Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Impri

NPM · @IMPRI/MCP · SCANNED SEP 21

Impri MCP server — human-in-the-loop approval inbox for AI agents

Available components

0 this week 81 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 31 of 95 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability67
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 1756 tokens (~219/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management90
  • Stability observed for 27 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

How do I install the Impri MCP server?

Impri runs locally as an npm package, launched with npx -y @impri/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @impri/mcp

# add to Claude Code
claude mcp add sekera-radim-impri -- npx -y @impri/mcp
// .cursor/mcp.json
{
  "mcpServers": {
    "sekera-radim-impri": {
      "command": "npx",
      "args": [
        "-y",
        "@impri/mcp"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "sekera-radim-impri": {
      "command": "npx",
      "args": [
        "-y",
        "@impri/mcp"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add sekera-radim-impri -- npx -y @impri/mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "sekera-radim-impri": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@impri/mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add sekera-radim-impri --command npx --arg -y --arg @impri/mcp
# ~/.hermes/config.yaml
mcp_servers:
  sekera-radim-impri:
    command: "npx"
    args: ["-y", "@impri/mcp"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "sekera-radim-impri": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@impri/mcp"
      ]
    }
  }
}
# add to Vellum
assistant mcp add sekera-radim-impri -t stdio -c npx -a -y @impri/mcp
// mcp.json
{
  "mcpServers": {
    "sekera-radim-impri": {
      "command": "npx",
      "args": [
        "-y",
        "@impri/mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 20 Sept 26 +1
    • Security disclosure: unverified → fail functional
  • 19 Sept 26 0
    • Security disclosure: fail → unverified functional
  • 18 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes.

  • 17 Sept 26 −3
    • Security disclosure: unverified → fail functional
    • Stability: pass → 0.77 functional
  • 16 Sept 26 0
    • Stability: 0.97 → pass security
    • Security disclosure: fail → unverified functional
  • 15 Sept 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Sept 26 +1
    • Security disclosure: unverified → fail functional
  • 11 Sept 26 0
    • Security disclosure: fail → unverified functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 21 Sept 2026 · Analysed npm/@impri/mcp@0.1.1

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 95 packages
Packages resolved 95
Stale 31
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 8 exposed · ~1,756 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
impri_await_decision ~251

Poll until the human approves, rejects, or the timeout elapses. Checks GET /actions/:id every 5 seconds and returns as soon as the action leaves the pending state. Decision meanings: "approved" — proceed with the action; any reviewer edits are included in preview/payload "rejected" — abort; respect the decision and do not proceed "expired" — the approval window closed; create a new action if the task is still relevant On timeout the action stays pending in the inbox. Call impri_inbox_status to check queue depth and consider pausing further submissions. Typical usage: 1. impri_push_action → get action_id 2. impri_await_decision(action_id) → wait for human decision 3. If approved: execute the action, then impri_report_result(action_id, "executed")

NameTypeReqDescription
action_idstringyesThe id returned by impri_push_action.
timeout_snumberMaximum seconds to wait before returning (default 300 — 5 minutes). After timeout the action is still pending; retry or call impri_inbox_status.

No output schema declared.

No examples provided.

impri_create_watcher ~227

Create a watcher that monitors external sources (RSS feeds, Reddit, URL diffs) and delivers matching items to the approval inbox or a webhook. The watcher runs on the schedule you specify, deduplicates items by URL/content-hash, and delivers only new matches. The first run establishes a baseline and does not generate alerts. Example — watch an RSS feed for AI-related news: spec: { name: "AI launches radar", kind: "rss", config: { url: "https://openai.com/news/rss.xml" }, keywords: ["launch", "gpt-", "voice"], keywords_none: ["funding", "benchmark"], min_score: 1, schedule: { every: "8h", jitter: "4h" } } Returns { watcher_id, name, kind, status, next_run_at }.

NameTypeReqDescription
specobjectyesWatcher specification (name, kind, config, keywords, keywords_none, min_score, schedule). See SPEC.md §3.2 for the full schema.

No output schema declared.

No examples provided.

impri_create_watcher_from_preset ~375

Create a watcher from a preset template by supplying the preset id and param values. Presets handle all watcher config construction — URL building, keyword setup, SSRF validation — so you only provide the param values listed by impri_list_watcher_presets. The schedule defaults to the preset's recommended interval but can be overridden. The name defaults to "{preset title}: {primary param value}" if omitted. Returns { watcher_id, name, kind, status, next_run_at }. Examples: Watch the HN front page (no params needed): preset_id: "hn-front-page" params: {} Watch a subreddit for new posts: preset_id: "reddit-subreddit" params: { subreddit: "MachineLearning" } Watch a GitHub repo for new releases, check every 2 hours: preset_id: "github-releases" params: { owner: "fastify", repo: "fastify" } schedule: { every: "2h" } Watch HN for keyword with a custom min_points threshold: preset_id: "hn-keyword" params: { keyword: "rust programming", min_points: "25" }

NameTypeReqDescription
namestringOptional display name for the watcher. Defaults to "{preset title}: {primary param value}" when omitted.
paramsobjectyesKey/value map of param values as strings. Required params must be present; optional params may be omitted to use preset defaults.
preset_idstringyesPreset identifier from impri_list_watcher_presets (e.g. "hn-front-page", "reddit-subreddit", "github-releases").
scheduleobjectOptional schedule override. Omit to use the preset's default schedule.

