Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

ScalePad

OCI · GHCR.IO/WYRE-TECHNOLOGY/SCALEPAD-MCP:V1.0.5

MCP server for ScalePad — Core, Lifecycle Manager, ControlMap, Backup Radar, and Quoter.

0 this week 50 Trust /100

Last scanned (21 minutes ago)

Scores higher than 76% of OCI servers

Category Security

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security0
  • No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.Unverified
  • Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
  • Install-script risk not yet assessed.Unverified
  • Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.Unverified
Provenance & Transparency19
Schema Quality & AI Usability79
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 34827 tokens (~91/item across 381 items; 381 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
  • Stability observed for 29 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • All 43 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 381 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a current MCP spec version (2026-07-28).Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 17 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

  • 15 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.

  • 13 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.

  • 12 Oct 26 −3
    • Stability: pass → 0.80 functional
  • 10 Oct 26 +3
    • Judged manipulation: unverified → pass ▲ security
    • Stability: 0.87 → pass security
  • 6 Oct 26 −3
    • Judged manipulation: pass → unverified ▼ security
    • Stability: pass → 0.87 functional
  • 4 Oct 26 0
    • Stability: 0.97 → pass security
  • 3 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 17 Oct 2026 · Analysed oci/ghcr.io/wyre-technology/scalepad-mcp:v1.0.5

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem oci
Reason No attestation published

Background: How many MCP packages publish verified provenance →

MCP tools · 381 exposed · ~34,827 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
scalepad_lm_deliverables_sections_refresh ~62

⚠ HIGH-IMPACT. Refresh a deliverable section's data from its sources. Confirm with the user before invoking.

NameTypeReqDescription
deliverable_idstringyesDeliverable id
section_idstringyesSection id

No output schema declared.

No examples provided.

scalepad_lm_deliverables_share_link_create ~59

⚠ HIGH-IMPACT. Create a general share link for a deliverable (grants link-holders access). Confirm with the user before invoking.

NameTypeReqDescription
deliverable_idstringyesDeliverable id

No output schema declared.

No examples provided.

scalepad_lm_deliverables_share_link_get ~38

Get the general share link of a deliverable.

NameTypeReqDescription
deliverable_idstringyesDeliverable id

No output schema declared.

No examples provided.

scalepad_lm_deliverables_share_link_regenerate ~69

⚠ DESTRUCTIVE — IRREVERSIBLE. Regenerate the general share link of a deliverable. The previous link stops working immediately and cannot be restored. Confirm with the user before invoking.

NameTypeReqDescription
deliverable_idstringyesDeliverable id

No output schema declared.

No examples provided.

scalepad_lm_deliverables_share_link_revoke ~72

⚠ DESTRUCTIVE — IRREVERSIBLE. Revoke the general share link of a deliverable. Anyone holding the old link loses access; the link cannot be restored. Confirm with the user before invoking.

NameTypeReqDescription
deliverable_idstringyesDeliverable id

No output schema declared.

No examples provided.

scalepad_lm_deliverables_update ~84

⚠ HIGH-IMPACT. Patch-update a Lifecycle Manager deliverable (name, status, sections). Confirm with the user before invoking.

NameTypeReqDescription
deliverable_idstringyesDeliverable id
namestring–Deliverable name
sectionsarray–Deliverable sections
statusstring–Deliverable status

No output schema declared.

No examples provided.

scalepad_lm_enrollment_tokens_create ~97

⚠ HIGH-IMPACT. Create a SaaS-management enrollment token for a client (grants device enrollment until it expires). Confirm with the user before invoking.

NameTypeReqDescription
client_idstringyesClient id
descriptionstring–Token description
expires_atstring–Expiry time (ISO 8601)
site_idstring–Site id to scope the token to

No output schema declared.

No examples provided.

scalepad_lm_goal_templates_create ~47

⚠ HIGH-IMPACT. Create a new Lifecycle Manager goal template. Confirm with the user before invoking.

NameTypeReqDescription
goal_templateobjectyesThe goal template payload

No output schema declared.

