# OpenDeck (pypi · opendeck-mcp)

Configure OpenDeck stream controllers (Stream Deck and others) in natural language.

- Trust score: 79/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-16

## Components

- pypi · `opendeck-mcp`: 79/100 (this document), [markdown](https://verifymcp.io/servers/kastro5-opendeck-mcp/opendeck-mcp.md), [page](https://verifymcp.io/servers/kastro5-opendeck-mcp/opendeck-mcp)

## Channel facts

- Registry: `pypi`
- Package: `opendeck-mcp`
- Version: `0.4.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-16.

- **Supply Chain Security**: 100/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - Runs hatchling.build at install time, a recognised build step with no custom scripting around it.
  - 1 of 36 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 97/100
  - Source repository is publicly reachable at the declared URL.
  - Cryptographically verified build provenance (signed, bound to kastro5/opendeck-mcp).
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 0 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 66/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 4039 tokens (~122/item across 33 items; 33 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 94/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 80% of tool parameters carry a description.
  - Structured output schemas are declared (94% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 34 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### How do I install the OpenDeck MCP server?

OpenDeck runs locally as a PyPI package, launched with uvx opendeck-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add kastro5-opendeck-mcp -- uvx opendeck-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "kastro5-opendeck-mcp": {
      "command": "uvx",
      "args": [
        "opendeck-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "kastro5-opendeck-mcp": {
      "command": "uvx",
      "args": [
        "opendeck-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add kastro5-opendeck-mcp -- uvx opendeck-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "kastro5-opendeck-mcp": {
      "type": "local",
      "command": [
        "uvx",
        "opendeck-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add kastro5-opendeck-mcp --command uvx --arg opendeck-mcp
```

### Hermes

```yaml
mcp_servers:
  kastro5-opendeck-mcp:
    command: "uvx"
    args: ["opendeck-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "kastro5-opendeck-mcp": {
      "Transport": "stdio",
      "Command": "uvx",
      "Arguments": [
        "opendeck-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add kastro5-opendeck-mcp -t stdio -c uvx -a opendeck-mcp
```

### Other

```json
{
  "mcpServers": {
    "kastro5-opendeck-mcp": {
      "command": "uvx",
      "args": [
        "opendeck-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-16 (score 79, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-10-15 (score 64)

First indexed and scored.

## MCP tools (33)

### `get_overview` (~52 tokens)

Start here. Lists devices (grid size, dials, touchpoints, connected), each device's profiles and
which is selected, installed plugins, whether OpenDeck is running, and how many changes are staged.

Output parameters:

- `result` (string)

### `show_profile` (~117 tokens)

Render a profile: a grid sketch plus every occupied slot with its action, title and state.
Includes staged (not yet applied) changes, marked with *. Slot labels shown are the ones the
editing tools accept.

Input parameters:

- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `profile`: Profile id; defaults to the device's selected profile.
- `show_children` (boolean)
- `show_settings` (boolean): Include each key's settings (redacted).

Output parameters:

- `result` (string)

### `list_actions` (~85 tokens)

List actions that can be placed on keys or dials: name, plugin, uuid, controllers, states.
Includes OpenDeck's Multi Action and Toggle Action, and plugins staged for install.

Input parameters:

- `controller`: Keypad for keys, Encoder for dials.
- `plugin`: Only this plugin (name or id).
- `query`: Filter by text in name/plugin/uuid.

Output parameters:

- `result` (string)

### `describe_action` (~72 tokens)

Explain one action's settings before placing it: a curated schema for OpenDeck and Starter Pack
actions, otherwise hints read from the plugin's settings page, plus real settings from the user's
existing keys (secrets redacted).

Input parameters:

- `action` (string, required): Action uuid or name, e.g. 'Open URL'.

Output parameters:

- `result` (string)

### `get_plugin_settings` (~37 tokens)

Show a plugin's global (plugin-wide) settings with secret values redacted.

Input parameters:

- `plugin` (string, required): Plugin name or folder id.

Output parameters:

- `result` (string)

### `read_logs` (~62 tokens)

Tail OpenDeck's log or a plugin's log (tokens redacted). Useful after apply_changes.

Input parameters:

- `grep`: Only lines matching this regex.
- `lines` (integer)
- `plugin`: Plugin name/id, or omit for OpenDeck's own log.

Output parameters:

- `result` (string)

### `get_app_rules` (~26 tokens)

Show automatic profile switching: which profile each device switches to when an app is focused.

Output parameters:

- `result` (string)

### `set_key` (~270 tokens)

Place an action on a key or dial, replacing whatever is there. For dials use dial<N> with an action
that supports Encoder. For a Multi/Toggle Action, set it here, then add_child. Staged only.

