_social_share_links Generate Social Share Links ~125
Generate social-network share URLs (email, X/Twitter, Facebook, Telegram, WhatsApp, Bluesky, Diaspora) for an existing Nextcloud public-link share. Only networks whose socialsharing_<network> app is enabled are returned. Provide either share_id or path.
| Name | Type | Req | Description |
|---|---|---|---|
| networks | array | – | Optional filter, e.g. ["twitter","email"]. Defaults to all enabled networks. |
| path | string | – | File/folder path; its public-link share is used (must already exist) |
| share_id | number | – | ID of an existing public-link share |
No output schema declared.
No examples provided.
get_app_info Get App Info ~46
Get detailed information about a specific Nextcloud app. Requires admin privileges
| Name | Type | Req | Description |
|---|---|---|---|
| appId | string | yes | The app ID (e.g., "tasks", "deck", "photos") |
No output schema declared.
No examples provided.
get_bookmark Get Bookmark ~30
Get full details of a single bookmark by its ID.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | The bookmark ID |
No output schema declared.
No examples provided.
get_bookmark_folder_contents Get Bookmark Folder Contents ~61
Get the contents of a bookmark folder (bookmarks and subfolders).
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | The folder ID (-1 for root) |
| layers | number | – | Depth of subfolder levels to include (default 0 = direct children only) |
No output schema declared.
No examples provided.
get_contact Get Contact ~70
Get detailed information about a single contact by its UID, including all properties like name, email, phone, address, organization, birthday, notes, and groups.
| Name | Type | Req | Description |
|---|---|---|---|
| addressBookName | string | – | The address book name (default: 'contacts') |
| uid | string | yes | The UID of the contact |
No output schema declared.
No examples provided.
get_coworker Get Coworker ~43
Get a single coworker by ID, including its schedule, last run status, full options and prompt.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Coworker ID |
No output schema declared.
No examples provided.
get_coworker_run Get Coworker Run ~63
Get one coworker run in full: status, duration, complete summary, error and its per-item log.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Coworker ID |
| runId | number | yes | Run ID (see get_coworker_runs) |
No output schema declared.
No examples provided.
get_coworker_runs Get Coworker Runs ~71
Get recent run history (progress, status, summary) for a coworker. Use get_coworker_run for the full summary and log of one run.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Coworker ID |
| limit | number | – | Max runs to return (default 20) |
No output schema declared.
No examples provided.
get_event Get Calendar Event ~64
Get detailed information about a single calendar event by its UID, including full description, attendees, and recurrence rules.
| Name | Type | Req | Description |
|---|---|---|---|
| calendarName | string | yes | The calendar name. Use list_calendars to find available calendar names. |
| uid | string | yes | The UID of the event |
No output schema declared.
No examples provided.
get_file_content Get File Content ~62
Read file content from Nextcloud with mime type info. Returns text for text files, base64 for binary files (images, PDFs, etc.). Images are returned as MCP image content for Claude vision.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | The file path in Nextcloud |
No output schema declared.
No examples provided.
get_file_info Get File Info ~54
Get detailed file metadata from Nextcloud (name, size, mime type, modified date, permissions, etc.)
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | The file or folder path in Nextcloud (e.g., '/Documents/report.pdf') |
No output schema declared.
No examples provided.
get_file_tags Get File Tags ~46
Get the personal tags assigned to a file or folder in Nextcloud
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | The file or folder path in Nextcloud (e.g., '/Photos/test.png') |
No output schema declared.
No examples provided.
get_form Get Form ~41
Get full details for a form by ID, including questions, options, shares, and metadata.
| Name | Type | Req | Description |
|---|---|---|---|
| formId | integer | yes | Form ID (from list_forms) |
No output schema declared.
No examples provided.
get_form_submission Get Form Submission ~39
Get a single submission with all of its answers.
| Name | Type | Req | Description |
|---|---|---|---|
| formId | integer | yes | Form ID |
| submissionId | integer | yes | Submission ID |
No output schema declared.
No examples provided.
get_group_info Get Group Info ~44
Get detailed information about a specific Nextcloud group. Requires admin or sub-admin privileges
| Name | Type | Req | Description |
|---|---|---|---|
| groupId | string | yes | The group ID (name) to get information about |
No output schema declared.
No examples provided.
get_local_time Get Local Time ~45
Get the current local time and timezone of the MCP server. Call this to establish a time reference before creating or listing calendar events, or to resolve scheduling ambiguities with the user.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_map_device_points Get Map Device Points ~85
Get GPS location points for a specific device. Supports time filtering and pagination.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Device ID |
| limit | number | – | Maximum number of points to return (default 10000) |
| offset | number | – | Number of points to skip (default 0) |
| pruneBefore | number | – | Unix timestamp — only return points after this time |
No output schema declared.
No examples provided.
get_map_photo_job_status Get Map Photo Job Status ~37
Get the status of the background job that scans photos for GPS coordinates. Useful after uploading photos to see whether geolocation has finished.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_map_track Get Map Track ~42
Get full details and content of a track by its ID. Returns metadata and the raw GPX/KML file content.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Track ID |
No output schema declared.