No examples provided.

scalepad_lm_goal_templates_delete ~52

⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently delete a Lifecycle Manager goal template. Confirm with the user before invoking.

NameTypeReqDescription
goal_template_idstringyesGoal template id

No output schema declared.

No examples provided.

scalepad_lm_goal_templates_get ~34

Get a Lifecycle Manager goal template by id.

NameTypeReqDescription
goal_template_idstringyesGoal template id

No output schema declared.

No examples provided.

scalepad_lm_goal_templates_list ~55

List Lifecycle Manager goal templates, filterable by title.

NameTypeReqDescription
filterobject–Optional filters, keyed by API filter name and sent as filter[<key>]=<value>. Supported keys: title.

No output schema declared.

No examples provided.

scalepad_lm_goal_templates_update ~59

⚠ HIGH-IMPACT. Update a Lifecycle Manager goal template. Confirm with the user before invoking.

NameTypeReqDescription
goal_templateobjectyesThe updated goal template payload
goal_template_idstringyesGoal template id

No output schema declared.

No examples provided.

scalepad_lm_goals_action_items_attach ~63

⚠ HIGH-IMPACT. Attach an action item to a Lifecycle Manager goal. Confirm with the user before invoking.

NameTypeReqDescription
action_item_idstringyesAction item id to attach
goal_idstringyesGoal id

No output schema declared.

No examples provided.

scalepad_lm_goals_action_items_detach ~73

⚠ HIGH-IMPACT. Detach an action item from a Lifecycle Manager goal (the action item itself is not deleted). Confirm with the user before invoking.

NameTypeReqDescription
action_item_idstringyesAction item id to detach
goal_idstringyesGoal id

No output schema declared.

No examples provided.

scalepad_lm_goals_action_items_list ~36

List the action items attached to a Lifecycle Manager goal.

NameTypeReqDescription
goal_idstringyesGoal id

No output schema declared.

No examples provided.

scalepad_lm_goals_create ~98

⚠ HIGH-IMPACT. Create a new Lifecycle Manager goal for a client. Confirm with the user before invoking.

NameTypeReqDescription
client_keystringyesClient key (from clients lookup)
descriptionstring–Goal description (plain text)
statusstring–Initial goal status
target_period––Target period (e.g. { year, quarter })
titlestringyesGoal title

No output schema declared.

No examples provided.

scalepad_lm_goals_create_from_template ~75

⚠ HIGH-IMPACT. Create a new Lifecycle Manager goal from a goal template. Confirm with the user before invoking.

NameTypeReqDescription
client_keystringyesClient key (from clients lookup)
goal_template_idstringyesGoal template id
titlestring–Goal title

No output schema declared.

No examples provided.

scalepad_lm_goals_delete ~48

⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently delete a Lifecycle Manager goal. Confirm with the user before invoking.

NameTypeReqDescription
idstringyesGoal id

No output schema declared.

No examples provided.

scalepad_lm_goals_get ~30

Get a Lifecycle Manager goal by id.

NameTypeReqDescription
idstringyesGoal id

No output schema declared.

No examples provided.

scalepad_lm_goals_initiatives_attach ~61

⚠ HIGH-IMPACT. Attach an initiative to a Lifecycle Manager goal. Confirm with the user before invoking.

NameTypeReqDescription
goal_idstringyesGoal id
initiative_idstringyesInitiative id to attach

No output schema declared.

No examples provided.

scalepad_lm_goals_initiatives_detach ~70

⚠ HIGH-IMPACT. Detach an initiative from a Lifecycle Manager goal (the initiative itself is not deleted). Confirm with the user before invoking.

NameTypeReqDescription
goal_idstringyesGoal id
initiative_idstringyesInitiative id to detach

No output schema declared.

No examples provided.

scalepad_lm_goals_initiatives_list ~36

List the initiatives attached to a Lifecycle Manager goal.

NameTypeReqDescription
goal_idstringyesGoal id

No output schema declared.

