Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.JoernBerkefeld/mcp-server-mcdev

NPM · MCP-SERVER-MCDEV

Native mcdev through AI: retrieve, build, deploy, command discovery and offline docs.

Available components

−2 this week 88 Trust /100

Last scanned (1 hour ago)

Scores higher than 92% of npm servers

Category Developer Tools

Recent critical change

CVE-2026-102828 affects this package (7 Oct 2026). See the changelog before you install this server.

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 56 of 202 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to JoernBerkefeld/mcp-server-mcdev). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 9 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability62
  • 50% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Partial
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 2606 tokens (~124/item across 21 items; 20 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
  • Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage84
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 52% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 21 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 −3
    • Stability: pass → 0.80 functional
  • 2 Nov 26 0
    • Security disclosure: unverified → fail ▼ functional
  • 1 Nov 26 0
    • Security disclosure: fail → unverified ▼ functional
  • 30 Oct 26 +1
    • Stability: 0.97 → pass security
  • 29 Oct 26 −1
    • Stability: pass → 0.97 functional
  • 27 Oct 26 +15
    • Malware scan: unverified → pass ▲ security
  • 26 Oct 26 −14
    • Malware scan: pass → unverified ▼ security
    • Schema quality: 3147 → 2606 ▲ functional
    • Tool coverage: 44% → 52% ▲ functional
    • Destructive annotations: pass → 100 functional
    • Package version: 1.1.1 → 2.0.0 functional
  • 25 Oct 26 +15
    • Malware scan: unverified → pass ▲ security
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed npm/mcp-server-mcdev@2.0.0

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo JoernBerkefeld/mcp-server-mcdev
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/JoernBerkefeld/mcp-server-mcdev/.github/workflows/npm-publish.yml@refs/tags/v2.0.0
Rekor log index 3491347087
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:268c5b0fcbf9678ec239232c1ba5d913557d94d986a2e542116939ba9a7ddf9998565dd70df6f570501db308f24d398bafcbe39cd6c71cf0e5bd67c8c

Background: How many MCP packages publish verified provenance →

Dependencies 202 packages
Packages resolved 202
Stale 56
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 20 exposed · ~2,598 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
diagnose_mcdev_project_config ~89

Read-only partial static diagnosis of `.mcdevrc.json`, not native mcdev validation or execution readiness. FIRST use the visual MCDev Pipeline Builder before editing configuration. Returns builder guidance, findings and explicit limitations; never writes files, loads hooks, reads auth or executes native CLI/live checks. Prevent concurrent filesystem mutation.

NameTypeReqDescription
workspaceRootstringyesCanonical absolute mcdev project root.

No output schema declared.

No examples provided.

diagnose_mcdev_retrieve_logs ~231

Read-only historical normal-log diagnosis for one exact configured credential/businessUnit and query or script key. Reads only bounded project/logs timestamp files, never error companions or authentication/session contents. Requires caller-managed quiescence. Supports mcdev 10.1.0 and 10.1.1 canonical retrieve credential/BU type key with literal selectors and no options, aliases or quotes, within an explicit UTC ISO millisecond window of at most 24 hours. Returns finite observations and validated basename/time provenance, never raw logs, paths, errors, secrets or remote completeness. No subprocess, network, native execution, elicitation or rerun. Native calls with --noLogFile produce no historical logs; absent evidence is no-match, not a reason to repeat retrieval. Unknown records are suppressed; investigate manually when evidence is insufficient.

NameTypeReqDescription
businessUnitstringyes–
credentialstringyes–
keystringyes–
metadataTypestringyes–
startedAfterstringyes–
startedBeforestringyes–
workspaceRootstringyes–

No output schema declared.

No examples provided.

inspect_mcdev_git_policy ~130

Read-only Git metadata inspection, not verified policy or execution readiness. Ancestry uses a local remote-tracking snapshot, not fresh remote state. Branch roles, ticket and commit-prefix conventions remain unresolved; remote BU synchronization is unknown. Top-level verified covers status metadata only; refs.verified is independent. Separate from inspect_mcdev_project auth protection checks. No policy persistence, branch changes, commit-message/history/auth/artifact-content reads or native mcdev/live execution. Prevent concurrent project/Git mutation; not an atomic snapshot.

