Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

walkerOS Flow

NPM · @WALKEROS/MCP

Build, validate, simulate, and deploy walkerOS event pipelines

Available components

−4 this week 91 Trust /100

Last scanned (3 hours ago)

Scores higher than 94% of npm servers

Category Data and Analytics

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security94
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known medium-severity CVE affects glob 13.0.6, reached via @walkeros/cli > @vercel/nft > glob. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • 57 of 287 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to elbwalker/walkerOS). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 1 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability78
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 5463 tokens (~210/item across 26 items; 17 tools + 9 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
  • Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (35% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 19 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
What we tested

Checks we ran (16)

  • Malware scan
  • Known CVEs
  • Install scripts
  • Dependency health
  • Source repository
  • Provenance
  • License
  • Maintenance
  • Security disclosure
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this package (2)

  • Endpoint SecurityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.
  • Transport & ReachabilityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 −3
    • Stability: pass → 0.77 functional
  • 4 Nov 26 0
    • Security disclosure: fail → pass ▲ functional
  • 31 Oct 26 −1
    • CVE-2026-118764 affects this package: medium ▼ security
    • CVE-2026-118773 affects this package: medium ▼ security
    • Known CVEs: pass → fail ▼ security
  • 30 Oct 26 0
    • Stability: 0.97 → pass security
  • 29 Oct 26 0
    • Stability: pass → 0.97 functional
  • 23 Oct 26 0
    • Stability: 0.97 → pass security
  • 22 Oct 26 0
    • Stability: pass → 0.97 functional
  • 16 Oct 26 0
    • Stability: 0.97 → pass security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 6 Nov 2026 · Analysed npm/@walkeros/mcp@4.5.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo elbwalker/walkerOS
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/elbwalker/walkerOS/.github/workflows/release.yml@refs/heads/713-bot-context-mapping
Rekor log index 2581554676
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:7ab143a65f68f03dce624d7a446bad394916bf19ff83bcb03da382fa2310a01ce2653c46f05290136448dabae0338dc5aca9bcbe25f817b6402960ccb

Background: How many MCP packages publish verified provenance →

Vulnerabilities 2 findings
ID CVE Severity Vector Fix available
GHSA-3g3m-2fjr-6pw4 CVE-2026-118773 medium yes
GHSA-g3hv-75wg-m249 CVE-2026-118764 medium yes

Background: What a vulnerability scan can and cannot prove →

Dependencies 287 packages
Packages resolved 287
Stale 57
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 17 exposed · ~3,510 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
auth ~78

Manage walkerOS authentication. Check login status, log in via device code flow, or log out. No terminal or browser required, the MCP client handles the authorization URL.

NameTypeReqDescription
actionstringyesAuthentication action to perform
deviceCodestring–Device code from a previous pending login attempt. Provide to resume polling without requesting a new code.

No output schema declared.

No examples provided.

deploy_manage ~357

Deploy walkerOS flows and manage deployments. deploy waits for the deployment to reach a terminal status by default (wait=true), with a 12-minute budget; pass wait=false to return immediately with the deployment id. A finished deployment carries its status and, on failure, an errorMessage with the user-facing reason; use the get action to re-read it. list supports cursor and limit for pagination. delete removes an active deployment. For get and delete pass flowId (required) plus optional slug to disambiguate when a flow has multiple active deployments. If a flow has >=2 active deployments and no slug is supplied, the tool returns a MULTIPLE_DEPLOYMENTS error with a details[] list showing each deployment's slug, type, status, and updatedAt.

NameTypeReqDescription
actionstringyesDeployment action to perform
cursorstring–Pagination cursor from a previous list response. Only used with the list action.
flowIdstring–Required for deploy, get, delete.
flowNamestring–Flow name for multi-settings flows. Only used with deploy action.
limitinteger–Max items per page (1-100). Only used with the list action.
projectIdstring–Project ID. Optional; falls back to the default project.
slugstring–Deployment slug. Optional disambiguator for get/delete when the flow has multiple active deployments.
statusstring–Status filter for list.
typestring–Deployment type filter for list.
waitboolean–Wait for the deployment to reach a terminal status (default true), with a 12-minute budget. Set false to return the deployment id immediately. Only used with deploy action.

No output schema declared.

No examples provided.

diagnostics ~75

Report the MCP runtime surface: MCP and CLI versions, the resolved app URL and its source, app /api/health reachability, the bundled OpenAPI contract version, and which source served the last package catalog fetch. Read-only and callable when logged out; use it when a request fails to see which versions and backend you are on.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

feedback ~52

Send feedback about walkerOS

NameTypeReqDescription
anonymousboolean–Include user/project info? false = include, true = anonymous. Only needed on first call if not yet configured.
textstringyesYour feedback text

No output schema declared.

