Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Hitachi raidcom command builder (Community)

NPM · RAIDCOM-MCP

Builds and checks Hitachi raidcom commands and scripts. Build-only: never contacts a storage system.

Available components

+4 this week 85 Trust /100

Last scanned (15 hours ago)

Scores higher than 87% of npm servers

Category Cloud Infrastructure

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 30 of 92 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to visubramaniam/raidcom-mcp). View diagnostics → Pass
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 7 days ago).Pass
  • Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability76
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 2509 tokens (~228/item across 11 items; 8 tools + 3 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
  • Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 97% of tool parameters carry a description.Partial
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 8 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
What we tested

Checks we ran (16)

  • Malware scan
  • Known CVEs
  • Install scripts
  • Dependency health
  • Source repository
  • Provenance
  • License
  • Maintenance
  • Security disclosure
  • Schema quality
  • Stability
  • Tool coverage
  • Injection markers
  • Destructive annotations
  • Judged manipulation
  • MCP protocol

Does not apply to this package (2)

  • Endpoint SecurityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.
  • Transport & ReachabilityScored on hosted endpoints only. A package has no live endpoint of its own for us to probe.

The score does not measure everything. What the score does not measure →

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 5 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

  • 3 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 17 to 20. That category is still filling its 30-day observation window: 5 days of observed history at the previous scan, 6 at this one. The score rises as the window fills, whether or not the server changes.

  • 1 Nov 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.

  • 30 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

  • 28 Oct 26 81

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed npm/raidcom-mcp@0.1.8

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo visubramaniam/raidcom-mcp
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/visubramaniam/raidcom-mcp/.github/workflows/release.yml@refs/heads/main
Rekor log index 3550214839
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:cf94a9e3176719e920ec4f55a7c2ad6da81f29fc30594cbc912a71f143c1f5b8b301c98760906f79cd8931b3c7c0bf29de4cea162cc6fa3f4d834a80e

Background: How many MCP packages publish verified provenance →

Dependencies 92 packages
Packages resolved 92
Stale 30
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 8 exposed · ~2,233 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
raidcom_build_command ~522

Build one raidcom command from structured arguments and validate it. Nothing is executed and no storage system is contacted: you get command text to review and run elsewhere. Unknown options, wrong value counts, missing required options, bad port names and out-of-range LDEV, LUN, pool and serial numbers are reported as errors with a fix. Example: {"command": "add ldev", "options": {"-pool": 0, "-ldev_id": 256, "-capacity": "100G"}, "model": "vsp-one-b28", "global": {"instance": 0}} → `raidcom add ldev -pool 0 -ldev_id 256 -capacity 100G -I0`. For many similar commands use raidcom_build_script, not repeated calls. When the user asks for a command, show them the `command` from the result.

NameTypeReqDescription
commandstringyesCommand name: action and object, e.g. "add lun", "get ldev", "modify host_grp".
globalobject–Settings that apply to the whole command, not to one raidcom option.
modelstring–Storage model, so values are checked against its limits: vsp-one-b24, vsp-one-b26, vsp-one-b28, vsp-5000, vsp-e590, vsp-e790, vsp-e990, vsp-e1090. Aliases such as B28 or E990 work. Omit it to check a…
optionsobject–raidcom options and their values, keyed by option name with or without the leading dash. A value is a string or number; an option that takes several values (for example -port takes a port and an opti…
strictboolean–Default true. The command catalogue is parsed from the manual, whose syntax lines are occasionally incomplete, so a "needs <option>" error can be a false alarm. If one looks wrong after reading raidc…

No output schema declared.

No examples provided.

raidcom_build_recipe ~376

Build the script for a recipe from its parameters (see raidcom_list_recipes). Lists such as ldev_ids accept ranges: ["100-109"]. Example: recipe provision-fc-volumes with {"pool": 0, "ldev_ids": ["100-103"], "capacity": "100G", "ports": ["CL1-A", "CL2-A"], "host_grp": "esx01", "host_mode": "VMWARE_EX", "wwns": ["210000e08b0256f8"]}. Returns the script and the individual commands. Nothing is executed.