NameTypeReqDescription
workspaceRootstringyesCanonical absolute mcdev project root.

No output schema declared.

No examples provided.

inspect_mcdev_git_range ~191

Read-only Git metadata comparison of two explicit refs, not promotion policy or execution readiness. Optional declaredEdge assesses only exact-source-commit containment in the target, with the same source-to-target direction for promotion and back-promotion. Local snapshot only; remote freshness and remote BU synchronization are unknown. No inferred branch roles or backpromotions, auth/log/artifact/commit-content reads, branch changes or native mcdev/live execution. Prevent concurrent project/Git mutation; not an atomic snapshot. Separate from inspect_mcdev_project auth protection checks.

NameTypeReqDescription
declaredEdgestring–Optional caller-declared intent; never reverses source and target.
sourceRefstringyesExplicit source branch or full ref, never a revision expression.
targetRefstringyesExplicit target branch or full ref, never a revision expression.
workspaceRootstringyesCanonical absolute mcdev project root.

No output schema declared.

No examples provided.

inspect_mcdev_project ~69

Read the complete UNREDACTED project config, including credentials, and independently inspect Git ignore/index metadata for auth protection. Read-only: never reads auth contents or history and never repairs, stages or untracks files.

NameTypeReqDescription
workspaceRootstringyesCanonical absolute mcdev project root.

No output schema declared.

No examples provided.

inventory_mcdev_project_artifacts ~88

Read-only, metadata-only inventory of configured retrieve/deploy paths; does not open artifact contents or confirm dependencies. Never reads auth contents or logs. No guarantee of remote freshness or an atomic filesystem sandbox; prevent concurrent filesystem mutation.

NameTypeReqDescription
maxDepthinteger––
maxEntriesinteger––
workspaceRootstringyesCanonical absolute mcdev project root.

No output schema declared.

No examples provided.

mcdev_component_checklist ~59

Return a structured checklist of questions and dependent metadata types for authoring or migrating SFMC components with mcdev (e.g. journey, automation).

NameTypeReqDescription
componentstringyesComponent key, e.g. "journey", "automation".

No output schema declared.

No examples provided.

mcdev_explain_config_key ~83

Explain a `.mcdevrc.json` concept (markets, marketList, createDeltaPkg, deployment, validations, etc.) with a short summary and wiki file hints.

NameTypeReqDescription
topicstringyesTopic key or phrase. Known keys: build, createDeltaPkg, credentials, deployment, directories, marketList, markets, metaDataTypes, validations

No output schema declared.

No examples provided.

mcdev_get_command ~81

Read-only exact, case-sensitive native command or alias lookup. Returns signature, execution availability and effects; use the canonical name with run_mcdev_command when supported. Lookup grants no approval, launches no process and is not a dry run. Project readiness remains unverified.

NameTypeReqDescription
nameOrAliasstringyesExact canonical command name or alias, never argv.

No output schema declared.

No examples provided.

mcdev_get_doc_section ~100

Retrieve an unreviewed bundled wiki section by its search Source ID. Returns a JSON page with UTF-16 offsets and nextOffset (null at end); retrieved claims are not semantic endorsements.

NameTypeReqDescription
idstringyesOpaque Source ID returned by mcdev_search_docs.
limitinteger–Page length (default 4000, maximum 12000).
offsetinteger–UTF-16 offset (default 0).

No output schema declared.

No examples provided.

mcdev_list_commands ~67

Read-only native mcdev command discovery: signatures, aliases, execution availability and effects. Use run_mcdev_command for supported commands with explicit arguments and ordinary host approval. Listing itself performs no subprocess or dry run; native mcdev has no dry-run mode. Project readiness is not verified.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

mcdev_list_metadata_types ~49

List metadata types supported by the installed mcdev package (from Mcdev.explainTypes). Optional filter substring.