No examples provided.

flow_bundle ~106

Bundle a walkerOS flow configuration into deployable JavaScript. Resolves all destinations, sources, and transformers, then outputs a tree-shaken production bundle. Returns bundle statistics.

NameTypeReqDescription
configPathstringyesPath to flow configuration file (JSON or JavaScript), URL, or inline JSON string
flowstring–Flow name for multi-flow configs
outputstring–Output file path (defaults to config-defined)
statsboolean–Return bundle statistics
NameTypeReqDescription
buildTimenumber–Build time in milliseconds
messagestring–Status message
packagesarray–Names of packages included in the bundle
successbooleanyesWhether bundling succeeded
totalSizenumber–Total bundle size in bytes
treeshakingEffectiveboolean–Whether tree-shaking was effective

No examples provided.

flow_examples ~182

List all step examples in a walkerOS flow configuration. Shows example names, step locations, and in/out shapes. Inline examples on a step take precedence; steps without inline examples fall back to the examples shipped by their referenced package. Each result is tagged with its source ("inline" or "package"). Use this to discover available test fixtures and simulation data.

NameTypeReqDescription
configPathstringyesPath to flow configuration file, URL, or inline JSON string
flowstring–Flow name for multi-flow configs
fullboolean–Return full in/out/mapping data for each example (default: false, returns metadata only)
includeHiddenboolean–Include examples marked public: false (default: false). Set true for test/debug discovery.
stepstring–Filter to a specific step (e.g., "destination.gtag")
NameTypeReqDescription
countnumberyesNumber of examples found
examplesarrayyesStep examples
flowstringyesFlow name

No examples provided.

flow_load ~134

Load an existing flow configuration from a local file path, URL, or walkerOS API (by flow ID). Or create a new empty flow by specifying a platform (web or server). Use the add-step prompt to add sources, destinations, transformers, or stores to the flow.

NameTypeReqDescription
platformstring–Platform for new flows. Required when source is omitted. web = browser tracking, server = Node.js HTTP.
sourcestring–Flow source: local file path (./flow.json), URL (https://...), inline JSON string, or API flow ID (cfg_...). Omit to create a new flow.
NameTypeReqDescription
flowsobjectyesFlow entries
versionnumberyesFlow config version

No examples provided.

flow_manage ~580

Manage walkerOS flows and their previews. List/get/create/update/delete/duplicate flows, or create/inspect/delete preview bundles and mint activation grants (preview_regrant) for testing flow changes on live sites.

NameTypeReqDescription
actionstringyesFlow management action to perform
contentobject–Flow.Json content. Used for create and update.
cursorstring–Pagination cursor from a previous list response. Only used with the list action.
fieldsarray–Dot-path selectors for get to return only specific fields.
flowIdstring–Flow ID (flow_...) or config ID (cfg_...). Required for get, update, delete, duplicate, preview_list, preview_get, preview_create, preview_delete, preview_regrant.
flowNamestring–Used by preview_create — provide one of flowName or flowSettingsId (preview_create also requires flowId).
flowSettingsIdstring–Used by preview_create — provide one of flowName or flowSettingsId (preview_create also requires flowId).
includeDeletedboolean–Include soft-deleted flows in list results.
limitinteger–Max items per page (1-100). Only used with the list action.
namestring–Flow name. Required for create. Optional for update (to rename) and duplicate.
orderstring–Sort order for list.
originsarray–Site origins (bare https://host[:port]) to mint a preview activation grant for. Used by preview_regrant; the returned activationUrl targets the first origin.
patchboolean–Merge-patch for update (default true). When true, only provided fields are updated.
previewIdstring–Preview ID (prv_...). Required for preview_get, preview_delete, and preview_regrant (all also require flowId).
projectIdstring–Project ID. Optional filter for list (omit to list all projects). Required for create if no default project set.
sessionIdstring–Observe session id — when set, preview_regrant mints an activation/forwarding grant PAIR: the returned activationUrl both activates the web preview and lets the page forward events to the session con…
siteUrlstring–Optional site URL (e.g. https://shop.example.com) for preview_create. When provided, the activation grant is minted for that origin so the returned activationUrl works there.
sortstring–Sort field for list.
source––What the preview should run, for preview_create: the flow's draft (default) or a deployed version's stored config (kind 'deployment-version' with its deploymentVersionId).

No output schema declared.

No examples provided.

flow_push ~111

Push a real event through a walkerOS flow to actual destinations. Makes real API calls to real endpoints. Best suited for server-side flows — web flows should use flow_simulate for testing.

