Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

AIquila — Nextcloud MCP Server

NPM · AIQUILA-MCP · 3 COMPONENTS · SCANNED SEP 20

Nextcloud MCP server — files, calendar, contacts, mail, maps, notes, tasks & 120+ more tools

+15 this week 90 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 55 of 143 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency71
  • Repository check failed: the declared repository URL redirects; it must resolve directly. See how to fix → View diagnostics → Fail
  • Cryptographically verified build provenance (signed, bound to elgorro/aiquila). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 1 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability82
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 20947 tokens (~66/item across 316 items; 316 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage99
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 96% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 52 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 316 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the AIquila — Nextcloud MCP Server server?

AIquila — Nextcloud MCP Server runs locally as an npm package, launched with npx -y aiquila-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · aiquila-mcp

# add to Claude Code
claude mcp add elgorro-aiquila-mcp -- npx -y aiquila-mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "elgorro-aiquila-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "aiquila-mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "elgorro-aiquila-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "aiquila-mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add elgorro-aiquila-mcp -- npx -y aiquila-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "elgorro-aiquila-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "aiquila-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add elgorro-aiquila-mcp --command npx --arg -y --arg aiquila-mcp
# ~/.hermes/config.yaml
mcp_servers:
  elgorro-aiquila-mcp:
    command: "npx"
    args: ["-y", "aiquila-mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "elgorro-aiquila-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "aiquila-mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add elgorro-aiquila-mcp -t stdio -c npx -a -y aiquila-mcp
// mcp.json
{
  "mcpServers": {
    "elgorro-aiquila-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "aiquila-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 0
    • Stability: 0.97 → pass security
  • 19 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 17 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.

  • 15 Sept 26 +16
    • Malware scan: unverified → pass security
  • 14 Sept 26 −3
    • Stability: pass → 0.80 functional
  • 13 Sept 26 −15
    • Malware scan: pass → unverified security
    • Stability: 0.97 → pass security
    • Package version: 0.4.4 → 0.4.11 functional
  • 12 Sept 26 0
    • Stability: pass → 0.97 functional
    • Package version: 0.3.23 → 0.4.4 functional
  • 11 Sept 26 0
    • Stability: 0.97 → pass security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 20 Sept 2026 · Analysed npm/aiquila-mcp@0.4.11

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo elgorro/aiquila
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/elgorro/aiquila/.github/workflows/mcp-release.yml@refs/heads/main
Rekor log index 2822537744
Predicate type https://slsa.dev/provenance/v1
Subject digest sha512:970385ff9804f3694d07daca55f60bf0626141a526c4f2c176f20fed0b9c4883a4736233a85d63897f03d256efc8d531951661b2ef6b5cffe9993235e

Background: How many MCP packages publish verified provenance →

Dependencies 143 packages
Packages resolved 143
Deprecated 1
Stale 54
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 316 exposed · ~20,947 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
rename_news_folder ~38

Rename a News folder.

NameTypeReqDescription
folderIdnumberyesThe folder ID to rename
namestringyesThe new folder name

No output schema declared.

No examples provided.

reopen_poll ~29

Reopen a previously closed poll so voting can resume.

NameTypeReqDescription
pollIdintegeryesPoll ID

No output schema declared.

No examples provided.

reorder_form_options ~66

Reorder all options for a choice question. Pass the full list of option IDs in the desired order.

NameTypeReqDescription
formIdintegeryesForm ID
newOrderarrayyesFull list of option IDs in desired order
questionIdintegeryesQuestion ID

No output schema declared.

No examples provided.

reorder_form_questions ~55

Reorder all questions in a form. Pass the full list of question IDs in the desired order.

NameTypeReqDescription
formIdintegeryesForm ID
newOrderarrayyesFull list of question IDs in desired order

No output schema declared.

No examples provided.

reset_map_photo_coords ~47

Remove GPS coordinates from one or more photos.

NameTypeReqDescription
myMapIdnumberCustom map ID to scope to
pathsarrayyesFile paths in Nextcloud storage

No output schema declared.