NameTypeReqDescription
globalobject–Settings that apply to the whole command, not to one raidcom option.
lock_resourceboolean–Wrap the commands in raidcom lock resource / unlock resource.
loginboolean–Add raidcom -login / -logout using $RAIDCOM_USER and $RAIDCOM_PASSWORD.
modelstring–Storage model, so values are checked against its limits: vsp-one-b24, vsp-one-b26, vsp-one-b28, vsp-5000, vsp-e590, vsp-e790, vsp-e990, vsp-e1090. Aliases such as B28 or E990 work. Omit it to check a…
paramsobjectyesRecipe parameters.
recipestringyesRecipe ID.
strictboolean–Default true. The command catalogue is parsed from the manual, whose syntax lines are occasionally incomplete, so a "needs <option>" error can be a false alarm. If one looks wrong after reading raidc…

No output schema declared.

No examples provided.

raidcom_build_script ~415

Build a shell script of raidcom commands from steps. Each step is a command with options, optionally repeated with `foreach` (every combination) or `zip` (values advance together), so "create LDEVs 100 to 109 in pool 0, then map each to port CL1-A" is two steps. Every expanded command is validated; the script is returned only if all of them are valid, otherwise you get the errors per step. The script checks each command's exit status, adds `raidcom get command_status` after asynchronous commands, and can lock the resource group and log in (credentials are read from RAIDCOM_USER and RAIDCOM_PASSWORD in the user's shell, never written into the script). Nothing is executed.

NameTypeReqDescription
descriptionstring–A one-line comment for the top of the script.
globalobject–Settings that apply to the whole command, not to one raidcom option.
lock_resourceboolean–Wrap the commands in raidcom lock resource / unlock resource. Recommended for changing commands.
loginboolean–Add raidcom -login / -logout using $RAIDCOM_USER and $RAIDCOM_PASSWORD.
modelstring–Storage model, so values are checked against its limits: vsp-one-b24, vsp-one-b26, vsp-one-b28, vsp-5000, vsp-e590, vsp-e790, vsp-e990, vsp-e1090. Aliases such as B28 or E990 work. Omit it to check a…
stepsarrayyes–
strictboolean–Default true. The command catalogue is parsed from the manual, whose syntax lines are occasionally incomplete, so a "needs <option>" error can be a false alarm. If one looks wrong after reading raidc…

No output schema declared.

No examples provided.

raidcom_check_command ~271

Validate and explain a raidcom command line the user already has (for example one pasted from a runbook). It is parsed, not executed: shell operators such as ; | & > are refused. Returns the normalised command, what each option means, and every problem found. Credentials after -login are dropped.

NameTypeReqDescription
command_linestringyesOne raidcom command, e.g. "raidcom add lun -port CL1-A-0 -ldev_id 200 -lun_id 1".
modelstring–Storage model, so values are checked against its limits: vsp-one-b24, vsp-one-b26, vsp-one-b28, vsp-5000, vsp-e590, vsp-e790, vsp-e990, vsp-e1090. Aliases such as B28 or E990 work. Omit it to check a…
strictboolean–Default true. The command catalogue is parsed from the manual, whose syntax lines are occasionally incomplete, so a "needs <option>" error can be a false alarm. If one looks wrong after reading raidc…

No output schema declared.

No examples provided.

raidcom_describe_command ~140

Everything needed to build one raidcom command: what it does, which models support it, whether it is read-only, destructive or asynchronous, each syntax form, every option with the number and kind of values it takes (and the words it accepts, where it accepts only a few), and examples. Call it before raidcom_build_command when you are unsure which options a command needs or which of its syntax forms fits the request.