NameTypeReqDescription
configPathstringyesPath to flow configuration file
eventobjectyesEvent object, e.g. { name: "page view", data: { title: "Home" } }
flowstring–Flow name for multi-flow configs
platformstring–Override platform detection
NameTypeReqDescription
durationnumberyesPush duration in milliseconds
elbResult––Push result from the collector
errorstring–Error message if push failed
successbooleanyesWhether push succeeded

No examples provided.

flow_simulate ~421

Simulate events through a walkerOS flow without making real API calls. For destinations: event is a walkerOS event { name: "entity action", data: {...} }. For sources: event is { content, trigger?: { type?, options? } }, where content is the walkerOS event { name: "entity action", data: {...} }. step (required) targets the step to simulate, e.g. "destination.gtag". Use flow_examples to discover available test data. IMPORTANT: Destinations with require (e.g. require: ["consent"]) stay pending until that collector event fires — simulation will error "not found" if require is not satisfied. Remove require from config or provide consent/user events before simulating. Separately, destinations with consent (e.g. consent: { marketing: true }) only receive events where the event includes matching consent. Mapping transforms event names and data at the destination level. Policy redacts or injects fields before mapping runs.

NameTypeReqDescription
configPathstringyesPath to flow configuration file, URL, or inline JSON string
event––For destinations: { name, data, consent? }. Include consent (e.g. { marketing: true }) to satisfy destination consent requirements. For sources: { content, trigger? } where content is the walkerOS ev…
flowstring–Flow name for multi-flow configs
ingestobject–Pipeline context a transformer reads via ctx.ingest, e.g. { url } for a request decoder. Only used for transformer steps.
platformstring–Override platform detection
stateobject–Collector-state snapshot for collector steps: consent/user/globals/timing. Seeds the collector before enrichment runs.
stepstringyesRequired. Target step as "type.name" — e.g. "source.demo", "destination.gtag", "transformer.router".
verboseboolean–Include full payload per destination (default: false)
NameTypeReqDescription
capturedEventsarray–Events captured by source simulation
destinationsobject–Per-destination results
durationnumber–Simulation duration in ms
errorstring–Error message if failed
successbooleanyesWhether simulation succeeded
summarystringyesOne-line result summary

No examples provided.

flow_validate ~140

Validate walkerOS events, flow configurations, mapping rules, or data contracts. Accepts JSON strings, file paths, or URLs as input. Returns validation results with errors, warnings, and details.

NameTypeReqDescription
flowstring–Flow name for multi-flow configs
inputstringyesJSON string, file path, or URL to validate
pathstring–Entry path for package schema validation (e.g., "destinations.snowplow"). When provided, validates the entry against its package JSON Schema instead of using --type.
typestringyesValidation type: "event", "flow", "mapping", or "contract"
NameTypeReqDescription
detailsobjectyesAdditional validation details
errorsarrayyesValidation errors
type–yesWhat was validated
validbooleanyesWhether validation passed
warningsarrayyesValidation warnings

No examples provided.

observe_journeys ~288

Read the assembled, cross-runtime journeys for a flow that is currently being observed (an active Observe session). Pass flowId; the active session is resolved for you (a flow has at most one). Each journey is one traced event reconstructed end to end across web and server: its ordered hops (source, transformer, collector, destination), each hop status (pending/done/skipped/error), captured in/out payloads, consent, and vendor calls. Use this to see what actually happened to live events: which destinations fired, what mapping ran, where an event was skipped or errored, and whether records were lost (gaps + a journey `lossy` flag). When the flow has no active session the result is `{ sessionId: null, journeys: [], gaps: [] }` — start an Observe session in the app and drive traffic first, then read again. Narrow with traceId (one trace) and limit (page cap, most recent kept; default 50). Read-only.

NameTypeReqDescription
flowIdstringyesFlow to read journeys for (its active Observe session).
limitinteger–Max journeys to return (1-100, most recent kept). Defaults to 50.
projectIdstring–Project ID. Optional; falls back to the default project.
traceIdstring–Return only the journeys for this trace id.

No output schema declared.

No examples provided.

observe_session ~325

Open, inspect, or end an Observe session: a time-boxed window on one flow that runtimes attach to as arms. A preview arm streams from a browser, a container arm runs server-side, and both feed ONE shared journeys feed. start opens the window (arms picks which runtimes attach), status reports per-arm state plus recordsReceived and expiresAt, stop ends the whole session including every arm. A flow has at most one session, so status/stop resolve it from flowId when sessionId is omitted. Read the events with observe_journeys; this tool never returns event data and never judges whether events are correct.