No examples provided.

reset_registration_setting ~52

Reset a Nextcloud Registration app setting to its default by deleting the stored value. Requires the configured Nextcloud user to be an admin.

NameTypeReqDescription
keystringyesThe Registration config key to reset to its default

No output schema declared.

No examples provided.

reset_terms_signatures ~52

Reset ALL users' terms of service signatures org-wide, forcing every user to accept the terms again on next login. This is destructive and cannot be undone. Requires the configured Nextcloud user to be an admin.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

restore_file_version ~58

Restore a previous version of a file (creates a new current version from the old one)

NameTypeReqDescription
fileIdnumberyesThe Nextcloud internal file ID
versionIdstringyesThe version identifier (from list_file_versions output)

No output schema declared.

No examples provided.

restore_from_trash ~51

Restore a file from the trash to its original location (use the Key from list_trash)

NameTypeReqDescription
trashKeystringyesThe trash item key (from the Key field in list_trash output)

No output schema declared.

No examples provided.

resume_coworker ~28

Resume a paused coworker.

NameTypeReqDescription
idnumberyesCoworker ID

No output schema declared.

No examples provided.

run_coworker ~37

Run a coworker immediately (synchronously) and return the run result.

NameTypeReqDescription
idnumberyesCoworker ID

No output schema declared.

No examples provided.

run_occ ~215

Execute an allowlisted Nextcloud OCC command on the server and return the output. Only commands in the allowlist may be run (configurable via MCP_OCC_ALLOWLIST env var). Allowed by default: status, app:list, app:check-code, config:app:get, setupchecks, integrity:check-core, integrity:check-app, user:list, user:info, group:list, maintenance:mode, maintenance:mimetype:update-db, db:add-missing-indices, db:add-missing-columns, db:add-missing-primary-keys, files:scan, files:cleanup, trashbin:cleanup, update:check, notification:generate, theming:config.

NameTypeReqDescription
argsarrayOptional arguments for the command (e.g., ["--shipped=false", "--output=json"])
commandstringyesThe OCC command to execute (e.g., "app:list", "config:list", "setupchecks")
timeoutnumberTimeout in seconds (default: 120, max: 600)

No output schema declared.

No examples provided.

run_setup_checks ~32

Run Nextcloud setup checks to verify system configuration (security, performance, PHP modules, etc.). Requires admin privileges

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

search_files ~69

Search for files in Nextcloud by name pattern and/or mime type

NameTypeReqDescription
mimestringFilter by mime type prefix (e.g., 'image/', 'text/plain')
pathstringBase directory to search in
querystringyesSearch query (file name pattern)

No output schema declared.

No examples provided.

search_map_contacts ~48

Search address book contacts by name, to find the bookid/uri/uid needed to place a contact on the map.

NameTypeReqDescription
querystringyesSearch term matched against contact display names

No output schema declared.

No examples provided.

search_sharees ~115

Search for valid share recipients (users, groups, emails, federated users, circles, rooms)

NameTypeReqDescription
itemTypestringItem type (default: file)
searchstringyesSearch query for recipient name/email
shareTypesarrayShare types to include: 0=user, 1=group, 3=public, 4=email, 6=federated, 7=circle, 10=room (default: [0,1,3,4,6])

No output schema declared.

No examples provided.

set_file_tags ~83

Set personal tags on a file or folder in Nextcloud. Replaces all existing personal tags. Use an empty array to clear all tags.

NameTypeReqDescription
pathstringyesThe file or folder path in Nextcloud (e.g., '/Photos/test.png')
tagsarrayyesArray of tag names to set (e.g., ['Wallpapers', 'Nature'])

No output schema declared.

No examples provided.

set_out_of_office ~134

Set an out-of-office / absence period with status message (NC 28+)

NameTypeReqDescription
firstDaystringyesFirst day of absence (YYYY-MM-DD)
lastDaystringyesLast day of absence (YYYY-MM-DD)
messagestringyesDetailed absence message shown to others
replacementUserIdstringUser ID of the replacement/delegate during absence
statusstringyesShort status label (e.g. "Vacation", "Sick leave")
userIdstringUser ID to set absence for (defaults to the configured Nextcloud user)

No output schema declared.

