io.github.ostapondo/plonk
NPM · PLONK-MCP · SCANNED AUG 17
MCP server for Plonk: macOS window zones, workspaces, keep-awake, screenshots and on-device OCR.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 30 of 96 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Build provenance is cryptographically sound, but it attests a different repository to the one declared in the registry. Most often the declared URL is simply stale. View diagnostics → Unverified
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 1 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability66
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3500 tokens (~184/item across 19 items; 19 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management30
- Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage91
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 74% of tool parameters carry a description.Partial
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · plonk-mcp
claude mcp add ostapondo-plonk -- npx -y plonk-mcp
codex mcp add ostapondo-plonk -- npx -y plonk-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ostapondo-plonk": {
"type": "local",
"command": [
"npx",
"-y",
"plonk-mcp"
],
"enabled": true
}
}
} openclaw mcp add ostapondo-plonk --command npx --arg -y --arg plonk-mcp
mcp_servers:
ostapondo-plonk:
command: "npx"
args: ["-y", "plonk-mcp"] {
"mcpServers": {
"ostapondo-plonk": {
"command": "npx",
"args": [
"-y",
"plonk-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 17 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
- 15 Aug 26 +1
- Stability: 0.20 → unverified ▼ security
- Capabilities: pass → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Package version: 0.2.4 → 0.2.5 functional
- 13 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 13 to 17. That category is still filling its 30-day observation window: 4 days of observed history at the previous scan, 5 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Aug 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 10 Aug 26 +11
- Known CVEs: unverified → pass ▲ security
- Dependency health: unverified → 0.85 ▲ functional
- Security disclosure: fail → pass ▲ functional
- Package version: 0.2.3 → 0.2.4 functional
- 9 Aug 26 +1
- Stability: unverified → 0.03 ▲ functional
- Package version: 0.2.2 → 0.2.3 functional
- 8 Aug 26 +27
- Provenance: fail → unverified ▼ security
- Known CVEs: unverified → pass ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Tool coverage: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Dependency health: unverified → 0.85 ▲ functional
- First check of Tool coverage: 73 functional
- First check of Schema quality: fail functional
- First check of Schema quality: excellent functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 68 functional
- Package version: 0.0.3 → 0.2.2 functional
- Package version: 0.0.3 → 0.2.0 functional
- Package version: 0.0.3 → 0.1.0 functional
- Package version: 0.0.3 → 0.0.4 functional
- 7 Aug 26 28
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 17 Aug 2026 · Analysed npm/plonk-mcp@0.2.5
Provenance Repository mismatch
The attestation is cryptographically sound but binds a different repository to the one the registry declares. Most often the declared URL is simply stale.
| Result | Repository mismatch |
|---|---|
| Ecosystem | npm |
| Reason | Repository mismatch |
| Discovered via | Registry attestation endpoint |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/ostapondo/Plonk/.github/workflows/release.yml@refs/tags/v0.2.5 |
| Rekor log index | 2476860148 |
| Predicate type | https://slsa.dev/provenance/v1 |
| Subject digest | sha512:b5f2cf26d76d2bcbb2984c2f8767412f26ad4a7a91a49958bd0b9260a237c52204e966ac3e75b531ca4daed160c712830bada07f7e13dfc8c9c5419f3 |
Dependencies 96 packages
| Packages resolved | 96 |
|---|---|
| Stale | 30 |
| Tree resolution | Complete |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
annotate_screenshot ~201
Draw on a screenshot you already took, then copy it to the clipboard and show it to the user. Call take_screenshot first and LOOK at the image: you cannot know where anything is until you have seen it. Points are fractions 0..1 of the image, origin TOP-LEFT, so a rectangle around a left sidebar that is a seventh of the width and starts under the title bar is [{x:0,y:0.05},{x:0.14,y:1}]. Rectangle and ellipse take two opposite corners, arrow takes start then tip, pen and highlight take a run of points. Returns the marked image so you can check what you drew.
| Name | Type | Req | Description |
|---|---|---|---|
| clipboard | boolean | – | Copy the result to the clipboard (default true) |
| marks | array | yes | – |
| output | string | – | Where to write it; defaults to the source name plus ' marked' |
| path | string | yes | Path returned by take_screenshot |
No output schema declared.
