io.github.Swih/mistral-mcp
NPM · MISTRAL-MCP · SCANNED SEP 20
Mistral AI MCP server: chat, OCR, Voxtral audio, Codestral FIM, vision, agents, batch.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 99 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 136 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability77
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2084 tokens (~189/item across 11 items; 8 tools + 3 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management93
- Stability observed for 28 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage85
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 49% of tool parameters carry a description.Partial
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- All 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
- An AI judge read all 9 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.Swih/mistral-mcp server?
io.github.Swih/mistral-mcp runs locally as an npm package, launched with npx -y mistral-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · mistral-mcp
claude mcp add swih-mistral-mcp -- npx -y mistral-mcp
{
"mcpServers": {
"swih-mistral-mcp": {
"command": "npx",
"args": [
"-y",
"mistral-mcp"
]
}
}
} {
"servers": {
"swih-mistral-mcp": {
"command": "npx",
"args": [
"-y",
"mistral-mcp"
]
}
}
} codex mcp add swih-mistral-mcp -- npx -y mistral-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"swih-mistral-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"mistral-mcp"
],
"enabled": true
}
}
} openclaw mcp add swih-mistral-mcp --command npx --arg -y --arg mistral-mcp
mcp_servers:
swih-mistral-mcp:
command: "npx"
args: ["-y", "mistral-mcp"] {
"McpServers": {
"swih-mistral-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"mistral-mcp"
]
}
}
} assistant mcp add swih-mistral-mcp -t stdio -c npx -a -y mistral-mcp
{
"mcpServers": {
"swih-mistral-mcp": {
"command": "npx",
"args": [
"-y",
"mistral-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 −3
- Stability: pass → 0.80 functional
- 15 Sept 26 +1
- Stability: 0.97 → pass security
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 9 Sept 26 −3
- Stability: pass → 0.80 functional
- 8 Sept 26 +1
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/mistral-mcp@0.8.2
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 99 packages
| Packages resolved | 99 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
codestral_fim Codestral fill-in-the-middle completion ~174
Fill-in-the-middle code completion with Codestral. Given `prompt` (code preceding the cursor) and `suffix` (code after the cursor), Codestral writes the middle. Use for editor autocomplete scenarios, code-patching agents, or structured refactors where you know the target boundaries. Default stop tokens: [] — let the model decide. Override with `stop` if needed.
| Name | Type | Req | Description |
|---|---|---|---|
| max_tokens | integer | – | – |
| model | string | – | – |
| prompt | string | yes | Code preceding the cursor. |
| seed | integer | – | Random seed for deterministic sampling. Maps to Mistral's `random_seed`. |
| stop | array | – | – |
| suffix | string | yes | Code after the cursor. Can be empty string. |
| temperature | number | – | – |
| top_p | number | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| finish_reason | string | – | – |
| model | string | yes | – |
| text | string | yes | – |
| usage | object | – | – |
No examples provided.
mistral_chat Mistral chat completion ~328
Generate a chat completion using a Mistral model. When to use: - Drafting French (or any European-language) content where Mistral shines. - Codestral for code-specific generation/review. - Ministral for cheap / low-latency classification. Returns structured content with the assistant text and token usage. Does NOT stream — use mistral_chat_stream for long outputs with progress updates.
| Name | Type | Req | Description |
|---|---|---|---|
| max_tokens | integer | – | – |
| messages | array | yes | Chat messages in role/content form. |
| model | string | – | Mistral chat model alias. Allowed: mistral-large-latest, mistral-medium-latest, mistral-small-latest, ministral-3b-latest, ministral-8b-latest, ministral-14b-latest, magistral-medium-latest, magistra… |
| reasoning_effort | string | – | Controls reasoning depth for Magistral models. 'high' enables full chain-of-thought; 'none' disables it. Ignored on non-reasoning models. |
| response_format | – | – | Force a structured output: `{type:"json_object"}` for JSON mode, `{type:"json_schema", json_schema:{...}}` for strict schema mode. |
| seed | integer | – | Random seed for deterministic sampling. Maps to Mistral's `random_seed`. |
| temperature | number | – | – |
| top_p | number | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| finish_reason | string | – | – |
| model | string | yes | – |
| reasoning_content | string | – | Reasoning trace returned by Magistral models. Absent for non-reasoning models. |
| text | string | yes | – |
| usage | object | – | – |
No examples provided.