No examples provided.

scalepad_lm_goals_list ~156

List Lifecycle Manager goals (cursor-paginated; page_size 1-200, default 25). Filterable by client, title, status, and target period (year/half/quarter).

NameTypeReqDescription
cursorstring–Opaque pagination cursor from the previous response; omit for the first page.
filterobject–Optional filters, keyed by API filter name and sent as filter[<key>]=<value>. Supported keys: client.id, title, status, period.year, period.half, period.quarter.
page_sizenumber–Results per page (1-200; API default 25).
sortstring–Sort field; prefix with "-" for descending.

No output schema declared.

No examples provided.

scalepad_lm_goals_meetings_attach ~61

⚠ HIGH-IMPACT. Attach a meeting to a Lifecycle Manager goal. Confirm with the user before invoking.

NameTypeReqDescription
goal_idstringyesGoal id
meeting_idstringyesMeeting id to attach

No output schema declared.

No examples provided.

scalepad_lm_goals_meetings_detach ~70

⚠ HIGH-IMPACT. Detach a meeting from a Lifecycle Manager goal (the meeting itself is not deleted). Confirm with the user before invoking.

NameTypeReqDescription
goal_idstringyesGoal id
meeting_idstringyesMeeting id to detach

No output schema declared.

No examples provided.

scalepad_lm_goals_meetings_list ~36

List the meetings attached to a Lifecycle Manager goal.

NameTypeReqDescription
goal_idstringyesGoal id

No output schema declared.

No examples provided.

scalepad_lm_goals_schedule_update ~75

⚠ HIGH-IMPACT. Update the target period (schedule) of a Lifecycle Manager goal. Confirm with the user before invoking.

NameTypeReqDescription
idstringyesGoal id
target_period–yesTarget period for the goal (e.g. { year, quarter } or { year, half })

No output schema declared.

No examples provided.

scalepad_lm_goals_status_update ~56

⚠ HIGH-IMPACT. Update the status of a Lifecycle Manager goal. Confirm with the user before invoking.

NameTypeReqDescription
idstringyesGoal id
statusstringyesNew status value

No output schema declared.

No examples provided.

scalepad_lm_goals_update ~110

⚠ HIGH-IMPACT. Update a Lifecycle Manager goal (title, description, status, target period). Confirm with the user before invoking.

NameTypeReqDescription
descriptionstring–Goal description (plain text)
description_json––Goal description (rich-text JSON)
idstringyesGoal id
statusstring–Goal status
target_period––Target period (e.g. { year, quarter })
titlestring–New goal title

No output schema declared.

No examples provided.

scalepad_lm_hardware_attached_agreements_lookup ~43

List the agreements/contracts a hardware asset is attached to (by hardware_key).

NameTypeReqDescription
hardware_keystringyesHardware asset key

No output schema declared.

No examples provided.

scalepad_lm_hardware_attached_initiatives_lookup ~43

List the initiatives a hardware asset is attached to (by hardware_key).

NameTypeReqDescription
hardware_keystringyesHardware asset key

No output schema declared.

No examples provided.

scalepad_lm_hardware_dashboard_get ~59

Get the Lifecycle Manager hardware dashboard summary, optionally filtered by client.

NameTypeReqDescription
filterobject–Optional filters, keyed by API filter name and sent as filter[<key>]=<value>. Supported keys: client_id.

No output schema declared.

No examples provided.

scalepad_lm_hardware_lifecycles_list ~113

List active hardware lifecycle records (cursor-paginated), filterable by client_id and serial_number.

NameTypeReqDescription
cursorstring–Opaque pagination cursor from the previous response; omit for the first page.
filterobject–Optional filters, keyed by API filter name and sent as filter[<key>]=<value>. Supported keys: client_id, serial_number.
page_sizenumber–Results per page (1-200; API default 25).

No output schema declared.

No examples provided.

scalepad_lm_hardware_list ~226

List Lifecycle Manager hardware assets (cursor-paginated; page_size 1-200, default 25). Searchable, client-scopable, and filterable by age, assigned end user, backup status, ScalePad warranty, initiative count, installed software, integration sources, manufacturer, memory, and processor.