No examples provided.
get_note Get Note ~32
Get the full content of a note by its ID.
| Name | Type | Req | Description |
|---|---|---|---|
| id | integer | yes | Note ID (from list_notes) |
No output schema declared.
No examples provided.
get_notification Get Notification ~27
Get details of a specific notification by ID
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | The notification ID |
No output schema declared.
No examples provided.
get_object_activity Get Object Activity ~97
List the activity history for a single object, e.g. one file. Use object_type 'files' with a file ID to see what happened to that file.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | – | Maximum number of activities to return (default 50) |
| object_id | string | yes | The object ID (e.g. the Nextcloud file ID) |
| object_type | string | – | The object type to filter by (default 'files') |
No output schema declared.
No examples provided.
get_out_of_office Get Out-of-Office Status ~47
Get a user's current out-of-office / absence status (NC 28+)
| Name | Type | Req | Description |
|---|---|---|---|
| userId | string | – | User ID to check (defaults to the configured Nextcloud user) |
No output schema declared.
No examples provided.
get_poll Get Poll ~43
Get full details of a poll by ID: configuration, owner, status, and current user state.
| Name | Type | Req | Description |
|---|---|---|---|
| pollId | integer | yes | Poll ID (from list_polls) |
No output schema declared.
No examples provided.
get_project Get Project ~31
Get details of an AIquila project including its file/directory paths.
| Name | Type | Req | Description |
|---|---|---|---|
| id | number | yes | Project ID |
No output schema declared.
No examples provided.
get_recipe Get Recipe ~42
Get full details of a recipe from Nextcloud Cookbook by its folder name.
| Name | Type | Req | Description |
|---|---|---|---|
| folderName | string | yes | The recipe folder name (as shown in list_recipes) |
No output schema declared.
No examples provided.
get_registration_settings Get Registration Settings ~53
Read the Nextcloud Registration app settings (self-service signup configuration), such as allowed email domains, whether admin approval is required, and the default group for new users. Requires the configured Nextcloud user to be an admin.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_share Get Share ~32
Get detailed information about a specific share by its ID
| Name | Type | Req | Description |
|---|---|---|---|
| shareId | number | yes | The share ID to retrieve |
No output schema declared.
No examples provided.
get_task_result Get AI Task Result ~69
Get the status and result of a Nextcloud AI task previously created by process_text or generate_image. Status: 1=scheduled, 2=running, 3=successful, 4=failed.
| Name | Type | Req | Description |
|---|---|---|---|
| taskId | number | yes | The task ID returned by process_text or generate_image |
No output schema declared.
No examples provided.
get_terms_of_service Get Terms of Service ~69
Read the Nextcloud Terms of Service admin configuration: all published terms (by country/language), the enforcement settings (tos_for_users, tos_on_public_shares), and the valid country and language codes that can be used when setting terms. Requires the configured Nextcloud user to be an admin.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_text_workspace Get Text Workspace ~69
Get metadata of the Text workspace file (Readme.md) for a folder. Returns the file's id, name, mimetype and path, or reports that no workspace exists yet.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Folder path relative to the user's root (e.g. '/Projects/Acme') |
No output schema declared.
No examples provided.
get_text_workspace_edit_url Get Text Workspace Edit URL ~90
Get a one-shot direct-edit URL for a folder's Text workspace. Opens the live collaborative editor in a browser. The Readme.md is created automatically if it does not exist yet. Hand the URL to a human collaborator — the MCP server does not participate in the editing session.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Folder path relative to the user's root (e.g. '/Projects/Acme') |
No output schema declared.
No examples provided.
get_user_info Get User Info ~49
Get detailed information about a specific Nextcloud user. Non-admin users can only query their own user ID
| Name | Type | Req | Description |
|---|---|---|---|
| userId | string | yes | The user ID (login name) to get information about |
No output schema declared.
No examples provided.
get_user_status Get User Status ~48
Get the current user's presence status (online, away, DND, invisible, custom message)
| Name | Type | Req | Description |
|---|---|---|---|
| userId | string | – | User ID to check (defaults to the configured Nextcloud user) |
No output schema declared.
No examples provided.
How do I install the AIquila — Nextcloud MCP Server server?
AIquila — Nextcloud MCP Server runs locally as an npm package, launched with npx -y aiquila-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · aiquila-mcp
claude mcp add elgorro-aiquila-mcp -- npx -y aiquila-mcp
What is the AIquila — Nextcloud MCP Server server?
AIquila — Nextcloud MCP Server is listed in the public MCP registry as io.github.elgorro/aiquila-mcp. Nextcloud MCP server, 345 tools: files, calendar, contacts, mail, Talk, Deck, photos, maps, notes. This page covers its npm package (aiquila-mcp).
Is the AIquila — Nextcloud MCP Server server safe to use?
AIquila — Nextcloud MCP Server scores 89 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the AIquila — Nextcloud MCP Server server expose?
AIquila — Nextcloud MCP Server exposes 345 tools: list_files, read_file, write_file, create_folder, delete, and 340 more. Their descriptions and schemas cost roughly 23,946 tokens of context every time the server is loaded.
Is the AIquila — Nextcloud MCP Server server still maintained?
AIquila — Nextcloud MCP Server is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the AIquila — Nextcloud MCP Server server under?
AIquila — Nextcloud MCP Server declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.