NameTypeReqDescription
filterstring–Case-insensitive filter on name or apiName.

No output schema declared.

No examples provided.

mcdev_search_docs ~65

Search bundled sfmc-devtools wiki Markdown (from GitHub wiki) for mcdev configuration, commands, markets, createDeltaPkg, build, validations.

NameTypeReqDescription
limitinteger–Max results (default 8).
querystringyesSearch query (keywords).

No output schema declared.

No examples provided.

preview_mcdev_project_command ~210

Read-only, guidance-only project-qualified retrieve/deploy preview. Verifies only the explicit credential/businessUnit config mapping; execution readiness and configured paths remain unknown. Generic native effects are not proven project-local effects. No subprocess, hooks, auth/log reads or live checks. Not a dry run: native mcdev has no dry-run mode. Execution remains disabled; this cannot authorize an operation. Prevent concurrent filesystem mutation.

NameTypeReqDescription
businessUnitstringyesExact businessUnit alias within this credential.
commandstringyes–
credentialstringyesExact project credential mapping name.
keystringyesOne explicit literal external key; no CSV or wildcards.
optionsobject–Canonical reviewed options only; command/type compatibility is checked by the adapter. These describe native guidance, never execution.
typestringyesReviewed type: automation, asset-email, dataExtension, query or script.
workspaceRootstringyesCanonical absolute mcdev project root.

No output schema declared.

No examples provided.

preview_mcdev_project_config ~206

Read-only comparison of the current .mcdevrc.json and a complete proposed JSON document, not a patch. FIRST use the visual MCDev Pipeline Builder before editing configuration. Returns full unredacted changes and partial static proposed diagnosis within a whole-result byte budget; no truncation. Inputs are at most 1 MiB each. Hashes describe rawText encoded as UTF-8 without normalization, not independently verified original filesystem bytes. No writes, apply authorization, native validation, execution readiness or atomic filesystem binding. Prevent concurrent filesystem mutation. Never reads auth or logs, loads hooks or performs native/live checks.

NameTypeReqDescription
maxOutputBytesinteger–Whole-result JSON UTF-8 budget (default 65536, maximum 1048576); fixed builder notice is additional.
proposedConfigstringyesComplete proposed JSON document, not a patch; at most 1 MiB UTF-8.
workspaceRootstringyesCanonical absolute mcdev project root.

No output schema declared.

No examples provided.

read_mcdev_artifact_source ~363

Read-only full-text editable-source handoff for one qualified query, script or bounded asset-email identity (htmlemail/templatebasedemail matched by customerKey with exact HTML/preheader/text extracts), never a caller-supplied file path. Requires exactly one editable companion unless an explicit sourceRole selects html, preheader or text from resolved email companions; multiple companions need an explicit role or are blocked with no source and no guessed choice. sourceRole accepts no arbitrary filenames or paths and applies only to resolved email companions. Dependencies are not confirmed. Returns complete original UTF-8 text (including BOM) and SHA-256 of original file bytes without truncation; unresolved or blocked results never contain source. No rendering, validation, mutation, native modules or live execution is performed; execution readiness is unknown. The host must discover companion capabilities and coordinate platform detection, identifier lookup and full-document validate_ssjs, validate_sfmc_html or validate_ampscript as appropriate. Email html requires validate_sfmc_html; preheader/text have language text and text-validator-not-established, not an inferred AMPscript validator. SQL validation is not established. Do not claim companion tools were performed. Prevent concurrent filesystem mutation: bounded checks are not atomic or a concurrent-mutation sandbox. Never reads auth contents or logs.

NameTypeReqDescription
businessUnitstringyes–
credentialstringyes–
externalKeystringyes–
maxDepthinteger––
maxEntriesinteger––
metadataTypestringyesquery, script or asset-email (bounded htmlemail/templatebasedemail layouts only).
rootKindstringyes–
sourceRolestring––
workspaceRootstringyesCanonical absolute mcdev project root.

No output schema declared.