Input parameters:

- `action` (string, required): Action uuid or name (see list_actions).
- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `image`: Key image: a file path, an http(s) URL, or a data: URL; 'default' restores the action's own.
- `profile`: Profile id; defaults to the device's selected profile.
- `settings`: The action's settings object (see describe_action).
- `slot` (string, required): Slot: r1c1 (row/column, 1-based), key13, touch1, dial1 or infobar1.
- `title`: Text drawn on the key; \n for a new line.
- `title_style`: Title look: show (bool), colour (#RRGGBB), size (int), family (font), style (Regular|Bold|Italic|Bold Italic), alignment (top|middle|bottom), underline (bool), stroke_colour, stroke_size, background_…

Output parameters:

- `result` (string)

### `update_key` (~377 tokens)

Change an existing key without replacing its action: title, title style, image, settings,
or which state it shows.

Title text, image and settings changes on the profile a connected device is showing apply
instantly, with no restart (undo with undo_live). Anything else (title style, current state,
another profile, a device with staged changes) is staged for apply_changes; the result says
which happened. A live settings change reaches the plugin as if edited in OpenDeck's own panel;
if that key's settings panel is open in OpenDeck, reopen it to see the change.

Input parameters:

- `current_state`
- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `image`: Key image: a file path, an http(s) URL, or a data: URL; 'default' restores the action's own.
- `mode` (string): auto: apply instantly when possible, else stage; live: instantly or fail; staged: always stage.
- `profile`: Profile id; defaults to the device's selected profile.
- `remove_settings`
- `settings_merge`: Merged into the settings (JSON merge patch: null deletes a key).
- `settings_replace`: Replaces the settings entirely.
- `slot` (string, required): Slot, or <slot>/child<N> for a child.
- `state`: Which state to restyle (0-based) for multi-state actions; default all.
- `title`
- `title_style`: Title look: show (bool), colour (#RRGGBB), size (int), family (font), style (Regular|Bold|Italic|Bold Italic), alignment (top|middle|bottom), underline (bool), stroke_colour, stroke_size, background_…

Output parameters:

- `result` (string)

### `undo_live` (~70 tokens)

Undo the latest instant (live) edits made by update_key, newest first: titles, images and
settings go back to what they were. Staged changes and applied plans are undone with
discard_changes and restore_backup instead.

Input parameters:

- `count` (integer): How many of the latest live edits to undo.

Output parameters:

- `result` (string)

### `make_folder` (~194 tokens)

Make a folder: a new profile opened by a key on this one, with a Back key inside. OpenDeck
allows one folder level, so it's created as '<this profile's folder>/<name>'. Staged only.

Input parameters:

- `back_image`: Back key image; default a generated arrow, 'default' for the action's own.
- `back_slot` (string): Key in the folder that goes back.
- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `image`: Key image: a file path, an http(s) URL, or a data: URL; 'default' restores the action's own.
- `name` (string, required): Folder name, also the key's title.
- `profile`: Profile id; defaults to the device's selected profile.
- `slot` (string, required): Empty key that will open the folder.

Output parameters:

- `result` (string)

### `clear_key` (~97 tokens)

Remove the action from a key or dial. Staged only.

Input parameters:

- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `profile`: Profile id; defaults to the device's selected profile.
- `slot` (string, required): Slot: r1c1 (row/column, 1-based), key13, touch1, dial1 or infobar1.

Output parameters:

- `result` (string)

### `move_key` (~194 tokens)

Move, swap or copy a key (with its settings, title, image and children), within a profile or to
another profile/device. Staged only.

Input parameters:

- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `from_slot` (string, required): Slot: r1c1 (row/column, 1-based), key13, touch1, dial1 or infobar1.
- `mode` (string): move (destination must be empty), swap, or copy.
- `profile`: Profile id; defaults to the device's selected profile.
- `to_device`: Destination device (default: same).
- `to_profile`: Destination profile (default: same).
- `to_slot` (string, required): Slot: r1c1 (row/column, 1-based), key13, touch1, dial1 or infobar1.

Output parameters:

- `result` (string)

### `add_child` (~259 tokens)

Add an action inside a Multi Action (runs all children in order) or Toggle Action (cycles through
them, one per press). Put the Multi/Toggle Action on the key with set_key first. Staged only.

Input parameters:

- `action` (string, required): Action uuid or name to add inside it.
- `delay_ms`: Multi Action only: wait after this child, in ms (default 100).
- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `image`: Key image: a file path, an http(s) URL, or a data: URL; 'default' restores the action's own.
- `position`: 1-based position; default last.
- `profile`: Profile id; defaults to the device's selected profile.
- `settings`
- `slot` (string, required): Slot holding a Multi/Toggle Action.
- `title`
- `title_style`: Title look: show (bool), colour (#RRGGBB), size (int), family (font), style (Regular|Bold|Italic|Bold Italic), alignment (top|middle|bottom), underline (bool), stroke_colour, stroke_size, background_…

Output parameters:

- `result` (string)

### `remove_child` (~111 tokens)

Remove one action from inside a Multi/Toggle Action. Staged only.