mistral_ocr Mistral OCR (document to markdown) ~370
Run Mistral OCR on a PDF or image, returning structured markdown per page. Input `document` is one of: - { type: "document_url", documentUrl: "https://...pdf" } - { type: "image_url", imageUrl: "https://..." | "data:image/..." } - { type: "file", fileId: "<id-from-files-api>" } Options: - `pages`: array of 0-indexed page numbers or string like "0-5,7". - `tableFormat`: 'markdown' (default) or 'html'. - `extractHeader` / `extractFooter`: include page header/footer when present. - `includeImageBase64`: embed extracted image bytes as base64 in the response. - `document_annotation_format`: JSON schema for whole-document structured extraction. - `bbox_annotation_format`: JSON schema for extracted image / bbox annotations. - `confidence_scores_granularity`: 'page' or 'word'. Returns `pages[].markdown` plus optional `pages[].hyperlinks`, `header`, `footer`, `images` bounding boxes, annotations, confidence scores, and `dimensions`.
| Name | Type | Req | Description |
|---|---|---|---|
| bbox_annotation_format | object | – | – |
| confidence_scores_granularity | string | – | – |
| document | – | yes | – |
| document_annotation_format | – | – | – |
| document_annotation_prompt | string | – | – |
| extractFooter | boolean | – | – |
| extractHeader | boolean | – | – |
| imageLimit | integer | – | – |
| imageMinSize | integer | – | – |
| includeImageBase64 | boolean | – | – |
| model | string | – | OCR model. Default: mistral-ocr-latest. |
| pages | – | – | – |
| tableFormat | string | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| annotations | object | – | – |
| document_annotation | string | – | – |
| model | string | yes | – |
| pages | array | yes | – |
| pages_count | integer | yes | – |
| usage | object | – | – |
No examples provided.
mistral_vision Mistral multimodal chat (vision) ~251
Chat completion with multimodal input: text + image_url parts. Requires a vision-capable model. Accepted: - pixtral-large-latest - pixtral-12b-latest - mistral-large-latest - mistral-medium-latest - mistral-small-latest Each message's `content` is either a plain string (pure text) or an array of parts `{ type: 'text', text }` / `{ type: 'image_url', imageUrl }`. The image URL can be an https URL or a data: URI base64 payload. Returns the assistant text + token usage. For non-visual requests, prefer `mistral_chat`.
| Name | Type | Req | Description |
|---|---|---|---|
| max_tokens | integer | – | – |
| messages | array | yes | Chat messages. Pure-text requests are accepted, but this tool is intended primarily for multimodal prompts containing image parts. |
| model | string | – | Vision-capable Mistral model. Default: pixtral-large-latest. |
| seed | integer | – | Random seed for deterministic sampling. Maps to Mistral's `random_seed`. |
| temperature | number | – | – |
| top_p | number | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| finish_reason | string | – | – |
| model | string | yes | – |
| text | string | yes | – |
| usage | object | – | – |
No examples provided.
voxtral_transcribe Voxtral speech-to-text ~281
Transcribe an audio file to text using Mistral Voxtral. Accepted models: - voxtral-mini-latest - voxtral-small-latest Audio source is one of: - { type: "file_url", fileUrl: "https://..." } (public URL) - { type: "file", fileId: "<id-from-files-api>" } Options: - `language`: ISO-639-1 hint (e.g. 'fr', 'en'). Boosts accuracy when known. - `temperature`: sampling temperature. - `diarize`: return per-speaker segments (default false). - `timestampGranularities`: ['segment'] to return per-segment timestamps. - `contextBias`: list of phrases/terms that should bias the decoder. Returns plain `text`, detected `language`, optional `segments[]`, and token usage.
| Name | Type | Req | Description |
|---|---|---|---|
| audio | – | yes | – |
| contextBias | array | – | – |
| diarize | boolean | – | – |
| language | string | – | ISO-639-1 language hint (e.g. 'fr', 'en'). |
| model | string | – | STT model. Default: voxtral-mini-latest. |
| temperature | number | – | – |
| timestampGranularities | array | – | Only 'segment' is currently supported. |
| Name | Type | Req | Description |
|---|---|---|---|
| language | string|null | yes | – |
| model | string | yes | – |
| segments | array | – | – |
| text | string | yes | – |
| usage | object | – | – |
No examples provided.
