{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T10:04:02.586Z","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp","markdownUrl":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp.md","server":{"slug":"shubhankarsd-basiiik","name":"Basiiik","registryName":"io.github.shubhankarsd/basiiik","description":"Design system for coding agents: component specs, rules, tokens, icons and checked React snippets.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"basiiik-mcp","type":"npm","identifier":"@basiiik/mcp","withdrawn":false,"url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp","version":"0.8.0","transport":"stdio","scoredAt":"2026-11-06T08:36:27.704Z"},"score":{"total":70,"tier":"medium","status":"scored","weekDelta":3,"history":[{"date":"2026-11-06","total":70},{"date":"2026-11-05","total":69},{"date":"2026-11-04","total":69},{"date":"2026-11-03","total":68},{"date":"2026-11-02","total":68},{"date":"2026-11-01","total":67},{"date":"2026-10-31","total":67},{"date":"2026-10-30","total":67},{"date":"2026-10-29","total":66},{"date":"2026-10-28","total":66},{"date":"2026-10-27","total":50},{"date":"2026-10-26","total":65},{"date":"2026-10-25","total":64}]},"categories":[{"name":"Supply Chain Security","score":98,"verdict":"partial","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","No install/post-install scripts declared.","30 of 92 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"92","unhealthy":"30"}}]},{"name":"Provenance & Transparency","score":19,"verdict":"fail","reasons":["Repository check failed: no source repository is declared.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 9 days ago).","Security-disclosure policy not yet verified: we couldn't inspect the source repository."],"codes":[{"code":"provenance.repo_none","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"9"}},{"code":"disclosure.repo_inconclusive","args":{"reason":"no_repo_declared"}}]},{"name":"Schema Quality & AI Usability","score":78,"verdict":"fail","reasons":["100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).","AI-judged instruction clarity (good).","Tool/resource definitions use about 3017 tokens (~30/item across 98 items; 9 tools + 89 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.descriptions","args":{"pct":"100"}},{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"30","items":"98","tools":"9","tokens":"3017","resources":"89"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":40,"verdict":"partial","reasons":["Stability observed for 12 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"12"}}]},{"name":"Tool Coverage","score":87,"verdict":"partial","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","60% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"60"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"9"}},{"code":"toolsafety.manipulation_clean","args":{"units":"11","judged":"11"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28."],"codes":[{"code":"protocol.supported","args":{"latest":"2026-07-28","version":"2025-11-25"}}]}],"inconclusive":["Security-disclosure policy not yet verified: we couldn't inspect the source repository."],"malware":[],"components":[{"slug":"basiiik-mcp","type":"npm","identifier":"@basiiik/mcp","withdrawn":false,"score":70,"current":true,"url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp","markdownUrl":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"@basiiik/mcp"},{"label":"Version","value":"0.8.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"get_design_system_guide","title":"Design system guide","description":"The rules for generating UI with Basiiik: components first, tokens only, theming, accessibility. Read this before writing UI code.","inputs":[],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":39},{"name":"list_components","title":"List components","description":"List Basiiik components (88). Filter by category (actions, agents, data-display, feedback, inputs, navigation, overlays) or implementation status.","inputs":[{"name":"category","type":"string","required":false,"description":null},{"name":"status","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":53},{"name":"search_components","title":"Search components","description":"Find the right component for a need, e.g. \"confirm destructive action\" or \"show progress\". Ranks by name, summary and when-to-use guidance.","inputs":[{"name":"limit","type":"integer","required":false,"description":null},{"name":"query","type":"string","required":true,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":55},{"name":"get_component","title":"Get component spec","description":"Full spec for one component: when to use it, when not to, React props and their allowed values, accessibility rules, Figma variants and the tokens it uses. Accepts a slug, name or React component name.","inputs":[{"name":"component","type":"string","required":false,"description":"e.g. \"button\", \"Text Field\", \"TextField\""},{"name":"id","type":"string","required":false,"description":"Alias of \"component\""},{"name":"name","type":"string","required":false,"description":"Alias of \"component\""},{"name":"slug","type":"string","required":false,"description":"Alias of \"component\""}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":106},{"name":"get_component_snippet","title":"Get component snippet","description":"Generate an import and JSX usage snippet. Props are validated against the real component API, so invalid props or values return an error listing what is allowed, and a required prop you leave out (such as aria-label on IconButton) is filled with its example value and listed in the notes, so you always get code to adapt.","inputs":[{"name":"children","type":"string","required":false,"description":"Text content, for components that take children"},{"name":"component","type":"string","required":false,"description":"e.g. \"modal\", \"Text Field\""},{"name":"id","type":"string","required":false,"description":"Alias of \"component\""},{"name":"name","type":"string","required":false,"description":"Alias of \"component\""},{"name":"props","type":"object","required":false,"description":null},{"name":"slug","type":"string","required":false,"description":"Alias