Input parameters:

- `child` (integer, required): 1-based child number.
- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `profile`: Profile id; defaults to the device's selected profile.
- `slot` (string, required): Slot: r1c1 (row/column, 1-based), key13, touch1, dial1 or infobar1.

Output parameters:

- `result` (string)

### `set_multi_delays` (~128 tokens)

Set the pauses between the children of a Multi Action. Staged only.

Input parameters:

- `delays_ms` (array, required): delays_ms[i] = wait after child i+1, in ms (default 100 each).
- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `profile`: Profile id; defaults to the device's selected profile.
- `slot` (string, required): Slot: r1c1 (row/column, 1-based), key13, touch1, dial1 or infobar1.

Output parameters:

- `result` (string)

### `manage_profile` (~138 tokens)

Create, duplicate, rename or delete a profile, or make one the device's selected profile.
Renaming also updates app rules and Switch Profile keys that point at it. Staged only.

Input parameters:

- `copy_from`: For duplicate: the source (default: the selected profile).
- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `new_name`: For rename.
- `operation` (string, required)
- `profile` (string, required): The profile to act on (for create/duplicate: the new name). Names may be 'Folder/Name' (one level).

Output parameters:

- `result` (string)

### `set_app_rule` (~112 tokens)

Switch a device to a profile automatically when an app is focused. Staged only.

Input parameters:

- `app` (string, required): The app's display name as OpenDeck sees it (e.g. 'Visual Studio Code', 'Chatterino'), or 'opendeck_default' for the fallback when no rule matches.
- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `profile` (required): Profile to switch to; null removes the rule.

Output parameters:

- `result` (string)

### `set_plugin_settings` (~72 tokens)

Change a plugin's global (plugin-wide) settings, e.g. a server URL. Staged only.

Input parameters:

- `plugin` (string, required): Plugin name or folder id.
- `remove_keys`
- `values` (object, required): Merged into the plugin's global settings. «redacted» keeps a secret.

Output parameters:

- `result` (string)

### `set_device_layout` (~87 tokens)

Tell opendeck-mcp a device's key grid size when it can't detect it (stored locally; doesn't
touch OpenDeck). Usually unnecessary: the bridge plugin records it automatically.

Input parameters:

- `columns` (integer, required)
- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `rows` (integer, required)

Output parameters:

- `result` (string)

### `preview_changes` (~64 tokens)

Show everything staged: per device/profile/slot changes, warnings (commands that will run, plugins
that will be installed), and conflicts with edits made in OpenDeck since staging.

Input parameters:

- `detail` (string): summary: per-key changes and warnings; files: JSON diffs.

Output parameters:

- `result` (string)

### `discard_changes` (~43 tokens)

Drop staged changes without applying them.

Input parameters:

- `which`: 'all', 'last', or staged op ids like ['op3', 'op5'] (see preview_changes).

Output parameters:

- `result` (string)

### `render_profile` (~118 tokens)

A picture of the deck as OpenDeck draws it: icons, titles, colours, dials, with staged
changes outlined. Use it to check a layout before applying, or to show the user.

Input parameters:

- `compare` (boolean): Now and after-apply side by side.
- `device` (string, required): Device id or name, e.g. 'ulanzi-d200h' (see get_overview).
- `profile`: Profile id; defaults to the device's selected profile.
- `staged` (boolean): Include staged changes (outlined).

### `make_icon` (~195 tokens)

Make a key image: text, an emoji, a brand logo or a generic symbol on a coloured square.
Returns a preview and a file path to pass as `image` to set_key / update_key / add_child.

Input parameters:

- `background`: #RRGGBB; default dark grey, or the brand colour for brand: icons.
- `colour`: #RRGGBB for text/symbol; default black or white, whichever reads better.
- `font`: Font for text: icons (OpenDeck's title fonts).
- `icon` (string, required): text:Hi (use   for a second line), emoji:🔥, brand:github (Simple Icons slug) or mdi:lightbulb-on (Material Design Icons name). Names: find_icons.
- `scale`: Size of the art, 0.2-1.0.
- `style`: Regular, Bold, Italic or Bold Italic.

### `find_icons` (~69 tokens)

Find icon names for make_icon.

Input parameters:

- `icon_set` (string): mdi: ~7,400 generic symbols; brand: ~3,400 logos (Simple Icons).
- `limit` (integer)
- `query` (string, required): Words, e.g. 'microphone off' or 'spotify'.