No examples provided.

set_poll_subscription ~58

Subscribe or unsubscribe the current user to poll notifications (new votes, comments). Use subscribe=true to subscribe, false to unsubscribe.

NameTypeReqDescription
pollIdintegeryesPoll ID
subscribebooleanyestrue to subscribe, false to unsubscribe

No output schema declared.

No examples provided.

set_terms_of_service ~137

Create or update the terms of service for a given country/language pair. If terms already exist for that pair they are replaced, otherwise new terms are created. Use get_terms_of_service to discover valid country/language codes; an invalid code returns an error (HTTP 417). Requires the configured Nextcloud user to be an admin.

NameTypeReqDescription
bodystringyesThe terms text (markdown: headers, formatting, lists, links)
countryCodestring2-letter region code, or "--" for global (default)
languageCodestringyes2-letter language code (e.g. "en")

No output schema declared.

No examples provided.

set_user_status ~39

Set the current user's status type (online, away, dnd, invisible, offline)

NameTypeReqDescription
statusTypestringyesStatus type to set

No output schema declared.

No examples provided.

set_user_status_message ~81

Set a custom status message with optional emoji icon and auto-clear time

NameTypeReqDescription
clearAtnumberUnix timestamp when the message should auto-clear (null = never)
messagestringyesCustom status message text
statusIconstringStatus emoji icon (e.g. "☕", "🏠", "🤒")

No output schema declared.

No examples provided.

share_map_category ~39

Share a favorite category via a public link. The category must already contain at least one favorite.

NameTypeReqDescription
categorystringyesCategory name to share

No output schema declared.

No examples provided.

share_map_device ~74

Share a GPS device via a public link, limited to a time window. Returns the share token.

NameTypeReqDescription
idnumberyesDevice ID to share
timestampFromnumberyesUnix timestamp — start of the shared time window
timestampTonumberyesUnix timestamp — end of the shared time window

No output schema declared.

No examples provided.

star_item ~28

Star (favorite) a single news item.

NameTypeReqDescription
itemIdnumberyesThe item ID

No output schema declared.

No examples provided.

system_status ~22

Get Nextcloud system status including version, installation path, and configuration

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

talk_add_participant ~66

Add a user, group, or email participant to a Talk conversation.

NameTypeReqDescription
newParticipantstringyesUser ID, group ID, or email address to add
sourcestringParticipant source type (default 'users')
tokenstringyesConversation token

No output schema declared.

No examples provided.

talk_create_conversation ~78

Create a new Talk conversation. One-on-one requires an invite user, group/public require a name.

NameTypeReqDescription
invitestringUser ID to invite (required for one-on-one)
roomNamestringName for the conversation (required for group and public)
roomTypestringyesType of conversation to create

No output schema declared.

No examples provided.

talk_create_poll ~100

Create a poll in a Talk conversation. Requires at least 2 options.

NameTypeReqDescription
maxVotesnumberMaximum number of votes per participant (0 = unlimited, default 1)
optionsarrayyesPoll options (minimum 2)
questionstringyesPoll question
resultModestringResult visibility: 'public' (default) or 'hidden' until closed
tokenstringyesConversation token

No output schema declared.

No examples provided.

talk_delete_message ~40

Delete a message from a Talk conversation.

NameTypeReqDescription
messageIdnumberyesID of the message to delete
tokenstringyesConversation token

No output schema declared.

No examples provided.

talk_list_conversations ~48

List all Talk conversations the user has access to. Returns conversation tokens, names, types, and unread message counts.

NameTypeReqDescription
includeStatusbooleanInclude user status information (default false)

No output schema declared.

No examples provided.

talk_list_messages ~111

List recent messages in a Talk conversation. Returns message content with timestamps and authors. Reading does not mark the conversation as read.

NameTypeReqDescription
includeSystemMessagesbooleanInclude system messages like join/leave notifications (default false)
lastKnownMessageIdnumberMessage ID to start from for pagination (returns messages before this ID)
limitnumberNumber of messages to retrieve (default 50, max 200)
tokenstringyesConversation token (from list_conversations)

No output schema declared.