NameTypeReqDescription
client_idstring–Client id to scope assets to
cursorstring–Opaque pagination cursor from the previous response; omit for the first page.
filterobject–Optional filters, keyed by API filter name and sent as filter[<key>]=<value>. Supported keys: age, assignedenduser, configuredbackup, hasscalepadwarranty, initiativecount, installedsoftware, installe…
page_sizenumber–Results per page (1-200; API default 25).
searchstring–Search term to match asset names/serials
sortstring–Sort field; prefix with "-" for descending.

No output schema declared.

No examples provided.

scalepad_lm_hardware_overview_get ~60

Get the detailed overview for a single hardware asset (by hardware_key, optionally scoped to a client).

NameTypeReqDescription
client_idstring–Client id the asset belongs to
hardware_keystringyesHardware asset key

No output schema declared.

No examples provided.

scalepad_lm_hardware_replacement_settings_get ~39

Get Lifecycle Manager hardware replacement settings, optionally for a specific client.

NameTypeReqDescription
client_idstring–Client id

No output schema declared.

No examples provided.

scalepad_lm_initiative_templates_create ~49

⚠ HIGH-IMPACT. Create a new Lifecycle Manager initiative template. Confirm with the user before invoking.

NameTypeReqDescription
initiative_templateobjectyesThe initiative template payload

No output schema declared.

No examples provided.

scalepad_lm_initiative_templates_delete ~54

⚠ DESTRUCTIVE — IRREVERSIBLE. Permanently delete a Lifecycle Manager initiative template. Confirm with the user before invoking.

NameTypeReqDescription
initiative_template_idstringyesInitiative template id

No output schema declared.

No examples provided.

scalepad_lm_initiative_templates_duplicate ~54

⚠ HIGH-IMPACT. Duplicate a Lifecycle Manager initiative template (creates a new template copy). Confirm with the user before invoking.

NameTypeReqDescription
initiative_template_idstringyesInitiative template id

No output schema declared.

No examples provided.

scalepad_lm_initiative_templates_get ~36

Get a Lifecycle Manager initiative template by id.

NameTypeReqDescription
initiative_template_idstringyesInitiative template id

No output schema declared.

No examples provided.

scalepad_lm_initiative_templates_list ~78

List Lifecycle Manager initiative templates (cursor-paginated; page_size 1-200, default 25).

NameTypeReqDescription
cursorstring–Opaque pagination cursor from the previous response; omit for the first page.
page_sizenumber–Results per page (1-200; API default 25).

No output schema declared.

No examples provided.

scalepad_lm_initiative_templates_update ~61

⚠ HIGH-IMPACT. Update a Lifecycle Manager initiative template. Confirm with the user before invoking.

NameTypeReqDescription
initiative_templateobjectyesThe updated initiative template payload
initiative_template_idstringyesInitiative template id

No output schema declared.

No examples provided.

scalepad_lm_initiatives_action_items_attach ~64

⚠ HIGH-IMPACT. Attach an action item to a Lifecycle Manager initiative. Confirm with the user before invoking.

NameTypeReqDescription
action_item_idstringyesAction item id to attach
initiative_idstringyesInitiative id

No output schema declared.

No examples provided.

scalepad_lm_initiatives_action_items_detach ~74

⚠ HIGH-IMPACT. Detach an action item from a Lifecycle Manager initiative (the action item itself is not deleted). Confirm with the user before invoking.

NameTypeReqDescription
action_item_idstringyesAction item id to detach
initiative_idstringyesInitiative id

No output schema declared.

No examples provided.

scalepad_lm_initiatives_action_items_list ~37

List the action items attached to a Lifecycle Manager initiative.

NameTypeReqDescription
initiative_idstringyesInitiative id

No output schema declared.

No examples provided.

scalepad_lm_initiatives_assets_attach ~61

⚠ HIGH-IMPACT. Attach hardware assets to a Lifecycle Manager initiative. Confirm with the user before invoking.

