# Hudu (oci · ghcr.io/wyre-ai/hudu-mcp:v1.4.1)

MCP server for Hudu IT documentation — companies, assets, articles, passwords, and procedures.

- Trust score: 49/100 (low)
- Change this week: +3
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-20

## Components

- oci · `ghcr.io/wyre-ai/hudu-mcp:v1.4.1`: 49/100 (this document), [markdown](https://verifymcp.io/servers/wyre-ai-hudu-mcp/ghcr-io-wyre-ai-hudu-mcp-v1-4-1.md), [page](https://verifymcp.io/servers/wyre-ai-hudu-mcp/ghcr-io-wyre-ai-hudu-mcp-v1-4-1)

## Channel facts

- Registry: `oci`
- Package: `ghcr.io/wyre-ai/hudu-mcp:v1.4.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-20.

- **Supply Chain Security**: 0/100
  - Malware scan not yet available for this package.
  - Known CVEs could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.
  - Install-script risk not yet assessed.
  - Dependency health could not be checked: this artifact ships no SBOM, so there is no dependency list to read. Publishing one would let us assess it.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 16 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 83/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 3272 tokens (~72/item across 45 items; 39 tools + 6 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 53/100
  - Stability observed for 16 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 41 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### How do I install the Hudu MCP server?

Hudu runs locally as a container image, launched with docker run --rm -i ghcr.io/wyre-ai/hudu-mcp:v1.4.1. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add wyre-ai-hudu-mcp -- docker run --rm -i ghcr.io/wyre-ai/hudu-mcp:v1.4.1
```

### Cursor

```json
{
  "mcpServers": {
    "wyre-ai-hudu-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-ai/hudu-mcp:v1.4.1"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "wyre-ai-hudu-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-ai/hudu-mcp:v1.4.1"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add wyre-ai-hudu-mcp -- docker run --rm -i ghcr.io/wyre-ai/hudu-mcp:v1.4.1
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "wyre-ai-hudu-mcp": {
      "type": "local",
      "command": [
        "docker",
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-ai/hudu-mcp:v1.4.1"
      ],
      "enabled": true
    }
  }
}
```

### Hermes

```yaml
mcp_servers:
  wyre-ai-hudu-mcp:
    command: "docker"
    args: ["run", "--rm", "-i", "ghcr.io/wyre-ai/hudu-mcp:v1.4.1"]
```

### Netclaw

```json
{
  "McpServers": {
    "wyre-ai-hudu-mcp": {
      "Transport": "stdio",
      "Command": "docker",
      "Arguments": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-ai/hudu-mcp:v1.4.1"
      ]
    }
  }
}
```

### Other

```json
{
  "mcpServers": {
    "wyre-ai-hudu-mcp": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "ghcr.io/wyre-ai/hudu-mcp:v1.4.1"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-18 (score 49, +1)

No change was recorded against any check on this day. Stability & Change Management went from 43 to 47. That category is still filling its 30-day observation window: 13 days of observed history at the previous scan, 14 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-16 (score 48, +1)

No change was recorded against any check on this day. Stability & Change Management went from 37 to 40. That category is still filling its 30-day observation window: 11 days of observed history at the previous scan, 12 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-14 (score 47, +1)

No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-12 (score 46, +1)

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-11 (score 45, +3)

- [functional improvement] Stability: unverified → 0.23

### 2026-09-04 (score 42)

First indexed and scored.

## MCP tools (39)

### `hudu_test_connection` (~18 tokens)

Test the connection to Hudu API

### `hudu_list_companies` (~116 tokens)

List companies in Hudu with optional filters

Input parameters:

- `archived` (boolean): Filter by archived status
- `city` (string): Filter by city
- `id_number` (string): Filter by ID number
- `name` (string): Filter by company name
- `page` (number): Page number
- `page_size` (number): Results per page
- `phone_number` (string): Filter by phone number
- `state` (string): Filter by state
- `website` (string): Filter by website

### `hudu_get_company` (~25 tokens)

Get a company by ID

Input parameters:

- `id` (number, required): Company ID

### `hudu_create_company` (~170 tokens)

Create a new company in Hudu

Input parameters:

- `address_line_1` (string): Address line 1
- `address_line_2` (string): Address line 2
- `city` (string): City
- `company_type` (string): Company type
- `country_name` (string): Country name
- `fax_number` (string): Fax number
- `id_number` (string): ID number
- `name` (string, required): Company name (required)
- `nickname` (string): Company nickname
- `notes` (string): Notes
- `parent_company_id` (number): Parent company ID
- `phone_number` (string): Phone number
- `state` (string): State
- `website` (string): Website URL
- `zip` (string): ZIP code

### `hudu_update_company` (~176 tokens)

Update an existing company in Hudu

Input parameters:

- `address_line_1` (string): Address line 1
- `address_line_2` (string): Address line 2
- `city` (string): City
- `company_type` (string): Company type
- `country_name` (string): Country
- `fax_number` (string): Fax number
- `id` (number, required): Company ID
- `id_number` (string): ID number
- `name` (string): Company name
- `nickname` (string): Company nickname
- `notes` (string): Notes
- `parent_company_id` (number): Parent company ID
- `phone_number` (string): Phone number
- `state` (string): State
- `website` (string): Website URL
- `zip` (string): ZIP code

### `hudu_delete_company` (~63 tokens)

⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently deletes a company and all of its associated assets, articles, passwords, and other data. This action cannot be undone. Confirm with the user before invoking.

Input parameters:

- `id` (number, required): Company ID

### `hudu_archive_company` (~62 tokens)

⚠ HIGH-IMPACT. Archives a company, removing it from active use and hiding associated assets, passwords, and articles from normal operations. Reversible by unarchiving. Confirm with the user before invoking.

Input parameters:

- `id` (number, required): Company ID

### `hudu_unarchive_company` (~61 tokens)

⚠ HIGH-IMPACT. Restores an archived company back to active use, making it and all associated assets, passwords, and articles visible again in normal operations. Confirm with the user before invoking.

Input parameters:

- `id` (number, required): Company ID

### `hudu_list_assets` (~98 tokens)

List assets in Hudu with optional filters

Input parameters:

- `archived` (boolean): Filter by archived status
- `asset_layout_id` (number): Filter by asset layout ID
- `company_id` (number): Filter by company ID
- `name` (string): Filter by name
- `page` (number): Page number
- `page_size` (number): Results per page
- `primary_serial` (string): Filter by serial number

### `hudu_get_asset` (~25 tokens)

Get an asset by ID

Input parameters:

- `id` (number, required): Asset ID

### `hudu_create_asset` (~104 tokens)

Create a new asset in Hudu

Input parameters:

- `asset_layout_id` (number, required): Asset layout ID (required)
- `company_id` (number, required): Company ID (required)
- `custom_fields` (object): Custom field values
- `name` (string, required): Asset name (required)
- `primary_mail` (string): Email
- `primary_manufacturer` (string): Manufacturer
- `primary_model` (string): Model
- `primary_serial` (string): Serial number

### `hudu_update_asset` (~107 tokens)

Update an existing asset in Hudu

Input parameters:

- `asset_layout_id` (number): Asset layout ID
- `company_id` (number): Company ID
- `custom_fields` (object): Custom field values
- `id` (number, required): Asset ID
- `name` (string): Asset name
- `primary_mail` (string): Email
- `primary_manufacturer` (string): Manufacturer
- `primary_model` (string): Model
- `primary_serial` (string): Serial number

### `hudu_delete_asset` (~61 tokens)

⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently deletes an asset and all of its associated data, passwords, and configuration information. This action cannot be undone. Confirm with the user before invoking.

Input parameters:

- `id` (number, required): Asset ID

### `hudu_archive_asset` (~59 tokens)

⚠ HIGH-IMPACT. Archives an asset, removing it from active use and hiding it from normal asset listings and operations. Reversible by unarchiving. Confirm with the user before invoking.

Input parameters:

- `id` (number, required): Asset ID

### `hudu_list_asset_layouts` (~49 tokens)

List asset layouts in Hudu

Input parameters:

- `name` (string): Filter by name
- `page` (number): Page number
- `page_size` (number): Results per page

### `hudu_get_asset_layout` (~28 tokens)

Get an asset layout by ID

Input parameters:

- `id` (number, required): Asset layout ID

### `hudu_create_asset_layout` (~117 tokens)

Create a new asset layout in Hudu

Input parameters:

- `active` (boolean): Active status
- `color` (string): Color
- `fields` (array): Layout fields
- `icon` (string): Icon
- `icon_color` (string): Icon color
- `include_comments` (boolean): Include comments
- `include_files` (boolean): Include files
- `include_passwords` (boolean): Include passwords
- `include_photos` (boolean): Include photos
- `name` (string, required): Layout name (required)