NameTypeReqDescription
actionstringyesstart opens a session, status reports arm state, stop ends the whole session.
armsobject–Which runtimes attach. Omit to attach the default preview arm; a web settings that references a server flow brings its container arm with it.
flowIdstringyesFlow the Observe session runs on.
levelstring–Container observation verbosity. Defaults to the app's own.
originsarray–Bare https origins (https://host[:port]) the session may ingest web events from.
projectIdstring–Project ID. Optional; falls back to the default project.
replaceboolean–Replace the flow's existing window instead of attaching to it. Re-provisions from the new config.
sessionIdstring–Session to act on for status/stop. Optional; the flow has at most one session and it is resolved for you.

No output schema declared.

No examples provided.

package_get ~133

Requires exact package name: do not guess names, use package_search first to find them. Returns schemas + hint texts + example summaries by default (lightweight). Use section parameter for full content: "hints" (with code blocks), "examples" (full in/out data), or "all".

NameTypeReqDescription
packagestringyesExact npm package name (e.g., @walkeros/web-destination-snowplow)
sectionstring–Section to expand with full content. Default: summary view with schemas + hint texts + example descriptions
versionstring–Package version (default: latest)

No output schema declared.

No examples provided.

package_search ~128

Start here for package discovery. Never guess package names: use this tool first to find exact names. Without package name: returns catalog filtered by type/platform. With package name: returns metadata, hint keys, and example summaries.

NameTypeReqDescription
packagestring–Exact npm package name for detailed lookup (e.g., @walkeros/web-destination-snowplow)
platformstring–Filter by platform (browse mode, includes universal packages)
typestring–Filter by package type (browse mode)
versionstring–Package version for detailed lookup (default: latest)

No output schema declared.

No examples provided.

project_manage ~122

Manage walkerOS projects. List, create, update, delete projects, or set a default project for CLI operations.

NameTypeReqDescription
actionstringyesProject management action to perform
cursorstring–Pagination cursor from a previous list response. Only used with the list action.
limitinteger–Max items per page (1-100). Only used with the list action.
namestring–Required for create and update (update also requires projectId).
projectIdstring–Required for get, update, delete, set_default.

No output schema declared.

No examples provided.

secret_manage ~278

Manage a flow’s managed secrets (the $secret.<NAME> values its steps reference at deploy/run time). Actions: list (metadata only), set (create), update (rotate value), delete. Secrets are write-mostly: values are encrypted at rest and are NEVER returned, listed, or echoed. Reference a secret from a flow step as $secret.<NAME>. Credentials, tokens, and private keys must use $secret, not $env: the deploy pipeline only injects values referenced as $secret.<NAME> into the server runner. Server flows only.

NameTypeReqDescription
actionstringyesSecret management action to perform
flowIdstringyesFlow ID (flow_...) or config ID (cfg_...). Required for list, set, update, and delete: secrets are flow-scoped.
namestring–Secret name (UPPER_SNAKE_CASE). Required for set. Referenced in flows as $secret.<NAME>.
projectIdstring–Project ID. Optional: falls back to the default project when omitted.
secretIdstring–Secret ID (sec_...). Required for update and delete. Use action "list" to find it.
valuestring–Secret value (1-65536 chars). Required for set and update. Write-only: never returned or logged.

No output schema declared.

No examples provided.

Install

How do I install the walkerOS Flow MCP server?

walkerOS Flow runs locally as an npm package, launched with npx -y @walkeros/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @walkeros/mcp

# add to Claude Code
claude mcp add io-walkeros-flow -- npx -y @walkeros/mcp
Common questions

What is the walkerOS Flow MCP server?

walkerOS Flow is an MCP server listed in the public MCP registry as io.walkeros/flow. Build, validate, simulate, and deploy walkerOS event pipelines. This page covers its npm package (@walkeros/mcp).

Is the walkerOS Flow MCP server safe to use?

walkerOS Flow scores 91 out of 100 on VerifyMCP. We recorded 2 known advisories against it as of 6 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the walkerOS Flow MCP server expose?

walkerOS Flow exposes 17 tools: auth, project_manage, flow_manage, deploy_manage, secret_manage, and 12 more. Their descriptions and schemas cost roughly 3,510 tokens of context every time the server is loaded.

Is the walkerOS Flow MCP server still maintained?

walkerOS Flow is still listed as active in the MCP registry. We last reached this channel on 6 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the walkerOS Flow MCP server under?

walkerOS Flow declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

What did VerifyMCP test on the walkerOS Flow MCP server?

VerifyMCP ran 16 checks on walkerOS Flow, covering Malware scan, Known CVEs, Install scripts, Dependency health and 12 more. Endpoint Security and Transport & Reachability do not apply to an npm package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.