No examples provided.

talk_list_participants ~30

List all participants in a Talk conversation with their roles.

NameTypeReqDescription
tokenstringyesConversation token

No output schema declared.

No examples provided.

talk_react_to_message ~69

Add an emoji reaction to a message in a Talk conversation.

NameTypeReqDescription
messageIdnumberyesID of the message to react to
reactionstringyesEmoji reaction (e.g. '👍', '❤️', '🎉')
tokenstringyesConversation token

No output schema declared.

No examples provided.

talk_remove_participant ~52

Remove a participant from a Talk conversation by their attendee ID (from list_participants).

NameTypeReqDescription
attendeeIdnumberyesAttendee ID of the participant to remove
tokenstringyesConversation token

No output schema declared.

No examples provided.

talk_send_message ~75

Send a message to a Talk conversation. Supports replies and silent messages that do not trigger notifications.

NameTypeReqDescription
messagestringyesMessage text to send
replyTonumberMessage ID to reply to
silentbooleanSend without triggering notifications (default false)
tokenstringyesConversation token

No output schema declared.

No examples provided.

transfer_form_owner ~55

Transfer ownership of a form to another Nextcloud user. The new owner must have access to the Forms app.

NameTypeReqDescription
formIdintegeryesForm ID
ownerIdstringyesUser ID of the new owner

No output schema declared.

No examples provided.

translate_text ~94

Translate text between languages using Nextcloud's configured translation provider. If called without text, returns available language pairs.

NameTypeReqDescription
fromLanguagestringSource language code (e.g. 'en', 'de', 'fr')
textstringText to translate. Omit to list available language pairs.
toLanguagestringTarget language code (e.g. 'en', 'de', 'fr')

No output schema declared.

No examples provided.

unified_search ~124

Search across all Nextcloud apps (files, calendar, contacts, mail, notes, etc.) using Unified Search. Optionally filter by a specific provider ID. Without a provider, searches the top providers in parallel.

NameTypeReqDescription
cursorstringPagination cursor returned from a previous search
limitnumberMaximum results per provider (default: 5)
providerstringSearch a specific provider by ID (e.g. "files", "calendar", "contacts"). Omit to search across all providers.
querystringyesThe search query

No output schema declared.

No examples provided.

uninstall_app ~50

Remove a Nextcloud app via occ app:remove

NameTypeReqDescription
appIdstringyesApp ID to remove (e.g. "tasks")
keepDatabooleanKeep app data after removal

No output schema declared.

No examples provided.

unshare_map_category ~32

Remove the public link share from a favorite category.

NameTypeReqDescription
categorystringyesCategory name to unshare

No output schema declared.

No examples provided.

unstar_item ~29

Remove the star from a single news item.

NameTypeReqDescription
itemIdnumberyesThe item ID

No output schema declared.

No examples provided.

update_bookmark ~88

Update an existing bookmark. Only provided fields are changed.

NameTypeReqDescription
descriptionstringNew description
foldersarrayNew folder IDs (replaces existing folders)
idnumberyesThe bookmark ID to update
tagsarrayNew tags (replaces existing tags)
titlestringNew title
urlstringNew URL

No output schema declared.

No examples provided.

update_bookmark_folder ~61

Update a bookmark folder (rename or move to a different parent).

NameTypeReqDescription
idnumberyesThe folder ID to update
parent_foldernumberNew parent folder ID (-1 for root)
titlestringNew folder name

No output schema declared.

No examples provided.

update_contact ~245

Update an existing contact's fields by UID. Uses CardDAV ETag-based optimistic concurrency. Only provided fields are changed.

NameTypeReqDescription
addressBookNamestringThe address book name (default: 'contacts')
addressesarrayReplace all addresses with these
birthdaystring|nullNew birthday (YYYY-MM-DD or YYYYMMDD), or null to remove
categoriesarrayReplace all groups/categories with these
emailsarrayReplace all emails with these
firstNamestring|nullNew first name, or null to clear
fullNamestringNew full display name
lastNamestring|nullNew last name, or null to clear
notestring|nullNew notes, or null to remove
orgstring|nullNew organization, or null to remove
phonesarrayReplace all phone numbers with these
titlestring|nullNew job title, or null to remove
uidstringyesThe UID of the contact to update
urlstring|nullNew website URL, or null to remove

No output schema declared.