workflow_execute Execute a Mistral workflow ~223
Start a Mistral Workflow execution. `workflowIdentifier` is the workflow name or ID (visible in mistral://workflows). `input` is a free-form JSON object matching the workflow's input schema. Modes: - waitForResult=false (default): returns immediately with execution_id and RUNNING status. Poll workflow_status to track completion. - waitForResult=true: blocks until the workflow finishes and returns the result inline. Use timeoutSeconds (default 30) to cap the wait. Use deploymentName to target a specific deployment slot when multiple are configured.
| Name | Type | Req | Description |
|---|---|---|---|
| deploymentName | string | – | Target a specific deployment slot. |
| executionId | string | – | Optional custom execution ID. Auto-generated if omitted. |
| input | object | – | Input payload matching the workflow input schema. |
| timeoutSeconds | integer | – | Max wait time when waitForResult=true. Default: 30. |
| waitForResult | boolean | – | Block until completion and return result inline. Default: false. |
| workflowIdentifier | string | yes | Workflow name or ID. |
| Name | Type | Req | Description |
|---|---|---|---|
| end_time | string|null | – | – |
| execution_id | string | yes | – |
| result | – | – | – |
| root_execution_id | string | – | – |
| start_time | string | – | – |
| status | string|null | – | – |
| sync | boolean | yes | true when waitForResult=true (result is inline). |
| total_duration_ms | number|null | – | – |
| workflow_name | string | yes | – |
No examples provided.
workflow_interact Signal, query, or update a running workflow ~207
Send a signal to or run a query against a running workflow execution. action=signal: fire-and-forget event; the workflow reacts asynchronously. - `name`: signal name defined in the workflow. - `input`: optional payload matching the signal's schema. action=query: synchronous read of internal workflow state. - `name`: query handler name defined in the workflow. - `input`: optional parameters for the query. - Returns `query_name` + `result` inline. action=update: synchronous request to modify workflow state mid-execution. - `name`: update handler name defined in the workflow. - `input`: optional payload for the update. - Returns `update_name` + `result` inline.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | Interaction type. |
| executionId | string | yes | Target execution ID. |
| input | object | – | Optional payload for the signal or query. |
| name | string | yes | Signal or query handler name. |
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| execution_id | string | yes | – |
| message | string | – | Confirmation message for signal actions. |
| query_name | string | – | – |
| result | – | – | Query or update result payload. |
| update_name | string | – | – |
No examples provided.
workflow_status Get workflow execution status ~96
Get the current state and result of a workflow execution. Statuses: RUNNING | COMPLETED | FAILED | CANCELED | TERMINATED | CONTINUED_AS_NEW | TIMED_OUT | RETRYING_AFTER_ERROR Poll until status is COMPLETED (or terminal) when waitForResult was false. `result` is populated once the workflow reaches a terminal state.
| Name | Type | Req | Description |
|---|---|---|---|
| executionId | string | yes | Execution ID from workflow_execute. |
| Name | Type | Req | Description |
|---|---|---|---|
| end_time | string|null | yes | – |
| execution_id | string | yes | – |
| result | – | – | – |
| root_execution_id | string | yes | – |
| start_time | string | yes | – |
| status | string|null | yes | – |
| total_duration_ms | number|null | – | – |
| workflow_name | string | yes | – |
No examples provided.
What is the io.github.Swih/mistral-mcp server?
io.github.Swih/mistral-mcp is listed in the public MCP registry as io.github.Swih/mistral-mcp. Mistral AI MCP server: chat, OCR, Voxtral audio, Codestral FIM, vision, agents, batch. This page covers its npm package (mistral-mcp).
Is the io.github.Swih/mistral-mcp server safe to use?
io.github.Swih/mistral-mcp scores 83 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.Swih/mistral-mcp server expose?
io.github.Swih/mistral-mcp exposes 8 tools: mistral_chat, codestral_fim, mistral_vision, mistral_ocr, voxtral_transcribe, and 3 more. Their descriptions and schemas cost roughly 1,930 tokens of context every time the server is loaded.
Is the io.github.Swih/mistral-mcp server still maintained?
io.github.Swih/mistral-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.Swih/mistral-mcp server under?
io.github.Swih/mistral-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.