of \"component\""}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":147},{"name":"search_icons","title":"Search icons","description":"Find an icon for a need or a word, e.g. \"delete\", \"go back\" or \"warning\" (52 icons, 16px outline). Matches names, synonyms and use text. Use this instead of drawing or inventing SVGs. Leave query empty and pass a category (actions, navigation, objects, status) to list one category.","inputs":[{"name":"category","type":"string","required":false,"description":null},{"name":"limit","type":"integer","required":false,"description":"Default 8 for a query; with no query, every icon (or every icon of the category)"},{"name":"query","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":122},{"name":"get_icon","title":"Get icon","description":"One icon: its SVG, React import and usage, when to use it and when not to, and accessibility notes. Accepts a name (\"trash\"), a component name (\"TrashIcon\") or a loose phrase.","inputs":[{"name":"icon","type":"string","required":false,"description":"e.g. \"trash\", \"TrashIcon\", \"arrow right\""},{"name":"id","type":"string","required":false,"description":"Alias of \"icon\""},{"name":"name","type":"string","required":false,"description":"Alias of \"icon\""},{"name":"slug","type":"string","required":false,"description":"Alias of \"icon\""}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":104},{"name":"list_tokens","title":"List design tokens","description":"List tokens with their CSS variable and Light and Dark values. Filter by layer (semantic tokens are what product code should use), type, dotted-name prefix such as \"color.text\", or free-text search.","inputs":[{"name":"layer","type":"string","required":false,"description":null},{"name":"limit","type":"integer","required":false,"description":null},{"name":"prefix","type":"string","required":false,"description":null},{"name":"search","type":"string","required":false,"description":null},{"name":"type","type":"string","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":84},{"name":"get_token","title":"Get one token","description":"One token by dotted name (\"color.text.primary\") or CSS variable (\"--color-text-primary\" or \"var(--color-text-primary)\").","inputs":[{"name":"id","type":"string","required":false,"description":"Alias of \"token\""},{"name":"name","type":"string","required":false,"description":"Alias of \"token\""},{"name":"slug","type":"string","required":false,"description":"Alias of \"token\""},{"name":"token","type":"string","required":false,"description":"e.g. \"color.text.primary\" or \"--color-text-primary\""}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":89}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T08:36:27.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":92,"partial":false,"deprecated":null,"stale":30,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-10-25","recent":[{"id":"chg_01a1b000-89d2-72a7-89a3-420d61c73a88","kind":"score.total_changed","summary":"Trust score (69 → 70)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-06","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a1b000-89d2-72a7-89a3-420d61c73a88"},{"id":"chg_01a1a5b3-5c55-7d4a-9898-a98447698830","kind":"score.total_changed","summary":"Trust score (68 → 69)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a1a5b3-5c55-7d4a-9898-a98447698830"},{"id":"chg_01a19b63-9979-72c8-9d0c-6080fcfc679b","kind":"score.total_changed","summary":"Trust score (67 → 68)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a19b63-9979-72c8-9d0c-6080fcfc679b"},{"id":"chg_01a18bef-6f35-7c0b-a625-551f2f0e0a7c","kind":"score.total_changed","summary":"Trust score (66 → 67)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a18bef-6f35-7c0b-a625-551f2f0e0a7c"},{"id":"chg_01a1819f-faee-7114-8457-b3d22c5888d2","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a1819f-faee-7114-8457-b3d22c5888d2"},{"id":"chg_01a1819f-faf1-790d-a15f-0f61c520d36c","kind":"score.total_changed","summary":"Trust score (50 → 66)","materiality":"functional","direction":"improvement","scoreDelta":16,"occurredOn":"2026-10-28","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a1819f-faf1-790d-a15f-0f61c520d36c"},{"id":"chg_01a17f86-c7c5-7ce6-816f-59a65ea89829","kind":"package.version_changed","summary":"Package version (0.6.0 → 0.8.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a17f86-c7c5-7ce6-816f-59a65ea89829"},{"id":"chg_01a17be3-02eb-786b-8a51-185bd3f76e0a","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a17be3-02eb-786b-8a51-185bd3f76e0a"},{"id":"chg_01a17be3-02ee-7989-a9de-034ce86682ac","kind":"check.measure","summary":"Schema quality (2639 → 3017)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a17be3-02ee-7989-a9de-034ce86682ac"},{"id":"chg_01a17be3-02f1-7b34-b344-77a0717c4e8c","kind":"package.version_changed","summary":"Package version (0.6.0 → 0.7.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a17be3-02f1-7b34-b344-77a0717c4e8c"},{"id":"chg_01a17be3-02f2-7e18-be26-ea1f49bbdf00","kind":"score.total_changed","summary":"Trust score (65 → 50)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a17be3-02f2-7e18-be26-ea1f49bbdf00"},{"id":"chg_01a17746-d9ca-7755-a9e6-51ce7d31111b","kind":"score.total_changed","summary":"Trust score (64 → 65)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-26","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a17746-d9ca-7755-a9e6-51ce7d31111b"},{"id":"chg_01a17394-9bcf-71b2-8b67-728826f6e16e","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a17394-9bcf-71b2-8b67-728826f6e16e"},{"id":"chg_01a17393-aa8e-7f28-9cf6-684e46d5b9b7","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp#chg-chg_01a17393-aa8e-7f28-9cf6-684e46d5b9b7"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp","markdown":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp.md","changelogJson":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/shubhankarsd-basiiik/basiiik-mcp.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/@basiiik/mcp"},{"label":"Socket report","href":"https://socket.dev/npm/package/@basiiik/mcp"},{"label":"Website","href":"https://basiiik.pages.dev/"}]}}