io.github.JoernBerkefeld/mcp-server-mcdev
NPM · MCP-SERVER-MCDEV
Native mcdev through AI: retrieve, build, deploy, command discovery and offline docs.
Available components
Last scanned (1 hour ago)
Scores higher than 92% of npm servers
Category Developer Tools
Recent critical change
CVE-2026-102828 affects this package (7 Oct 2026). See the changelog before you install this server.
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 56 of 202 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency97
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to JoernBerkefeld/mcp-server-mcdev). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 9 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability62
- 50% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Partial
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2606 tokens (~124/item across 21 items; 20 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management80
- Stability observed for 24 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage84
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 52% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 21 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 −3
- Stability: pass → 0.80 functional
- 2 Nov 26 0
- Security disclosure: unverified → fail ▼ functional
- 1 Nov 26 0
- Security disclosure: fail → unverified ▼ functional
- 30 Oct 26 +1
- Stability: 0.97 → pass security
- 29 Oct 26 −1
- Stability: pass → 0.97 functional
- 27 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 26 Oct 26 −14
- Malware scan: pass → unverified ▼ security
- Schema quality: 3147 → 2606 ▲ functional
- Tool coverage: 44% → 52% ▲ functional
- Destructive annotations: pass → 100 functional
- Package version: 1.1.1 → 2.0.0 functional
- 25 Oct 26 +15
- Malware scan: unverified → pass ▲ security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Analysed npm/mcp-server-mcdev@2.0.0
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | JoernBerkefeld/mcp-server-mcdev |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/JoernBerkefeld/mcp-server-mcdev/.github/workflows/npm-publish.yml@refs/tags/v2.0.0 |
| Rekor log index | 3491347087 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:268c5b0fcbf9678ec239232c1ba5d913557d94d986a2e542116939ba9a7ddf9998565dd70df6f570501db308f24d398bafcbe39cd6c71cf0e5bd67c8c |
Background: How many MCP packages publish verified provenance →
Dependencies 202 packages
| Packages resolved | 202 |
|---|---|
| Stale | 56 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
diagnose_mcdev_project_config ~89
Read-only partial static diagnosis of `.mcdevrc.json`, not native mcdev validation or execution readiness. FIRST use the visual MCDev Pipeline Builder before editing configuration. Returns builder guidance, findings and explicit limitations; never writes files, loads hooks, reads auth or executes native CLI/live checks. Prevent concurrent filesystem mutation.
| Name | Type | Req | Description |
|---|---|---|---|
| workspaceRoot | string | yes | Canonical absolute mcdev project root. |
No output schema declared.
No examples provided.
diagnose_mcdev_retrieve_logs ~231
Read-only historical normal-log diagnosis for one exact configured credential/businessUnit and query or script key. Reads only bounded project/logs timestamp files, never error companions or authentication/session contents. Requires caller-managed quiescence. Supports mcdev 10.1.0 and 10.1.1 canonical retrieve credential/BU type key with literal selectors and no options, aliases or quotes, within an explicit UTC ISO millisecond window of at most 24 hours. Returns finite observations and validated basename/time provenance, never raw logs, paths, errors, secrets or remote completeness. No subprocess, network, native execution, elicitation or rerun. Native calls with --noLogFile produce no historical logs; absent evidence is no-match, not a reason to repeat retrieval. Unknown records are suppressed; investigate manually when evidence is insufficient.
| Name | Type | Req | Description |
|---|---|---|---|
| businessUnit | string | yes | – |
| credential | string | yes | – |
| key | string | yes | – |
| metadataType | string | yes | – |
| startedAfter | string | yes | – |
| startedBefore | string | yes | – |
| workspaceRoot | string | yes | – |
No output schema declared.
No examples provided.
inspect_mcdev_git_policy ~130
Read-only Git metadata inspection, not verified policy or execution readiness. Ancestry uses a local remote-tracking snapshot, not fresh remote state. Branch roles, ticket and commit-prefix conventions remain unresolved; remote BU synchronization is unknown. Top-level verified covers status metadata only; refs.verified is independent. Separate from inspect_mcdev_project auth protection checks. No policy persistence, branch changes, commit-message/history/auth/artifact-content reads or native mcdev/live execution. Prevent concurrent project/Git mutation; not an atomic snapshot.
| Name | Type | Req | Description |
|---|---|---|---|
| workspaceRoot | string | yes | Canonical absolute mcdev project root. |
No output schema declared.