No examples provided.
apply_layout ~210
Move and resize windows to build a layout. Each item places one window: 'app' is the app name (fuzzy matched), optional 'title' filters windows of that app by title substring, optional 'screen' is the monitor index from get_state (each monitor can get its own layout — just send items with different 'screen' values; defaults to the screen the window is currently on), 'frame' is {x,y,w,h} as fractions 0..1 of that screen's visible area with origin at TOP-LEFT (left half = {x:0,y:0,w:0.5,h:1}; bottom-right quarter = {x:0.5,y:0.5,w:0.5,h:0.5}; centered 60% = {x:0.2,y:0.15,w:0.6,h:0.7}). Windows are unminimized if needed. Returns per-item success/errors.
| Name | Type | Req | Description |
|---|---|---|---|
| items | array | yes | – |
No output schema declared.
No examples provided.
apply_saved_layout ~117
Launch a saved workspace by name. Legacy name kept for older clients — new integrations should call launch_workspace, which adds a 'screen' option to pull the whole workspace onto one monitor. Opens every app that is not running, waits for its windows, and moves them into the saved positions; macOS cannot open an app straight into a position, so windows appear first and jump into place. Returns per-app success and reports apps that never opened a window. Takes up to a minute for a large workspace.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | – |
No output schema declared.
No examples provided.
assign_zone_set ~133
Assign a zone set (built-in or saved) to one monitor, so dragging a window there snaps to that set's zones. Each monitor keeps its own assignment; assigning replaces whatever that monitor used before and takes effect on the next drag. Omit 'name' to restore the default set (Halves); pass 'edge' for plain edge snapping instead of zones. Available set names and current per-monitor assignments are in get_state.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | – | Zone set name, or 'edge' for edge snapping; omit for the default set |
| screen | integer | yes | Monitor index (0 = primary) |
No output schema declared.
No examples provided.
check_for_update ~239
Ask Plonk whether a newer release exists, and report what is installed. Use this when the user asks what version they run, whether Plonk is up to date, or before calling install_update — which refuses unless a newer release is already on offer. The check is a network round trip to the GitHub releases API, so this returns immediately with the state as it stands and the result lands a moment later: read it back from get_state's 'update' key, or wait for an 'update' event on the change stream. If the user has turned update checks off, this fails with 409 rather than dialling out on their behalf — Plonk promises a process that only listens, and the user can still check by hand on its Updates page; report that back instead of retrying. Returns {installed, latest?, available, phase, status, automatic, notes?, page?}: 'available' is true only when 'latest' is newer than 'installed', 'phase' is idle|checking|available|downloading|verifying|installing|failed, and 'status' is a sentence fit to show the user.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
delete_layout ~75
Delete the saved workspace with that name, whether it was saved with save_layout or save_workspace. Legacy name kept for older clients — new integrations should call delete_workspace, which does the same. Use it to clean up saved workspaces that are no longer wanted; existing names are listed in get_state.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | – |
No output schema declared.
No examples provided.
delete_workspace ~37
Delete a saved workspace by name. Use this to clean up workspaces you created that are no longer wanted.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | – |
No output schema declared.
No examples provided.
delete_zone_set ~138
Delete a saved zone set by name. Any monitor currently using it falls back to the default set (Halves), so snapping keeps working. Only sets made with save_zone_set can go: the built-ins (Halves, Thirds, 60 / 40, Quarters, Priority) are refused. Deleting is immediate and cannot be undone — the zones would have to be described again. Saved sets and their per-monitor assignments are listed in get_state; use assign_zone_set instead when a monitor should merely stop using a set that others still need.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Saved zone set name, as shown in get_state |
No output schema declared.
No examples provided.
extract_text ~437
Read the words off the screen, or off a saved image, and return them as text. Recognition runs on the Mac itself and nothing is uploaded. Prefer this over take_screenshot whenever the answer is words rather than a picture — an error dialog, a log, a terminal, a table, text baked into an image or a paused video, a PDF page in a viewer that will not let text be selected. It costs a fraction of the tokens an image does and does not depend on reading pixels correctly. Use take_screenshot instead when layout, colour or 'what does this look like' is the question. mode 'screen' captures everything with no user interaction; 'region' and 'window' hand the user the native crosshair or window picker and wait for them, up to five minutes. Pass 'path' instead of a mode to read an image already on disk, including one take_screenshot just wrote. Returns 'text' (every line in reading order, top to bottom) and 'lines' — each with the recognized string, Vision's 0..1 'confidence', and 'box' {x,y,w,h} as fractions 0..1 of the image with origin at TOP-LEFT. Those boxes share the coordinate space annotate_screenshot draws in, so a line can be circled where it was found by passing the same path to that tool. The text is also copied to the clipboard unless 'clipboard' is false. An area with no readable text returns ok with an empty 'text' and a 'note' rather than an error.