NameTypeReqDescription
hardware_keysarrayyesHardware asset keys to attach
initiative_idstringyesInitiative id

No output schema declared.

No examples provided.

scalepad_lm_initiatives_assets_detach ~70

⚠ HIGH-IMPACT. Detach hardware assets from a Lifecycle Manager initiative (the assets themselves are not deleted). Confirm with the user before invoking.

NameTypeReqDescription
hardware_keysarrayyesHardware asset keys to detach
initiative_idstringyesInitiative id

No output schema declared.

No examples provided.

scalepad_lm_initiatives_assigned_user_update ~63

⚠ HIGH-IMPACT. Assign a Lifecycle Manager initiative to a user. Confirm with the user before invoking.

NameTypeReqDescription
assigned_user_idstringyesUser id to assign
initiative_idstringyesInitiative id

No output schema declared.

No examples provided.

scalepad_lm_initiatives_budget_update ~71

⚠ HIGH-IMPACT. Replace the one-time investment (budget) line items on a Lifecycle Manager initiative. Confirm with the user before invoking.

NameTypeReqDescription
budget_line_itemsarrayyesOne-time investment (budget) line items
idstringyesInitiative id

No output schema declared.

No examples provided.

scalepad_lm_initiatives_create ~87

⚠ HIGH-IMPACT. Create a new Lifecycle Manager initiative for a client. Confirm with the user before invoking.

NameTypeReqDescription
client_keystringyesClient key (from clients lookup)
executive_summarystring–Executive summary (plain text)
executive_summary_json––Executive summary (rich-text JSON)
namestringyesInitiative name

No output schema declared.

No examples provided.

Install

How do I install the ScalePad MCP server?

ScalePad runs locally as a container image, launched with docker run --rm -i -e SCALEPAD_API_KEY -e SCALEPAD_REGION -e QUOTER_CLIENT_ID -e QUOTER_CLIENT_SECRET -e MCP_TRANSPORT -e AUTH_MODE -e LOG_LEVEL ghcr.io/wyre-technology/scalepad-mcp:v1.0.5. Ready-made configuration for Claude, Cursor, VS Code, Codex and 3 more is on this page, copied from each client's own documentation.

oci · ghcr.io/wyre-technology/scalepad-mcp:v1.0.5

# add to Claude Code
claude mcp add wyre-technology-scalepad-mcp -- docker run --rm -i -e SCALEPAD_API_KEY -e SCALEPAD_REGION -e QUOTER_CLIENT_ID -e QUOTER_CLIENT_SECRET -e MCP_TRANSPORT -e AUTH_MODE -e LOG_LEVEL ghcr.io/wyre-technology/scalepad-mcp:v1.0.5

This image reads SCALEPAD_API_KEY, SCALEPAD_REGION, QUOTER_CLIENT_ID, QUOTER_CLIENT_SECRET, MCP_TRANSPORT, AUTH_MODE and LOG_LEVEL. Set them in your client's env block for this server; docker run -e passes each one through to the container.

Common questions

What is the ScalePad MCP server?

ScalePad is an MCP server listed in the public MCP registry as io.github.wyre-technology/scalepad-mcp. MCP server for ScalePad, Core, Lifecycle Manager, ControlMap, Backup Radar, and Quoter. This page covers its container image (ghcr.io/wyre-technology/scalepad-mcp:v1.0.5).

Is the ScalePad MCP server safe to use?

ScalePad scores 50 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the ScalePad MCP server expose?

ScalePad exposes 381 tools: scalepad_navigate, scalepad_status, scalepad_core_clients_list, scalepad_core_clients_get, scalepad_core_contacts_list, and 376 more. Their descriptions and schemas cost roughly 34,827 tokens of context every time the server is loaded.

Is the ScalePad MCP server still maintained?

ScalePad is still listed as active in the MCP registry. We last reached this channel on 17 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the ScalePad MCP server under?

ScalePad declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.