io.github.git-akki/sendpookie

NPM · @SENDPOOKIE/MCP · SCANNED AUG 3

Create and send cinematic digital gifts for birthdays and anniversaries via Claude.

Available components

+25 this week 64 64 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security86

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (94 of 98), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency19

Repository check failed: the declared repository URL returned HTTP 404. See how to fix → View diagnostics → Fail
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 80 days ago).Pass
Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified

Schema Quality & AI Usability79

AI-judged instruction clarity (excellent).Pass
Tool/resource definitions use about 1349 tokens (~96/item across 14 items; 14 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage92

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
76% of tool parameters carry a description.Partial

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @sendpookie/mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add git-akki-sendpookie -- npx -y @sendpookie/mcp

# add to Codex CLI

codex mcp add git-akki-sendpookie -- npx -y @sendpookie/mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "git-akki-sendpookie": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@sendpookie/mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add git-akki-sendpookie --command npx --arg -y --arg @sendpookie/mcp

# ~/.hermes/config.yaml

mcp_servers:
  git-akki-sendpookie:
    command: "npx"
    args: ["-y", "@sendpookie/mcp"]

// mcp.json

{
  "mcpServers": {
    "git-akki-sendpookie": {
      "command": "npx",
      "args": [
        "-y",
        "@sendpookie/mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +4
- Stability: unverified → 0.27 ▲ functional
2 Aug 26 +45
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Schema quality: unverified → excellent ▲ functional
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Licence: MIT functional
1 Aug 26 +15
- Tool coverage: unverified → 100 ▲ functional
31 Jul 26 −3
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −15
- Malware scan: pass → unverified ▼ security
- Dependency health: unverified → partial ▲ functional
28 Jul 26 −21
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
27 Jul 26 39

First indexed and scored.

Show 4 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@sendpookie/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 94 packages

94 packages in the resolved dependency tree · 94 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 14 exposed · ~1,349 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

pookie_add_slide ~306

Add a new slide to a gift. The slide is appended after existing slides. Slide types and the content each expects: - hero: { headline, subheadline?, backgroundUrl? } — Opening title card. - traits: { traits: string[] } — A list of personality traits or things you love about the recipient. - photo_wall: { photos: Array<{ url, caption? }> } — A collage of photos with optional captions. - chat_replay: { messages: Array<{ sender, text, ts? }> } — Replays a chat conversation, typewriter style. - letter: { body, signedBy? } — A heartfelt letter rendered in a nice font. - voice_note: { audioUrl, transcriptText? } — Plays a recorded voice message; transcript optional. - candle_blow: {} — Interactive birthday-candle animation the recipient blows out. - gift_reveal: { giftName, giftDescription?, giftImageUrl? } — Reveals a physical or virtual gift. - thank_you: { message?, ctaLabel?, ctaUrl? } — Closing slide with optional reply CTA.

Input Output Examples

Name	Type	Req	Description
content	object	—	Slide-specific content payload. See tool description for shape per slideType.
giftId	string	yes	The Firestore document ID of the gift.
interactions	object	—	Optional interaction configuration for the slide (e.g. reaction buttons).
slideType	string	yes	The type of slide to add.

No output schema declared.

No examples provided.

pookie_create ~162

Create a new digital gift (Pookie). Returns the gift object including its id and slug. Required: recipientName. Optional: occasion (e.g. birthday, anniversary, graduation), vibe (e.g. romantic, funny, heartfelt), template, tier.

Input Output Examples

Name	Type	Req	Description
occasion	string	—	The occasion for the gift, e.g. birthday, anniversary, graduation, just-because.
recipientName	string	yes	The name of the person receiving the gift.
template	string	—	The visual template ID to use for this gift.
tier	string	—	The tier level of the gift, e.g. free, premium.
vibe	string	—	The emotional tone of the gift, e.g. romantic, funny, heartfelt, playful.

No output schema declared.

No examples provided.

pookie_delete ~51

Permanently delete a gift and all its slides. This action is irreversible. Use only when the user explicitly confirms deletion.

