Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Griasa

MCPB · GRIASA.MCPB

Local-first Mac meeting memory: promises, decisions, people, the next-call brief. Read-only.

Available components

−1 this week 38 Trust /100

Last scanned (1 hour ago)

Scores higher than 72% of MCPB servers

Category Productivity and Notes

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: we could not reach the registry to check. This is a gap on our side.Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: we could not reach the registry to check. This is a gap on our side.Unverified
Provenance & Transparency32
Schema Quality & AI Usability76
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 1591 tokens (~132/item across 12 items; 12 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: two runs of the same published version returned different tool surfaces, so we cannot tell a change in the package from a difference in our own sandbox run.Unverified
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 12 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 13 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 2 categories

Categories scored 0 because we could not verify them: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 1 Nov 26 −1
    • Schema quality: pass → fail ▼ functional
  • 27 Oct 26 0
    • Stability: 0.07 → unverified ▼ security
    • Schema quality: 72 → 104 ▼ functional
  • 26 Oct 26 +1
    • Stability: unverified → 0.07 ▲ functional
  • 24 Oct 26 38

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed mcpb/https://github.com/Stari-am/griasa/releases/download/v1.0.26/Griasa.mcpb

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem mcpb
Reason No attestation published

Background: How many MCP packages publish verified provenance →

MCP tools · 12 exposed · ~1,433 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
draft_followup ~133

A follow-up email for one meeting, written from Griasa's notes: the summary and who promised what for all participants, or, with person, only what that person and the user promised. Returns subject, body, the addresses Griasa knows and a mailto link. Griasa sends nothing: hand the link to the user or send the draft with the user's own mail tool after they confirm. Meeting id from search_meetings.

NameTypeReqDescription
idstringyesMeeting id from search_meetings.
personstring–Only this participant's promises and the user's, addressed to them.
NameTypeReqDescription
foundboolean––

No examples provided.

get_context ~185

Everything Griasa knows about one person, project or topic, in one call and within a size budget: open promises in both directions (overdue first), recent meetings with their summaries, and for a person the next meeting with them. Use it before answering a question about someone or something; follow up with get_meeting or get_transcript only for detail it leaves out. When the budget is tight, the oldest meetings are left out first and `omitted` says how many.

NameTypeReqDescription
aboutstringyesA person's name or email, a project name, or topic words.
budget_charsinteger–Roughly how much text to return. Default 12000, at most 40000.
kindstring–person, project or topic. Omit to let Griasa decide: a known person, then a project, then a topic.
NameTypeReqDescription
foundboolean––
kindstring––

No examples provided.

get_meeting ~53

One meeting by id: summary, participants and the promises made in it. Does not include the transcript; use get_transcript for what was said.

NameTypeReqDescription
idstringyesMeeting id from search_meetings.
NameTypeReqDescription
foundboolean––

No examples provided.

get_next_meeting_brief ~78

Prep for the user's next calendar meeting: attendees, what each side promised the other, and what was discussed last time. Built from the calendar and recorded meetings; returns available=false with a reason when no meeting is coming up. Use before a call; for a meeting that already happened use search_meetings and get_meeting.

Input schema present but exposes no named parameters.

NameTypeReqDescription
availableboolean––

No examples provided.

get_person ~64

Everything known about one colleague: notes, email addresses, their open promises, and the last recorded meeting with them. Accepts a name or email in any spelling; if nobody matches, returns the known names.

NameTypeReqDescription
namestringyesName or email address of the person.
NameTypeReqDescription
foundboolean––

No examples provided.

get_transcript ~55

The full transcript of one meeting: everything said, including remarks in passing. Long and sensitive; call it only when get_meeting's summary is not enough.

NameTypeReqDescription
idstringyesMeeting id from search_meetings.
NameTypeReqDescription
foundboolean––

No examples provided.

list_commitments ~224

Open promises from recorded meetings, newest first, in two lists: 'mine' (what the user owes) and 'waiting_on_others' (what others owe the user); finished ones are left out. Use for "what do I owe", "what is overdue", "what is Anna still waiting on". For one colleague's whole picture use get_person; to get a name's exact spelling first, list_people.

NameTypeReqDescription
limitinteger–Most items in each of the two lists. Default 50; older promises past the limit are left out.
overdue_onlyboolean–Only promises past their due date.
personstring–Only promises owned by this person: the exact name as list_people returns it, case-insensitive. Omit for everyone.
projectstring–Only promises from meetings filed under this project id, from list_projects.
team_onlyboolean–Only promises made by the user's direct reports (people marked "Reports to me" in Griasa). For "what does my team owe me".
NameTypeReqDescription
minearray––
waiting_on_othersarray––

No examples provided.

list_decisions ~202

Decisions taken in recorded meetings, newest first: what was decided, why, who made the call, the options not chosen, and the exact words it was decided in. Use for "what did we decide about X", "why did we choose Y", "did we ever consider Z". Reversed decisions are included and marked; leave them out with standing_only.