No examples provided.

read_mcdev_project_config ~74

Read the complete, UNREDACTED `.mcdevrc.json`, including credentials and custom fields, from a canonical absolute project root. Returns original raw text; never reads `.mcdev-auth.json`.

NameTypeReqDescription
workspaceRootstringyesAbsolute path to the mcdev project root containing `.mcdevrc.json`.

No output schema declared.

No examples provided.

reconcile_mcdev_operation ~85

Release an uncertain native-operation latch only after the operator has confirmed all related processes stopped and reconciled partial local/remote effects. This acknowledgement does not perform or verify reconciliation, kill processes, retry commands or authorize a new operation. Never call solely because a server restarted or a timeout elapsed.

NameTypeReqDescription
operatorReconciledbooleanyes–
workspaceRootstringyes–

No output schema declared.

No examples provided.

resolve_mcdev_project_artifact ~190

Read-only qualified local resolution for query, script and bounded asset-email layouts (htmlemail/templatebasedemail matched by customerKey, with exact HTML/preheader/text extract companions); other types and layouts are unsupported. Returns paths, not arbitrary file contents, and does not confirm dependencies. Blocked/ambiguous results offer no editable companions. Never reads auth contents or logs. No guarantee of remote freshness or an atomic filesystem sandbox; prevent concurrent filesystem mutation.

NameTypeReqDescription
businessUnitstringyes–
credentialstringyes–
externalKeystringyes–
maxDepthinteger––
maxEntriesinteger––
metadataTypestringyesquery, script or asset-email (bounded htmlemail/templatebasedemail layouts only).
rootKindstringyes–
workspaceRootstringyesCanonical absolute mcdev project root.

No output schema declared.

No examples provided.

run_mcdev_command ~168

Execute an explicitly requested native mcdev command in a developer-controlled project. Use mcdev_get_command for syntax and execution availability. args are exact argv tokens after the canonical command, not a shell string. Supports native metadata selectors, markets, validation hooks and native overwrite/deletion/auth-persistence effects. Supply explicit target/choices; no terminal interaction or automatic defaults. Deploy/runtime effects require the corresponding user request and ordinary host approval; no extra consent ritual. Diagnostics are bounded projections, not raw output. Completion is not independent remote verification; never automatically retry partial/unknown operations. Configure host timeouts for long operations; progress is emitted when requested.

NameTypeReqDescription
argsarrayyes–
commandstringyes–
timeoutMsinteger––
workspaceRootstringyes–

No output schema declared.

No examples provided.

Install

How do I install the io.github.JoernBerkefeld/mcp-server-mcdev server?

io.github.JoernBerkefeld/mcp-server-mcdev runs locally as an npm package, launched with npx -y mcp-server-mcdev. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · mcp-server-mcdev

# add to Claude Code
claude mcp add joernberkefeld-mcp-server-mcdev -- npx -y mcp-server-mcdev
Common questions

What is the io.github.JoernBerkefeld/mcp-server-mcdev server?

io.github.JoernBerkefeld/mcp-server-mcdev is listed in the public MCP registry as io.github.JoernBerkefeld/mcp-server-mcdev. Native mcdev through AI: retrieve, build, deploy, command discovery and offline docs. This page covers its npm package (mcp-server-mcdev).

Is the io.github.JoernBerkefeld/mcp-server-mcdev server safe to use?

io.github.JoernBerkefeld/mcp-server-mcdev scores 88 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.JoernBerkefeld/mcp-server-mcdev server expose?

io.github.JoernBerkefeld/mcp-server-mcdev exposes 20 tools: run_mcdev_command, reconcile_mcdev_operation, diagnose_mcdev_retrieve_logs, mcdev_search_docs, mcdev_get_doc_section, and 15 more. Their descriptions and schemas cost roughly 2,598 tokens of context every time the server is loaded.

Is the io.github.JoernBerkefeld/mcp-server-mcdev server still maintained?

io.github.JoernBerkefeld/mcp-server-mcdev is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the io.github.JoernBerkefeld/mcp-server-mcdev server under?

io.github.JoernBerkefeld/mcp-server-mcdev declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.