Input Output Examples

Name	Type	Req	Description
giftId	string	yes	The Firestore document ID of the gift to delete.

No output schema declared.

No examples provided.

pookie_edit_slide ~88

Update the content, interactions, or slideType of an existing slide. Only the fields you provide are changed.

Input Output Examples

Name	Type	Req	Description
content	object	—	—
giftId	string	yes	The Firestore document ID of the gift.
interactions	object	—	—
slideId	string	yes	The Firestore document ID of the slide to edit.
slideType	string	—	—

No output schema declared.

No examples provided.

pookie_get ~53

Get a single gift by its id, including all its slides in sort order. Use this to inspect a gift before editing or sharing it.

Input Output Examples

Name	Type	Req	Description
giftId	string	yes	The Firestore document ID of the gift.

No output schema declared.

No examples provided.

pookie_insights ~54

Get analytics for a published gift: total view count, page views, unique viewers, first viewed timestamp, and average time spent per slide.

Input Output Examples

Name	Type	Req	Description
giftId	string	yes	The Firestore document ID of the gift.

No output schema declared.

No examples provided.

pookie_list ~42

List all gifts created by the authenticated user, ordered newest first. Returns up to 50 gifts with their id, recipientName, status, slug, and timestamps.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

pookie_publish ~72

Publish a gift so the recipient can view it. Returns a shareUrl (e.g. https://sendpookie.com/g/<slug>) and publishedAt timestamp. The gift status changes from 'draft' to 'published'.

Input Output Examples

Name	Type	Req	Description
giftId	string	yes	The Firestore document ID of the gift to publish.

No output schema declared.

No examples provided.

pookie_remove_slide ~64

Remove a slide from a gift by its slideId. The remaining slides keep their existing sort order.

Input Output Examples

Name	Type	Req	Description
giftId	string	yes	The Firestore document ID of the gift.
slideId	string	yes	The Firestore document ID of the slide to remove.

No output schema declared.

No examples provided.

pookie_reorder ~87

Reorder all slides in a gift by providing the full ordered array of slide IDs. Every slide in the gift must be included; their sortOrder is reassigned to match the array index.

Input Output Examples

Name	Type	Req	Description
giftId	string	yes	The Firestore document ID of the gift.
slideIds	array	yes	All slide IDs in the desired display order, index 0 = first slide.

No output schema declared.

No examples provided.

pookie_replies ~46

Fetch thank-you replies left by the recipient on a gift's thank_you slide, ordered newest first.

Input Output Examples

Name	Type	Req	Description
giftId	string	yes	The Firestore document ID of the gift.

No output schema declared.

No examples provided.

pookie_unpublish ~62

Unpublish a previously-published gift, taking it offline and setting its status back to 'draft'. The shareUrl will stop working until the gift is published again.

Input Output Examples

Name	Type	Req	Description
giftId	string	yes	The Firestore document ID of the gift to unpublish.

No output schema declared.

No examples provided.

pookie_update ~95

Update metadata fields of an existing draft gift. Updatable fields: recipientName, occasion, vibe, template, tier. At least one field must be supplied.

Input Output Examples

Name	Type	Req	Description
giftId	string	yes	The Firestore document ID of the gift to update.
occasion	string	—	—
recipientName	string	—	—
template	string	—	—
tier	string	—	—
vibe	string	—	—

No output schema declared.

No examples provided.

pookie_upload_url ~167

Get a pre-signed Google Cloud Storage upload URL so the client can upload a file directly without routing through the API. Returns uploadUrl (PUT to this), publicUrl (permanent read URL after upload), storage path, and expiry seconds (900). Allowed file types: image/jpeg, image/png, image/webp, image/gif, audio/webm, audio/mp4, audio/mpeg. Max 10 MB.

Input Output Examples

Name	Type	Req	Description
fileName	string	—	Original file name (optional, used to generate storage path).
fileSize	number	—	File size in bytes (optional, validated against 10 MB limit).
fileType	string	yes	MIME type of the file being uploaded.
giftId	string	yes	The gift this file will be attached to.

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug