Impri
NPM · @IMPRI/MCP · SCANNED SEP 21
Impri MCP server — human-in-the-loop approval inbox for AI agents
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 95 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 70 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability67
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1756 tokens (~219/item across 8 items; 8 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management90
- Stability observed for 27 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the Impri MCP server?
Impri runs locally as an npm package, launched with npx -y @impri/mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @impri/mcp
claude mcp add sekera-radim-impri -- npx -y @impri/mcp
{
"mcpServers": {
"sekera-radim-impri": {
"command": "npx",
"args": [
"-y",
"@impri/mcp"
]
}
}
} {
"servers": {
"sekera-radim-impri": {
"command": "npx",
"args": [
"-y",
"@impri/mcp"
]
}
}
} codex mcp add sekera-radim-impri -- npx -y @impri/mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"sekera-radim-impri": {
"type": "local",
"command": [
"npx",
"-y",
"@impri/mcp"
],
"enabled": true
}
}
} openclaw mcp add sekera-radim-impri --command npx --arg -y --arg @impri/mcp
mcp_servers:
sekera-radim-impri:
command: "npx"
args: ["-y", "@impri/mcp"] {
"McpServers": {
"sekera-radim-impri": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@impri/mcp"
]
}
}
} assistant mcp add sekera-radim-impri -t stdio -c npx -a -y @impri/mcp
{
"mcpServers": {
"sekera-radim-impri": {
"command": "npx",
"args": [
"-y",
"@impri/mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
- Security disclosure: unverified → fail ▼ functional
- 19 Sept 26 0
- Security disclosure: fail → unverified ▼ functional
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 77 to 80. That category is still filling its 30-day observation window: 23 days of observed history at the previous scan, 24 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 −3
- Security disclosure: unverified → fail ▼ functional
- Stability: pass → 0.77 functional
- 16 Sept 26 0
- Stability: 0.97 → pass security
- Security disclosure: fail → unverified ▼ functional
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +1
- Security disclosure: unverified → fail ▼ functional
- 11 Sept 26 0
- Security disclosure: fail → unverified ▼ functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 21 Sept 2026 · Analysed npm/@impri/mcp@0.1.1
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 95 packages
| Packages resolved | 95 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
impri_await_decision ~251
Poll until the human approves, rejects, or the timeout elapses. Checks GET /actions/:id every 5 seconds and returns as soon as the action leaves the pending state. Decision meanings: "approved" — proceed with the action; any reviewer edits are included in preview/payload "rejected" — abort; respect the decision and do not proceed "expired" — the approval window closed; create a new action if the task is still relevant On timeout the action stays pending in the inbox. Call impri_inbox_status to check queue depth and consider pausing further submissions. Typical usage: 1. impri_push_action → get action_id 2. impri_await_decision(action_id) → wait for human decision 3. If approved: execute the action, then impri_report_result(action_id, "executed")
| Name | Type | Req | Description |
|---|---|---|---|
| action_id | string | yes | The id returned by impri_push_action. |
| timeout_s | number | – | Maximum seconds to wait before returning (default 300 — 5 minutes). After timeout the action is still pending; retry or call impri_inbox_status. |
No output schema declared.
No examples provided.
impri_create_watcher ~227
Create a watcher that monitors external sources (RSS feeds, Reddit, URL diffs) and delivers matching items to the approval inbox or a webhook. The watcher runs on the schedule you specify, deduplicates items by URL/content-hash, and delivers only new matches. The first run establishes a baseline and does not generate alerts. Example — watch an RSS feed for AI-related news: spec: { name: "AI launches radar", kind: "rss", config: { url: "https://openai.com/news/rss.xml" }, keywords: ["launch", "gpt-", "voice"], keywords_none: ["funding", "benchmark"], min_score: 1, schedule: { every: "8h", jitter: "4h" } } Returns { watcher_id, name, kind, status, next_run_at }.
| Name | Type | Req | Description |
|---|---|---|---|
| spec | object | yes | Watcher specification (name, kind, config, keywords, keywords_none, min_score, schedule). See SPEC.md §3.2 for the full schema. |
No output schema declared.
No examples provided.
impri_create_watcher_from_preset ~375
Create a watcher from a preset template by supplying the preset id and param values. Presets handle all watcher config construction — URL building, keyword setup, SSRF validation — so you only provide the param values listed by impri_list_watcher_presets. The schedule defaults to the preset's recommended interval but can be overridden. The name defaults to "{preset title}: {primary param value}" if omitted. Returns { watcher_id, name, kind, status, next_run_at }. Examples: Watch the HN front page (no params needed): preset_id: "hn-front-page" params: {} Watch a subreddit for new posts: preset_id: "reddit-subreddit" params: { subreddit: "MachineLearning" } Watch a GitHub repo for new releases, check every 2 hours: preset_id: "github-releases" params: { owner: "fastify", repo: "fastify" } schedule: { every: "2h" } Watch HN for keyword with a custom min_points threshold: preset_id: "hn-keyword" params: { keyword: "rust programming", min_points: "25" }
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | – | Optional display name for the watcher. Defaults to "{preset title}: {primary param value}" when omitted. |
| params | object | yes | Key/value map of param values as strings. Required params must be present; optional params may be omitted to use preset defaults. |
| preset_id | string | yes | Preset identifier from impri_list_watcher_presets (e.g. "hn-front-page", "reddit-subreddit", "github-releases"). |
| schedule | object | – | Optional schedule override. Omit to use the preset's default schedule. |
No output schema declared.
No examples provided.
impri_inbox_status ~68
Check how many actions are waiting for human decisions. Returns the pending count and a brief list of pending action titles. Call this before starting a large batch of tasks — if the inbox is backed up, pause and let the operator catch up to avoid actions expiring before they are reviewed.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
impri_list_watcher_presets ~174
List all available watcher presets with their parameters. Presets are pre-configured watcher templates for common sources (Hacker News, Reddit, GitHub, npm, YouTube, arXiv, etc.). Each preset has an id, a human-readable title, required and optional params, and a default schedule. Call this first to discover which preset fits your monitoring goal, then use impri_create_watcher_from_preset to create the watcher by supplying only the preset_id and param values. No deep knowledge of watcher config schemas is needed. Example output: Community: - hn-front-page: "Hacker News Front Page" (rss) — no params required - reddit-keyword: "Reddit – Keyword Search" (reddit_search) — params: query, [subreddit]
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
impri_list_watchers ~84
List all configured watchers, optionally filtered by status. Returns the watcher count and a summary line per watcher (id, name, kind, status). Use this to audit what is being monitored, check for degraded watchers, or find a watcher_id for further operations.
| Name | Type | Req | Description |
|---|---|---|---|
| status | string | – | Filter watchers by status. Omit to return all watchers regardless of status. |
No output schema declared.
No examples provided.
impri_push_action ~438
Submit an action to the Impri human-approval inbox. The action appears in the operator's web and mobile inbox as a card with a title, formatted preview, and optional tap-to-edit fields. The operator approves or rejects with one tap; you poll for the decision with impri_await_decision. Returns { action_id, status: "pending", inbox_url }. Save action_id — you need it for all follow-up calls. Example — send a draft Reddit reply for review: kind: "reddit.comment" title: "Reply: Why is resume advice so conflicting?" preview: { format: "markdown", body: "The advice conflicts because different advisors optimise for different audiences..." } target_url: "https://reddit.com/r/cscareerquestions/comments/..." editable: ["preview.body"] // lets the reviewer tweak wording before approving
| Name | Type | Req | Description |
|---|---|---|---|
| editable | array | – | Dot-notation fields the reviewer may edit before approving (e.g. ['preview.body']). The final edited values are echoed back in the approved action. |
| expires_in | number | – | Seconds until the action auto-expires (default 86400 = 24 h). After expiry the status becomes 'expired' and no decision can be made. |
| idempotency_key | string | – | Stable key to prevent duplicate submissions on retry. The same key within 24 h returns the original action instead of creating a new one. |
| kind | string | yes | Taxonomy label used for inbox filtering (e.g. 'reddit.comment', 'email.send', 'blog.publish'). Free-form; choose a consistent scheme. |
| payload | – | – | Opaque data echoed back in the webhook callback — useful for storing context (e.g. Reddit post id, draft id, queue position). Not shown to the reviewer. |
| preview | object | yes | The content the reviewer reads before deciding. |
| target_url | string | – | URL the reviewer can open for context (e.g. the Reddit thread, the email draft). Optional but strongly recommended. |
| title | string | yes | Short headline shown in the inbox card. Keep it under 120 characters. |
No output schema declared.
No examples provided.
impri_report_result ~139
Report whether you successfully executed an approved action. Closes the audit loop — the operator sees 'executed' or 'execute_failed' in the inbox alongside the original action and decision. Always call this after attempting an approved action, even on failure. Statuses: "executed" — action was carried out successfully "execute_failed" — execution attempt failed (include the error in detail)
| Name | Type | Req | Description |
|---|---|---|---|
| action_id | string | yes | The id returned by impri_push_action. |
| detail | string | – | Optional message — error description on failure, short confirmation on success. |
| status | string | yes | Outcome of executing the approved action. |
No output schema declared.
No examples provided.
What is the Impri MCP server?
Impri is an MCP server listed in the public MCP registry as io.github.sekera-radim/impri. Impri MCP server, human-in-the-loop approval inbox for AI agents. This page covers its npm package (@impri/mcp).
Is the Impri MCP server safe to use?
Impri scores 81 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 21 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Impri MCP server expose?
Impri exposes 8 tools: impri_push_action, impri_await_decision, impri_report_result, impri_inbox_status, impri_create_watcher, and 3 more. Their descriptions and schemas cost roughly 1,756 tokens of context every time the server is loaded.
Is the Impri MCP server still maintained?
Impri is still listed as active in the MCP registry. We last reached this channel on 21 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the Impri MCP server under?
Impri declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.