### `hudu_update_asset_layout` (~125 tokens)

Update an existing asset layout in Hudu

Input parameters:

- `active` (boolean): Active status
- `color` (string): Color
- `fields` (array): Layout fields
- `icon` (string): Icon
- `icon_color` (string): Icon color
- `id` (number, required): Asset layout ID
- `include_comments` (boolean): Include comments
- `include_files` (boolean): Include files
- `include_passwords` (boolean): Include passwords
- `include_photos` (boolean): Include photos
- `name` (string): Layout name

### `hudu_list_asset_passwords` (~70 tokens)

List asset passwords in Hudu

Input parameters:

- `company_id` (number): Filter by company ID
- `name` (string): Filter by name
- `page` (number): Page number
- `page_size` (number): Results per page
- `search` (string): Search term

### `hudu_get_asset_password` (~28 tokens)

Get an asset password by ID

Input parameters:

- `id` (number, required): Asset password ID

### `hudu_create_asset_password` (~144 tokens)

Create a new asset password in Hudu

Input parameters:

- `company_id` (number, required): Company ID (required)
- `description` (string): Description
- `in_portal` (boolean): Show in portal
- `name` (string, required): Password name (required)
- `otp_secret` (string): OTP secret
- `password` (string): Password value
- `password_folder_id` (number): Password folder ID
- `password_type` (string): Password type
- `passwordable_id` (number): Passwordable ID
- `passwordable_type` (string): Passwordable type
- `url` (string): URL
- `username` (string): Username

### `hudu_update_asset_password` (~92 tokens)

Update an existing asset password in Hudu

Input parameters:

- `description` (string): Description
- `id` (number, required): Asset password ID
- `name` (string): Password name
- `otp_secret` (string): OTP secret
- `password` (string): Password value
- `password_type` (string): Password type
- `url` (string): URL
- `username` (string): Username

### `hudu_delete_asset_password` (~57 tokens)

⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently deletes an asset password and all associated authentication information. This action cannot be undone. Confirm with the user before invoking.

Input parameters:

- `id` (number, required): Asset password ID

### `hudu_list_articles` (~71 tokens)

List knowledge base articles in Hudu

Input parameters:

- `company_id` (number): Filter by company ID
- `draft` (boolean): Filter by draft status
- `name` (string): Filter by name
- `page` (number): Page number
- `page_size` (number): Results per page

### `hudu_get_article` (~27 tokens)

Get a knowledge base article by ID

Input parameters:

- `id` (number, required): Article ID

### `hudu_create_article` (~82 tokens)

Create a new knowledge base article in Hudu

Input parameters:

- `company_id` (number): Company ID
- `content` (string): Article content (HTML)
- `draft` (boolean): Draft status
- `enable_sharing` (boolean): Enable sharing
- `folder_id` (number): Folder ID
- `name` (string, required): Article name (required)

### `hudu_update_article` (~89 tokens)

Update an existing knowledge base article in Hudu

Input parameters:

- `company_id` (number): Company ID
- `content` (string): Article content (HTML)
- `draft` (boolean): Draft status
- `enable_sharing` (boolean): Enable sharing
- `folder_id` (number): Folder ID
- `id` (number, required): Article ID
- `name` (string): Article name

### `hudu_delete_article` (~61 tokens)

⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently deletes a knowledge base article and all its content, attachments, and version history. This action cannot be undone. Confirm with the user before invoking.

Input parameters:

- `id` (number, required): Article ID

### `hudu_archive_article` (~62 tokens)

⚠ HIGH-IMPACT. Archives a knowledge base article, removing it from active use and hiding it from normal article listings and search results. Reversible by unarchiving. Confirm with the user before invoking.