Output parameters:

- `result` (string)

### `ha_search` (~96 tokens)

Find Home Assistant entities (id, name, state, area) to put on keys, using the Home Assistant
plugin's saved login. With no filters, lists the areas and domains.

Input parameters:

- `area`: Area name, exactly as Home Assistant shows it.
- `domain`: e.g. light, switch, scene, script.
- `limit` (integer)
- `query`: Words to match in id, name or area.

Output parameters:

- `result` (string)

### `ha_describe_entity` (~49 tokens)

One Home Assistant entity: state, attributes, area, the services its domain offers, and
ready-made settings for a Home Assistant key that controls it.

Input parameters:

- `entity_id` (string, required)

Output parameters:

- `result` (string)

### `ha_call_service` (~91 tokens)

Call a Home Assistant service right now, e.g. to test what a key will do. Acts on the real
home: call with confirm=false first and get the user's OK.

Input parameters:

- `confirm` (boolean): false: describe only; true: call it.
- `data`: Extra service data.
- `entity_id`
- `service` (string, required): domain.service, e.g. light.toggle.

Output parameters:

- `result` (string)

### `find_plugins` (~78 tokens)

Search for plugins to install, with author, repository and installed/available versions.

Input parameters:

- `limit` (integer)
- `query`: Search text.
- `source` (string): catalogue: open-source OpenAction plugins (same list as OpenDeck's Plugin Manager); archive: rehosted Elgato Stream Deck plugins; installed: what's installed.

Output parameters:

- `result` (string)

### `stage_plugin` (~140 tokens)

Install, update or remove a plugin. Installing runs third-party code on the user's computer: call
first with confirm=false, show the user what was found (author, version, checksum, AI-assisted flag),
and only stage it with confirm=true after they agree. Removal clears the plugin's keys everywhere.

Input parameters:

- `confirm` (boolean): false: download and inspect only. true: stage it (after the user agreed).
- `operation` (string, required)
- `plugin_id` (string, required): Catalogue id (see find_plugins) or installed id.
- `source` (string)
- `url`: Direct .streamDeckPlugin/.zip URL for source=url.

Output parameters:

- `result` (string)

### `apply_changes` (~107 tokens)

The only tool that changes OpenDeck. Stops OpenDeck, backs up, writes all staged changes, verifies
them and restarts OpenDeck. Call with confirm=false first and show the user the result.

Input parameters:

- `allow_untested_version` (boolean)
- `confirm` (boolean): false: show what would happen. true: apply (only after the user agreed).
- `on_conflict` (string)
- `show_window` (boolean): Open OpenDeck's window after restarting.

Output parameters:

- `result` (string)

### `list_backups` (~29 tokens)

Backups taken by apply_changes and restore_backup, newest first.

Input parameters:

- `limit` (integer)

Output parameters:

- `result` (string)

### `restore_backup` (~63 tokens)

Undo an apply: put the files it changed back as they were (restarts OpenDeck). Call with
confirm=false first to see what would be restored.

Input parameters:

- `backup_id` (string, required)
- `confirm` (boolean)
- `show_window` (boolean)

Output parameters:

- `result` (string)

## Diagnostics

Captured diagnostic sections: Provenance, Install scripts, Dependencies. The full working is on the page: https://verifymcp.io/servers/kastro5-opendeck-mcp/opendeck-mcp#diagnostics

## Score history

- 2026-10-16: 79
- 2026-10-15: 64

## Common questions

### What is the OpenDeck MCP server?

OpenDeck is an MCP server listed in the public MCP registry as io.github.kastro5/opendeck-mcp. Configure OpenDeck stream controllers (Stream Deck and others) in natural language. This page covers its PyPI package (opendeck-mcp).

### Is the OpenDeck MCP server safe to use?

OpenDeck scores 79 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 16 October 2026. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the OpenDeck MCP server expose?

OpenDeck exposes 33 tools: get_overview, show_profile, list_actions, describe_action, get_plugin_settings, and 28 more. Their descriptions and schemas cost roughly 3,702 tokens of context every time the server is loaded.

### Is the OpenDeck MCP server still maintained?

OpenDeck is still listed as active in the MCP registry. We last reached this channel on 16 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the OpenDeck MCP server under?

OpenDeck declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- PyPI project: https://pypi.org/project/opendeck-mcp/
- Socket report: https://socket.dev/pypi/package/opendeck-mcp
- Repository: https://github.com/kastro5/opendeck-mcp
- Changelog RSS feed: https://verifymcp.io/servers/kastro5-opendeck-mcp/opendeck-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/kastro5-opendeck-mcp/opendeck-mcp.json
- HTML version of this page: https://verifymcp.io/servers/kastro5-opendeck-mcp/opendeck-mcp