No examples provided.
inspect_mcdev_git_range ~191
Read-only Git metadata comparison of two explicit refs, not promotion policy or execution readiness. Optional declaredEdge assesses only exact-source-commit containment in the target, with the same source-to-target direction for promotion and back-promotion. Local snapshot only; remote freshness and remote BU synchronization are unknown. No inferred branch roles or backpromotions, auth/log/artifact/commit-content reads, branch changes or native mcdev/live execution. Prevent concurrent project/Git mutation; not an atomic snapshot. Separate from inspect_mcdev_project auth protection checks.
| Name | Type | Req | Description |
|---|---|---|---|
| declaredEdge | string | – | Optional caller-declared intent; never reverses source and target. |
| sourceRef | string | yes | Explicit source branch or full ref, never a revision expression. |
| targetRef | string | yes | Explicit target branch or full ref, never a revision expression. |
| workspaceRoot | string | yes | Canonical absolute mcdev project root. |
No output schema declared.
No examples provided.
inspect_mcdev_project ~69
Read the complete UNREDACTED project config, including credentials, and independently inspect Git ignore/index metadata for auth protection. Read-only: never reads auth contents or history and never repairs, stages or untracks files.
| Name | Type | Req | Description |
|---|---|---|---|
| workspaceRoot | string | yes | Canonical absolute mcdev project root. |
No output schema declared.
No examples provided.
inventory_mcdev_project_artifacts ~88
Read-only, metadata-only inventory of configured retrieve/deploy paths; does not open artifact contents or confirm dependencies. Never reads auth contents or logs. No guarantee of remote freshness or an atomic filesystem sandbox; prevent concurrent filesystem mutation.
| Name | Type | Req | Description |
|---|---|---|---|
| maxDepth | integer | – | – |
| maxEntries | integer | – | – |
| workspaceRoot | string | yes | Canonical absolute mcdev project root. |
No output schema declared.
No examples provided.
mcdev_component_checklist ~59
Return a structured checklist of questions and dependent metadata types for authoring or migrating SFMC components with mcdev (e.g. journey, automation).
| Name | Type | Req | Description |
|---|---|---|---|
| component | string | yes | Component key, e.g. "journey", "automation". |
No output schema declared.
No examples provided.
mcdev_explain_config_key ~83
Explain a `.mcdevrc.json` concept (markets, marketList, createDeltaPkg, deployment, validations, etc.) with a short summary and wiki file hints.
| Name | Type | Req | Description |
|---|---|---|---|
| topic | string | yes | Topic key or phrase. Known keys: build, createDeltaPkg, credentials, deployment, directories, marketList, markets, metaDataTypes, validations |
No output schema declared.
No examples provided.
mcdev_get_command ~81
Read-only exact, case-sensitive native command or alias lookup. Returns signature, execution availability and effects; use the canonical name with run_mcdev_command when supported. Lookup grants no approval, launches no process and is not a dry run. Project readiness remains unverified.
| Name | Type | Req | Description |
|---|---|---|---|
| nameOrAlias | string | yes | Exact canonical command name or alias, never argv. |
No output schema declared.
No examples provided.
mcdev_get_doc_section ~100
Retrieve an unreviewed bundled wiki section by its search Source ID. Returns a JSON page with UTF-16 offsets and nextOffset (null at end); retrieved claims are not semantic endorsements.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Opaque Source ID returned by mcdev_search_docs. |
| limit | integer | – | Page length (default 4000, maximum 12000). |
| offset | integer | – | UTF-16 offset (default 0). |
No output schema declared.
No examples provided.
mcdev_list_commands ~67
Read-only native mcdev command discovery: signatures, aliases, execution availability and effects. Use run_mcdev_command for supported commands with explicit arguments and ordinary host approval. Listing itself performs no subprocess or dry run; native mcdev has no dry-run mode. Project readiness is not verified.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
mcdev_list_metadata_types ~49
List metadata types supported by the installed mcdev package (from Mcdev.explainTypes). Optional filter substring.
| Name | Type | Req | Description |
|---|---|---|---|
| filter | string | – | Case-insensitive filter on name or apiName. |
No output schema declared.