Input parameters:

- `id` (number, required): Article ID

### `hudu_list_websites` (~60 tokens)

List monitored websites in Hudu

Input parameters:

- `company_id` (number): Filter by company ID
- `name` (string): Filter by name
- `page` (number): Page number
- `page_size` (number): Results per page

### `hudu_get_website` (~26 tokens)

Get a website by ID

Input parameters:

- `id` (number, required): Website ID

### `hudu_create_website` (~103 tokens)

Create a new website in Hudu

Input parameters:

- `company_id` (number): Company ID
- `disable_dns` (boolean): Disable DNS monitoring
- `disable_ssl` (boolean): Disable SSL monitoring
- `disable_whois` (boolean): Disable WHOIS monitoring
- `name` (string, required): Website name (required)
- `notes` (string): Notes
- `paused` (boolean): Paused status
- `url` (string): Website URL

### `hudu_update_website` (~110 tokens)

Update an existing website in Hudu

Input parameters:

- `company_id` (number): Company ID
- `disable_dns` (boolean): Disable DNS monitoring
- `disable_ssl` (boolean): Disable SSL monitoring
- `disable_whois` (boolean): Disable WHOIS monitoring
- `id` (number, required): Website ID
- `name` (string): Website name
- `notes` (string): Notes
- `paused` (boolean): Paused status
- `url` (string): Website URL

### `hudu_delete_website` (~63 tokens)

⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently deletes a website and all its monitoring history, SSL certificates, and DNS records data. This action cannot be undone. Confirm with the user before invoking.

Input parameters:

- `id` (number, required): Website ID

### `hudu_list_folders` (~59 tokens)

List folders in Hudu

Input parameters:

- `company_id` (number): Filter by company ID
- `name` (string): Filter by name
- `page` (number): Page number
- `page_size` (number): Results per page

### `hudu_list_procedures` (~60 tokens)

List procedures in Hudu

Input parameters:

- `company_id` (number): Filter by company ID
- `name` (string): Filter by name
- `page` (number): Page number
- `page_size` (number): Results per page

### `hudu_list_activity_logs` (~113 tokens)

List activity logs in Hudu

Input parameters:

- `action_message` (string): Filter by action message
- `page` (number): Page number
- `page_size` (number): Results per page
- `resource_id` (number): Filter by resource ID
- `resource_type` (string): Filter by resource type
- `start_date` (string): Filter by start date (ISO format)
- `user_email` (string): Filter by user email
- `user_id` (number): Filter by user ID

### `hudu_list_relations` (~37 tokens)

List relations in Hudu

Input parameters:

- `page` (number): Page number
- `page_size` (number): Results per page

### `hudu_list_magic_dash` (~61 tokens)

List Magic Dash items in Hudu

Input parameters:

- `company_id` (number): Filter by company ID
- `page` (number): Page number
- `page_size` (number): Results per page
- `title` (string): Filter by title

## Diagnostics

Captured diagnostic sections: Provenance. The full working is on the page: https://verifymcp.io/servers/wyre-ai-hudu-mcp/ghcr-io-wyre-ai-hudu-mcp-v1-4-1#diagnostics

## Score history

- 2026-09-20: 49
- 2026-09-19: 49
- 2026-09-18: 49
- 2026-09-17: 48
- 2026-09-16: 48
- 2026-09-15: 47
- 2026-09-14: 47
- 2026-09-13: 46
- 2026-09-12: 46
- 2026-09-11: 45
- 2026-09-10: 42
- 2026-09-09: 42
- 2026-09-08: 42
- 2026-09-07: 42
- 2026-09-06: 42
- 2026-09-05: 42
- 2026-09-04: 42

## Common questions

### What is the Hudu MCP server?

Hudu is an MCP server listed in the public MCP registry as io.github.WYRE-AI/hudu-mcp. MCP server for Hudu IT documentation, companies, assets, articles, passwords, and procedures. This page covers its container image (ghcr.io/wyre-ai/hudu-mcp:v1.4.1).

### Is the Hudu MCP server safe to use?

Hudu scores 49 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the Hudu MCP server expose?

Hudu exposes 39 tools: hudu_test_connection, hudu_list_companies, hudu_get_company, hudu_create_company, hudu_update_company, and 34 more. Their descriptions and schemas cost roughly 2,939 tokens of context every time the server is loaded.

### Is the Hudu MCP server still maintained?

Hudu is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the Hudu MCP server under?

Hudu declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- Repository: https://github.com/WYRE-AI/hudu-mcp
- Changelog RSS feed: https://verifymcp.io/servers/wyre-ai-hudu-mcp/ghcr-io-wyre-ai-hudu-mcp-v1-4-1.xml
- Changelog JSON feed: https://verifymcp.io/servers/wyre-ai-hudu-mcp/ghcr-io-wyre-ai-hudu-mcp-v1-4-1.json
- HTML version of this page: https://verifymcp.io/servers/wyre-ai-hudu-mcp/ghcr-io-wyre-ai-hudu-mcp-v1-4-1