No output schema declared.

No examples provided.

impri_inbox_status ~68

Check how many actions are waiting for human decisions. Returns the pending count and a brief list of pending action titles. Call this before starting a large batch of tasks — if the inbox is backed up, pause and let the operator catch up to avoid actions expiring before they are reviewed.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

impri_list_watcher_presets ~174

List all available watcher presets with their parameters. Presets are pre-configured watcher templates for common sources (Hacker News, Reddit, GitHub, npm, YouTube, arXiv, etc.). Each preset has an id, a human-readable title, required and optional params, and a default schedule. Call this first to discover which preset fits your monitoring goal, then use impri_create_watcher_from_preset to create the watcher by supplying only the preset_id and param values. No deep knowledge of watcher config schemas is needed. Example output: Community: - hn-front-page: "Hacker News Front Page" (rss) — no params required - reddit-keyword: "Reddit – Keyword Search" (reddit_search) — params: query, [subreddit]

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

impri_list_watchers ~84

List all configured watchers, optionally filtered by status. Returns the watcher count and a summary line per watcher (id, name, kind, status). Use this to audit what is being monitored, check for degraded watchers, or find a watcher_id for further operations.

NameTypeReqDescription
statusstringFilter watchers by status. Omit to return all watchers regardless of status.

No output schema declared.

No examples provided.

impri_push_action ~438

Submit an action to the Impri human-approval inbox. The action appears in the operator's web and mobile inbox as a card with a title, formatted preview, and optional tap-to-edit fields. The operator approves or rejects with one tap; you poll for the decision with impri_await_decision. Returns { action_id, status: "pending", inbox_url }. Save action_id — you need it for all follow-up calls. Example — send a draft Reddit reply for review: kind: "reddit.comment" title: "Reply: Why is resume advice so conflicting?" preview: { format: "markdown", body: "The advice conflicts because different advisors optimise for different audiences..." } target_url: "https://reddit.com/r/cscareerquestions/comments/..." editable: ["preview.body"] // lets the reviewer tweak wording before approving

NameTypeReqDescription
editablearrayDot-notation fields the reviewer may edit before approving (e.g. ['preview.body']). The final edited values are echoed back in the approved action.
expires_innumberSeconds until the action auto-expires (default 86400 = 24 h). After expiry the status becomes 'expired' and no decision can be made.
idempotency_keystringStable key to prevent duplicate submissions on retry. The same key within 24 h returns the original action instead of creating a new one.
kindstringyesTaxonomy label used for inbox filtering (e.g. 'reddit.comment', 'email.send', 'blog.publish'). Free-form; choose a consistent scheme.
payloadOpaque data echoed back in the webhook callback — useful for storing context (e.g. Reddit post id, draft id, queue position). Not shown to the reviewer.
previewobjectyesThe content the reviewer reads before deciding.
target_urlstringURL the reviewer can open for context (e.g. the Reddit thread, the email draft). Optional but strongly recommended.
titlestringyesShort headline shown in the inbox card. Keep it under 120 characters.

No output schema declared.

No examples provided.

impri_report_result ~139

Report whether you successfully executed an approved action. Closes the audit loop — the operator sees 'executed' or 'execute_failed' in the inbox alongside the original action and decision. Always call this after attempting an approved action, even on failure. Statuses: "executed" — action was carried out successfully "execute_failed" — execution attempt failed (include the error in detail)

NameTypeReqDescription
action_idstringyesThe id returned by impri_push_action.
detailstringOptional message — error description on failure, short confirmation on success.
statusstringyesOutcome of executing the approved action.

No output schema declared.

No examples provided.

Common questions

What is the Impri MCP server?

Impri is an MCP server listed in the public MCP registry as io.github.sekera-radim/impri. Impri MCP server, human-in-the-loop approval inbox for AI agents. This page covers its npm package (@impri/mcp).

Is the Impri MCP server safe to use?

Impri scores 81 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 21 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Impri MCP server expose?

Impri exposes 8 tools: impri_push_action, impri_await_decision, impri_report_result, impri_inbox_status, impri_create_watcher, and 3 more. Their descriptions and schemas cost roughly 1,756 tokens of context every time the server is loaded.

Is the Impri MCP server still maintained?

Impri is still listed as active in the MCP registry. We last reached this channel on 21 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Impri MCP server under?

Impri declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.