No examples provided.
mcdev_search_docs ~65
Search bundled sfmc-devtools wiki Markdown (from GitHub wiki) for mcdev configuration, commands, markets, createDeltaPkg, build, validations.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Max results (default 8). |
| query | string | yes | Search query (keywords). |
No output schema declared.
No examples provided.
preview_mcdev_project_command ~210
Read-only, guidance-only project-qualified retrieve/deploy preview. Verifies only the explicit credential/businessUnit config mapping; execution readiness and configured paths remain unknown. Generic native effects are not proven project-local effects. No subprocess, hooks, auth/log reads or live checks. Not a dry run: native mcdev has no dry-run mode. Execution remains disabled; this cannot authorize an operation. Prevent concurrent filesystem mutation.
| Name | Type | Req | Description |
|---|---|---|---|
| businessUnit | string | yes | Exact businessUnit alias within this credential. |
| command | string | yes | – |
| credential | string | yes | Exact project credential mapping name. |
| key | string | yes | One explicit literal external key; no CSV or wildcards. |
| options | object | – | Canonical reviewed options only; command/type compatibility is checked by the adapter. These describe native guidance, never execution. |
| type | string | yes | Reviewed type: automation, asset-email, dataExtension, query or script. |
| workspaceRoot | string | yes | Canonical absolute mcdev project root. |
No output schema declared.
No examples provided.
preview_mcdev_project_config ~206
Read-only comparison of the current .mcdevrc.json and a complete proposed JSON document, not a patch. FIRST use the visual MCDev Pipeline Builder before editing configuration. Returns full unredacted changes and partial static proposed diagnosis within a whole-result byte budget; no truncation. Inputs are at most 1 MiB each. Hashes describe rawText encoded as UTF-8 without normalization, not independently verified original filesystem bytes. No writes, apply authorization, native validation, execution readiness or atomic filesystem binding. Prevent concurrent filesystem mutation. Never reads auth or logs, loads hooks or performs native/live checks.
| Name | Type | Req | Description |
|---|---|---|---|
| maxOutputBytes | integer | – | Whole-result JSON UTF-8 budget (default 65536, maximum 1048576); fixed builder notice is additional. |
| proposedConfig | string | yes | Complete proposed JSON document, not a patch; at most 1 MiB UTF-8. |
| workspaceRoot | string | yes | Canonical absolute mcdev project root. |
No output schema declared.
No examples provided.
read_mcdev_artifact_source ~363
Read-only full-text editable-source handoff for one qualified query, script or bounded asset-email identity (htmlemail/templatebasedemail matched by customerKey with exact HTML/preheader/text extracts), never a caller-supplied file path. Requires exactly one editable companion unless an explicit sourceRole selects html, preheader or text from resolved email companions; multiple companions need an explicit role or are blocked with no source and no guessed choice. sourceRole accepts no arbitrary filenames or paths and applies only to resolved email companions. Dependencies are not confirmed. Returns complete original UTF-8 text (including BOM) and SHA-256 of original file bytes without truncation; unresolved or blocked results never contain source. No rendering, validation, mutation, native modules or live execution is performed; execution readiness is unknown. The host must discover companion capabilities and coordinate platform detection, identifier lookup and full-document validate_ssjs, validate_sfmc_html or validate_ampscript as appropriate. Email html requires validate_sfmc_html; preheader/text have language text and text-validator-not-established, not an inferred AMPscript validator. SQL validation is not established. Do not claim companion tools were performed. Prevent concurrent filesystem mutation: bounded checks are not atomic or a concurrent-mutation sandbox. Never reads auth contents or logs.
| Name | Type | Req | Description |
|---|---|---|---|
| businessUnit | string | yes | – |
| credential | string | yes | – |
| externalKey | string | yes | – |
| maxDepth | integer | – | – |
| maxEntries | integer | – | – |
| metadataType | string | yes | query, script or asset-email (bounded htmlemail/templatebasedemail layouts only). |
| rootKind | string | yes | – |
| sourceRole | string | – | – |
| workspaceRoot | string | yes | Canonical absolute mcdev project root. |
No output schema declared.