| Name | Type | Req | Description |
|---|---|---|---|
| clipboard | boolean | – | Copy the recognized text to the clipboard (default true) |
| languages | array | – | BCP-47 tags to recognize, most likely first, e.g. ['uk-UA','en-US']. Omit to use the user's configured choice. Which are available depends on the macOS version; get_state lists the current setting un… |
| mode | string | – | What to capture; ignored when 'path' is given |
| path | string | – | Read this image file instead of capturing (.png, .jpg) |
No output schema declared.
No examples provided.
get_state ~114
Get the current desktop state: all screens/monitors (index, frame, visible area — coordinates have origin at top-left of the primary screen, y grows down), all open windows (app name, title, which screen it is on, absolute frame, and 'fraction' — its position as fractions 0..1 of that screen's visible area), saved layout names, and whether keep-awake is on. ALWAYS call this first before applying a layout, to see which apps are running and how many monitors there are.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
install_update ~234
Install the release that check_for_update found: Plonk downloads the build, checks it is signed with the same certificate as the running copy, swaps the bundle in, and relaunches itself. Prefer this over telling the user to download a build by hand — the signature check is also what preserves their Accessibility and Screen Recording grants, which a hand-installed copy can lose. Ask the user before calling it: it quits the app, so any window arrangement in flight stops and the local API is unreachable for a few seconds until the new copy is up. It fails without touching the installed copy when no newer release is on offer (call check_for_update first), when the user has update checks switched off (409 — installing downloads a build, so it is bound by the same promise as the check; they can install from Plonk's Updates page), when the download does not match the release or its signature, or when Plonk.app sits somewhere the user cannot write. Returns the same shape as check_for_update plus {installing: true} once the swap has started; poll get_state afterwards to confirm the new version came up.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
launch_workspace ~147
Launch a saved workspace: opens every app that is not running, waits for its windows, and moves them into the saved positions. Each window returns to the monitor it was captured on, so a workspace spanning several displays comes back spanning them. macOS cannot open an app straight into a position, so windows appear first and jump into place. Returns per-app success, and reports apps that never opened a window. Takes up to a minute for a large workspace.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | – |
| screen | integer | – | Pull the whole workspace onto this monitor instead of the ones it was captured on. Use when a display is no longer attached, or to move a setup to another screen. |
No output schema declared.
No examples provided.
save_layout ~118
Save the named window arrangement as a workspace. Legacy name kept for older clients — new integrations should call save_workspace, which can also record whether running apps get moved into place. Omit 'items' to snapshot the windows exactly as they are on screen right now; pass 'items' to describe the arrangement explicitly. Saving over an existing name replaces it. Saved workspaces are listed in get_state, with their full contents.
| Name | Type | Req | Description |
|---|---|---|---|
| items | array | – | – |
| name | string | yes | Workspace name, e.g. 'work', 'focus' |
No output schema declared.
No examples provided.
save_workspace ~144
Save a workspace: the apps of a desktop setup, where each window goes, and what each app should open. Pass 'items' to describe the arrangement, or omit them to snapshot the windows exactly as they are on screen right now. Saving over an existing name replaces it. Saved workspaces are listed in get_state, with their full contents.
| Name | Type | Req | Description |
|---|---|---|---|
| items | array | – | – |
| move_existing | boolean | – | When true (the default), an app that is already running has its windows moved into place. When false, running apps are left alone and only missing apps are launched. |
| name | string | yes | Workspace name, e.g. 'work', 'writing' |
No output schema declared.
No examples provided.
save_zone_set ~153
Create or replace a named zone set used for drag snapping. Zones are rectangles {x,y,w,h} as fractions 0..1 of a screen's visible area, origin TOP-LEFT; each zone must stay inside the screen, but zones may overlap each other (the smallest one under the cursor wins). Pass 'screen' to also assign the set to that monitor so it becomes active immediately. Built-in sets already exist: Halves, Thirds, 60 / 40, Quarters, Priority.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | yes | Zone set name, e.g. 'coding' |
| screen | integer | – | Monitor index to assign this set to (0 = primary) |
| zones | array | yes | – |
No output schema declared.