No examples provided.

update_coworker ~115

Update a coworker's configuration (title, provider, input folder, schedule, options).

NameTypeReqDescription
cronSchedulestring
idnumberyesCoworker ID
inputPathstring
maxTagsnumber
modelstringModel id; omit to use the provider's default
providerstringProvider id; "" unpins so the coworker follows the owner setting
recursiveboolean
titlestring

No output schema declared.

No examples provided.

update_event ~351

Update an existing calendar event's fields by UID. Uses CalDAV ETag-based optimistic concurrency.

NameTypeReqDescription
accessClassstringNew classification
alarmnumber|nullSingle reminder in minutes before the event, or null to remove all existing alarms. For multiple reminders use alarms[].
alarmsarrayMultiple reminders in minutes before the event (e.g. [1440, 60]). Replaces existing alarms; combined with alarm if both are set.
attendeesReplace attendees list, or null to remove all attendees
calendarNamestringyesThe calendar name. Use list_calendars to find available calendar names.
categoriesarrayReplace all tags with these
descriptionstring|nullNew description, or null to remove
dtendstring|nullNew end date/time, or null to remove
dtstartstringNew start date/time (YYYYMMDD or YYYYMMDDTHHmmssZ)
locationstring|nullNew location, or null to remove
rrulestring|nullNew recurrence rule, or null to remove
statusstringNew status
summarystringNew event title
transpstringNew transparency
tzidstringIANA time zone (e.g. "Europe/Berlin") for the updated dtstart/dtend. When set, a VTIMEZONE block is added (if missing) and DTSTART/DTEND use TZID instead of UTC. Required for iOS/Thunderbird CalDAV s…
uidstringyesThe UID of the event to update

No output schema declared.

No examples provided.

update_form ~128

Update form properties. Only provided fields are changed. state: 0=active, 1=closed, 2=archived. expires=0 disables expiration.

NameTypeReqDescription
allowEditSubmissionsboolean
descriptionstring
expiresintegerUnix timestamp; 0 = no expiration
formIdintegeryesForm ID
isAnonymousboolean
showExpirationboolean
state
submissionMessagestring
submitMultipleboolean
titlestring

No output schema declared.

No examples provided.

update_form_option ~65

Update a choice option's text (and optionally its order).

NameTypeReqDescription
formIdintegeryesForm ID
optionIdintegeryesOption ID
orderinteger
questionIdintegeryesQuestion ID
textstring

No output schema declared.

No examples provided.

update_form_question ~102

Update question properties (text, requirement, type, etc.). Only provided fields are changed.

NameTypeReqDescription
extraSettingsobjectQuestion-type-specific settings (e.g. validationRegex, allowedFileTypes)
formIdintegeryesForm ID
isRequiredboolean
namestringInternal name / shortcode
questionIdintegeryesQuestion ID
textstring
typestring

No output schema declared.

No examples provided.

Common questions

What is the AIquila — Nextcloud MCP Server server?

AIquila — Nextcloud MCP Server is listed in the public MCP registry as io.github.elgorro/aiquila-mcp. Nextcloud MCP server, files, calendar, contacts, mail, maps, notes, tasks & 120+ more tools. This page covers its npm package (aiquila-mcp).

Is the AIquila — Nextcloud MCP Server server safe to use?

AIquila — Nextcloud MCP Server scores 90 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the AIquila — Nextcloud MCP Server server expose?

AIquila — Nextcloud MCP Server exposes 316 tools: list_files, read_file, write_file, create_folder, delete, and 311 more. Their descriptions and schemas cost roughly 20,947 tokens of context every time the server is loaded.

Is the AIquila — Nextcloud MCP Server server still maintained?

AIquila — Nextcloud MCP Server is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the AIquila — Nextcloud MCP Server server under?

AIquila — Nextcloud MCP Server declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.