NameTypeReqDescription
limitinteger–Most decisions to return. Default 20.
personstring–Only decisions made by this person or in meetings they took part in.
projectstring–Only decisions from meetings filed under this project id, from list_projects.
querystring–Words to look for in the decision, its reason, who decided, or the options rejected. Omit for the newest.
sincestring–Only decisions from meetings on or after this date, YYYY-MM-DD.
standing_onlyboolean–Leave out decisions that were reversed.
NameTypeReqDescription
decisionsarray––
returnedinteger––

No examples provided.

list_people ~40

Everyone Griasa knows by name, with how many of their promises are still open. Use to find the exact spelling before get_person or list_commitments.

Input schema present but exposes no named parameters.

NameTypeReqDescription
peoplearray––

No examples provided.

list_projects ~80

List every project the user files recordings and notes under, with id and name, in the order the user keeps them in Settings; unfiled items sit in an Inbox that is not listed. Use to answer what the user is working on or to match a meeting to a project; pass an id as project to search_meetings or list_commitments.

Input schema present but exposes no named parameters.

NameTypeReqDescription
projectsarray––

No examples provided.

list_upcoming_meetings ~151

The user's calendar meetings in the next days, soonest first, each with its attendees and the open promises between the user and them: what the user promised them and what they promised the user. Use for "what's my week", "what do I owe the people I'm meeting". Only events with other people or a call link; all-day events are left out. Needs calendar access; returns available=false with a reason without it. For the very next call in detail, get_next_meeting_brief.

NameTypeReqDescription
daysinteger–How many days ahead to look. Default 7, at most 14.
limitinteger–Most meetings to return. Default 20.
NameTypeReqDescription
availableboolean––

No examples provided.

search_meetings ~168

Find recorded meetings by words in the title or text, optionally with one participant. Words match in any order and in any grammatical form, and, when the user has turned on search by meaning, by meaning across languages; best matches first, otherwise newest first. Returns id, title, date, participants, summary and, when text matched, a short 'matched' excerpt — never the transcript. Use the id with get_meeting or get_transcript.

NameTypeReqDescription
limitinteger–Most meetings to return. Default 10.
personstring–Only meetings this person took part in.
projectstring–Only meetings filed under this project id, from list_projects.
querystring–Words to look for in the title or text, in any order.
NameTypeReqDescription
meetingsarray––
returnedinteger––

No examples provided.

Install

How do I install the Griasa MCP server?

Griasa ships as an MCPB bundle, a single file you download and open in an MCP host that supports MCPB bundles, such as Claude Desktop. The host reads the launch command from the bundle's own manifest, so there is no command to copy. Before opening it, check the file's SHA-256 matches the one the MCP registry declares for it, 9146e4cb6796701d03c033b7d8090540774ae460999f1a7f7032c9d8c913f25b; the commands to do that are on this page. If it does not match, do not open it.

mcpb · Griasa.mcpb

Download bundle

Check the download matches the SHA-256 the MCP registry declares before you open it. If it does not match, do not open the file.

SHA-256

9146e4cb6796701d03c033b7d8090540774ae460999f1a7f7032c9d8c913f25b

macOS / Linux

echo "9146e4cb6796701d03c033b7d8090540774ae460999f1a7f7032c9d8c913f25b  Griasa.mcpb" | shasum -a 256 -c

Windows (PowerShell)

(Get-FileHash -Algorithm SHA256 .\Griasa.mcpb).Hash -eq "9146e4cb6796701d03c033b7d8090540774ae460999f1a7f7032c9d8c913f25b"

Run it in the folder you saved the bundle to, then open the file with an MCPB-capable host such as Claude Desktop.

Common questions

What is the Griasa MCP server?

Griasa is an MCP server listed in the public MCP registry as io.github.Stari-am/griasa. Local-first Mac meeting memory: promises, decisions, people, the next-call brief. Read-only. This page covers its MCPB bundle (https://github.com/Stari-am/griasa/releases/download/v1.0.26/Griasa.mcpb).

Is the Griasa MCP server safe to use?

Griasa scores 38 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Griasa MCP server expose?

Griasa exposes 12 tools: list_commitments, list_decisions, get_person, search_meetings, get_meeting, and 7 more. Their descriptions and schemas cost roughly 1,433 tokens of context every time the server is loaded.