No examples provided.
select_agent ~147
Make an agent the user's active one in Plonk. Omit 'name' to select this client itself; pass "" to clear the choice so any agent may drive. The active agent shows in Plonk's menu bar and settings, and is where voice and other outgoing requests will go. With 'exclusive' true the app also rejects window and settings changes from every other agent (they can still read state and take screenshots). Connected agents are listed in get_state under 'agents'.
| Name | Type | Req | Description |
|---|---|---|---|
| exclusive | boolean | – | Also turn 'only the active agent controls' on or off |
| name | string | – | Agent name from get_state's 'agents'; omit for this client, "" to clear |
No output schema declared.
No examples provided.
set_awake ~327
Turn keep-awake on or off, so the Mac does not sleep part-way through something. Three ways to end the session, in order of preference: 'pid' ends it the moment that process exits — best by far when something is running, because a build or a render knows when it is finished and nothing is left holding the machine awake afterwards; 'until' ends it at a wall-clock time ('17:00', or an ISO-8601 timestamp); 'minutes' ends it after a countdown. Give none of them and it runs until switched off. Behavior also follows the user's settings: keep-awake may pause on battery or engage automatically while charging, so the returned 'status' is what actually happened and 'awake' is whether an assertion is held right now. The menu bar icon glows while it is. A process-bound session is deliberately not restored if Plonk restarts, since the pid would mean nothing by then. Errors come back for a pid that is not running or a time that has already passed.
| Name | Type | Req | Description |
|---|---|---|---|
| minutes | integer | – | End the session after this many minutes |
| on | boolean | yes | – |
| pid | integer | – | End when this process exits. Use the pid of the long job being waited on; get_state lists a pid for every open window |
| until | string | – | End at a time of day, e.g. '17:00' (the next such moment — tomorrow if today's has passed), or an ISO-8601 timestamp like '2026-08-08T17:00:00Z' |
No output schema declared.
No examples provided.
snap_window ~154
Drop one window into a numbered zone of the snap-zone set assigned to that monitor. The numbers are the ones Plonk draws on the zones while a window is dragged, so 'the middle zone' of a three-zone set is 2. Zone sets and their per-monitor assignment are in get_state; use apply_layout instead when the user describes a size rather than a zone.
| Name | Type | Req | Description |
|---|---|---|---|
| app | string | yes | App name to match, e.g. 'Visual Studio Code' |
| screen | integer | – | Monitor index; defaults to the one the window is on |
| title | string | – | Only windows whose title contains this substring |
| zone | integer | yes | 1-based zone number, as shown on the drag overlay |
No output schema declared.
No examples provided.
take_screenshot ~375
Capture the screen and return the image so it can be looked at. mode 'screen' captures everything (no user interaction); mode 'app' captures one named window and needs no user interaction either — pass 'app' and/or 'title_contains', and it works even when that window is behind others, minimized excepted, without raising it or taking focus; 'region' and 'window' hand the user the native crosshair/window picker and wait for them. Prefer 'app' whenever the user asks about a particular program ("what is playing in Spotify", "read the error in Xcode") — it is the only mode that can see a window the user cannot, and it does not disturb their desktop. Set annotate=true to open Plonk's drawing editor on the capture instead of returning it — use that when the user wants to mark the shot up themselves. Optional 'path' writes to an explicit file, otherwise the configured screenshot folder is used; 'clipboard' overrides the configured copy-to-clipboard behavior. The returned image is scaled down for legibility; the file at 'path' keeps full resolution. To draw on the result, pass that 'path' to annotate_screenshot.
| Name | Type | Req | Description |
|---|---|---|---|
| annotate | boolean | – | Open the annotation editor instead of returning the image |
| app | string | – | mode 'app': app name or bundle id, case-insensitive substring (e.g. 'Spotify') |
| clipboard | boolean | – | Also copy the capture to the clipboard |
| include_image | boolean | – | Return the image content itself, so it can be inspected (default true) |
| mode | string | – | – |
| path | string | – | Explicit output file path (.png) |
| title_contains | string | – | mode 'app': narrows to a window whose title contains this, for an app with several |
No output schema declared.
No examples provided.