NameTypeReqDescription
commandstringyesCommand name, e.g. "add lun" or "raidcom get ldev".
optionstring–Only describe this option, e.g. "-ldev_id".

No output schema declared.

No examples provided.

raidcom_list_commands ~226

Find raidcom commands. Use this first when you do not know the exact command name. With no arguments, lists every object (ldev, lun, host_grp, pool, ...) with the actions available on it. With `query` (plain words, e.g. "map a volume to a host group", "grow a pool", "show free ldev ids"), ranks matching commands and rates the confidence of the top result. With `action` and/or `object`, lists exactly those commands. Then call raidcom_describe_command, or raidcom_build_command if you already know the options.

NameTypeReqDescription
actionstring–Only this action: add, delete, get, modify, extend, initialize, set, reset, ...
limitinteger–Maximum results for a query (default 10).
objectstring–Only this object: ldev, lun, host_grp, hba_wwn, pool, dp_pool, port, parity_grp, ...
querystring–What you want to do, in plain words.

No output schema declared.

No examples provided.

raidcom_list_recipes ~147

Ready-made workflows: provision volumes to an FC, iSCSI or NVMe/TCP host, create or grow a pool, create a mainframe (3390) pool, extend or delete volumes, create a command device, reclaim zero pages, read-only inventory, copy groups. With no arguments lists them. With `recipe`, shows its parameters and steps. With `query`, ranks recipes by keyword. Use raidcom_build_recipe to turn one into a script.

NameTypeReqDescription
querystring–Words describing the task, e.g. "new ESXi host".
recipestring–Recipe ID to show in detail, e.g. provision-fc-volumes.

No output schema declared.

No examples provided.

raidcom_model_limits ~136

Valid parameter ranges for a storage model (serial number, LDEV ID, pool ID, LU number, port names), taken from the Command Reference appendices. Without `model`, lists the models.

NameTypeReqDescription
modelstring–Storage model, so values are checked against its limits: vsp-one-b24, vsp-one-b26, vsp-one-b28, vsp-5000, vsp-e590, vsp-e790, vsp-e990, vsp-e1090. Aliases such as B28 or E990 work. Omit it to check a…

No output schema declared.

No examples provided.

Install

How do I install the Hitachi raidcom command builder (Community) MCP server?

Hitachi raidcom command builder (Community) runs locally as an npm package, launched with npx -y raidcom-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · raidcom-mcp

# add to Claude Code
claude mcp add visubramaniam-raidcom-mcp -- npx -y raidcom-mcp
Common questions

What is the Hitachi raidcom command builder (Community) MCP server?

Hitachi raidcom command builder (Community) is an MCP server listed in the public MCP registry as io.github.visubramaniam/raidcom-mcp. Builds and checks Hitachi raidcom commands and scripts. Build-only: never contacts a storage system. This page covers its npm package (raidcom-mcp).

Is the Hitachi raidcom command builder (Community) MCP server safe to use?

Hitachi raidcom command builder (Community) scores 85 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Hitachi raidcom command builder (Community) MCP server expose?

Hitachi raidcom command builder (Community) exposes 8 tools: raidcom_list_commands, raidcom_describe_command, raidcom_build_command, raidcom_check_command, raidcom_build_script, and 3 more. Their descriptions and schemas cost roughly 2,233 tokens of context every time the server is loaded.

Is the Hitachi raidcom command builder (Community) MCP server still maintained?

Hitachi raidcom command builder (Community) is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Hitachi raidcom command builder (Community) MCP server under?

Hitachi raidcom command builder (Community) declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

What did VerifyMCP test on the Hitachi raidcom command builder (Community) MCP server?

VerifyMCP ran 16 checks on Hitachi raidcom command builder (Community), covering Malware scan, Known CVEs, Install scripts, Dependency health and 12 more. Endpoint Security and Transport & Reachability do not apply to an npm package, so they were not tested. The score does not measure everything, and the scoring documentation lists what it leaves out.