No examples provided.
read_mcdev_project_config ~74
Read the complete, UNREDACTED `.mcdevrc.json`, including credentials and custom fields, from a canonical absolute project root. Returns original raw text; never reads `.mcdev-auth.json`.
| Name | Type | Req | Description |
|---|---|---|---|
| workspaceRoot | string | yes | Absolute path to the mcdev project root containing `.mcdevrc.json`. |
No output schema declared.
No examples provided.
reconcile_mcdev_operation ~85
Release an uncertain native-operation latch only after the operator has confirmed all related processes stopped and reconciled partial local/remote effects. This acknowledgement does not perform or verify reconciliation, kill processes, retry commands or authorize a new operation. Never call solely because a server restarted or a timeout elapsed.
| Name | Type | Req | Description |
|---|---|---|---|
| operatorReconciled | boolean | yes | – |
| workspaceRoot | string | yes | – |
No output schema declared.
No examples provided.
resolve_mcdev_project_artifact ~190
Read-only qualified local resolution for query, script and bounded asset-email layouts (htmlemail/templatebasedemail matched by customerKey, with exact HTML/preheader/text extract companions); other types and layouts are unsupported. Returns paths, not arbitrary file contents, and does not confirm dependencies. Blocked/ambiguous results offer no editable companions. Never reads auth contents or logs. No guarantee of remote freshness or an atomic filesystem sandbox; prevent concurrent filesystem mutation.
| Name | Type | Req | Description |
|---|---|---|---|
| businessUnit | string | yes | – |
| credential | string | yes | – |
| externalKey | string | yes | – |
| maxDepth | integer | – | – |
| maxEntries | integer | – | – |
| metadataType | string | yes | query, script or asset-email (bounded htmlemail/templatebasedemail layouts only). |
| rootKind | string | yes | – |
| workspaceRoot | string | yes | Canonical absolute mcdev project root. |
No output schema declared.
No examples provided.
run_mcdev_command ~168
Execute an explicitly requested native mcdev command in a developer-controlled project. Use mcdev_get_command for syntax and execution availability. args are exact argv tokens after the canonical command, not a shell string. Supports native metadata selectors, markets, validation hooks and native overwrite/deletion/auth-persistence effects. Supply explicit target/choices; no terminal interaction or automatic defaults. Deploy/runtime effects require the corresponding user request and ordinary host approval; no extra consent ritual. Diagnostics are bounded projections, not raw output. Completion is not independent remote verification; never automatically retry partial/unknown operations. Configure host timeouts for long operations; progress is emitted when requested.
| Name | Type | Req | Description |
|---|---|---|---|
| args | array | yes | – |
| command | string | yes | – |
| timeoutMs | integer | – | – |
| workspaceRoot | string | yes | – |
No output schema declared.
No examples provided.
How do I install the io.github.JoernBerkefeld/mcp-server-mcdev server?
io.github.JoernBerkefeld/mcp-server-mcdev runs locally as an npm package, launched with npx -y mcp-server-mcdev. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · mcp-server-mcdev
claude mcp add joernberkefeld-mcp-server-mcdev -- npx -y mcp-server-mcdev
What is the io.github.JoernBerkefeld/mcp-server-mcdev server?
io.github.JoernBerkefeld/mcp-server-mcdev is listed in the public MCP registry as io.github.JoernBerkefeld/mcp-server-mcdev. Native mcdev through AI: retrieve, build, deploy, command discovery and offline docs. This page covers its npm package (mcp-server-mcdev).
Is the io.github.JoernBerkefeld/mcp-server-mcdev server safe to use?
io.github.JoernBerkefeld/mcp-server-mcdev scores 88 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.JoernBerkefeld/mcp-server-mcdev server expose?
io.github.JoernBerkefeld/mcp-server-mcdev exposes 20 tools: run_mcdev_command, reconcile_mcdev_operation, diagnose_mcdev_retrieve_logs, mcdev_search_docs, mcdev_get_doc_section, and 15 more. Their descriptions and schemas cost roughly 2,598 tokens of context every time the server is loaded.
Is the io.github.JoernBerkefeld/mcp-server-mcdev server still maintained?
io.github.JoernBerkefeld/mcp-server-mcdev is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.JoernBerkefeld/mcp-server-mcdev server under?
io.github.JoernBerkefeld/mcp-server-mcdev declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.