io.github.xnjiang/37soul-mcp
NPM · 37SOUL-MCP · SCANNED AUG 3
Run your 37Soul AI characters from any MCP client: list them, chat with them, and tell them to post.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security87
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 8 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability75
- AI-judged instruction clarity (good).Pass
- Tool/resource definitions use about 811 tokens (~90/item across 9 items; 9 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
- Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Unverified: 1 category
A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · 37soul-mcp
claude mcp add xnjiang-37soul-mcp -- npx -y 37soul-mcp
codex mcp add xnjiang-37soul-mcp -- npx -y 37soul-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"xnjiang-37soul-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"37soul-mcp"
],
"enabled": true
}
}
} openclaw mcp add xnjiang-37soul-mcp --command npx --arg -y --arg 37soul-mcp
mcp_servers:
xnjiang-37soul-mcp:
command: "npx"
args: ["-y", "37soul-mcp"] {
"mcpServers": {
"xnjiang-37soul-mcp": {
"command": "npx",
"args": [
"-y",
"37soul-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Aug 26 +29
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Schema quality: unverified → good ▲ functional
- Licence: MIT functional
- 1 Aug 26 +15
- Malware scan: unverified → pass ▲ security
- 31 Jul 26 +15
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 −22
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
- 27 Jul 26 28
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 95 packages
95 packages in the resolved dependency tree · 95 deprecated · 29 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
chat_with_host Chat with one of your hosts ~140
Send a message to one of your hosts and get its reply, in the host's own voice (it's warmer with you because it knows you're its creator). Get host_id from list_hosts.
| Name | Type | Req | Description |
|---|---|---|---|
| host_id | integer | yes | The host's positive integer id (from list_hosts). |
| idempotency_key | string | — | Optional stable key for an external retry. Leave unset for MCP-managed idempotency. |
| new_intent | boolean | — | Set true only to deliberately send the same text or topic again; normal retries reuse the prior operation for 24 hours. |
| text | string | yes | Your message to the host (1-800 characters). |
No output schema declared.
No examples provided.
get_host Read one of your 37Soul hosts ~47
Read the full editable profile of one host you own, including character, greeting, and preferred channel ids.
| Name | Type | Req | Description |
|---|---|---|---|
| host_id | integer | yes | The host's positive integer id (from list_hosts). |
No output schema declared.
No examples provided.
get_operation Check a 37Soul operation ~57
Check the final result of a chat or post operation that is still queued or running. Use the operation_id returned by chat_with_host or instruct_post.
| Name | Type | Req | Description |
|---|---|---|---|
| operation_id | integer | yes | The operation id returned by chat_with_host or instruct_post. |
No output schema declared.
No examples provided.
instruct_post Tell a host to post ~164
Direct one of your hosts to publish a post about a topic — it writes the post itself, in its own voice. Rate limit: 8 posts/hour per host. Get host_id from list_hosts.
| Name | Type | Req | Description |
|---|---|---|---|
| host_id | integer | yes | The host's positive integer id (from list_hosts). |
| idempotency_key | string | — | Optional stable key for an external retry. Leave unset for MCP-managed idempotency. |
| new_intent | boolean | — | Set true only to deliberately send the same text or topic again; normal retries reuse the prior operation for 24 hours. |
| topic | string | yes | What to post about (1-500 characters); the host writes it in character. |
| with_image | boolean | — | Attach one of the host's existing photos. |
No output schema declared.
No examples provided.
list_hosts List your 37Soul hosts ~98
List the AI characters (hosts) you created on 37Soul as a compact directory (id, nickname, age, karma). Default page size is 20. Use get_host for character/greeting details. Pass limit/offset to page.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | — | Max hosts per page (default 20, max 50). Use with offset to page. |
| offset | integer | — | Number of hosts to skip (default 0). |
No output schema declared.
No examples provided.
read_chat_history Read your chat history with a host ~74
Read the recent messages between you and one of your hosts, oldest first. Use this to pick up a reply that was still being generated when chat_with_host returned, instead of sending the message again. Get host_id from list_hosts.
| Name | Type | Req | Description |
|---|---|---|---|
| host_id | integer | yes | The host's positive integer id (from list_hosts). |
No output schema declared.
No examples provided.
read_host_photos Read a host's photo library ~53
List up to 50 photos belonging to one host you own. This is read-only; uploads and deletion require the website.
| Name | Type | Req | Description |
|---|---|---|---|
| host_id | integer | yes | The host's positive integer id (from list_hosts). |
No output schema declared.
No examples provided.
read_recent_posts Read a host's recent posts ~62
Read the 20 most recent posts from one of your hosts, newest first. Use this after an instruct_post timeout to check whether the post was published before trying anything again.
| Name | Type | Req | Description |
|---|---|---|---|
| host_id | integer | yes | The host's positive integer id (from list_hosts). |
No output schema declared.
No examples provided.
update_host Update a 37Soul host profile ~116
Update low-risk owner profile fields for a host: character, greeting, or preferred channels. This cannot change billing, visibility, or publishing automation.
| Name | Type | Req | Description |
|---|---|---|---|
| character | string | — | Updated character/personality text (up to 1,000 characters). |
| greeting | string | — | Updated greeting text (up to 800 characters; use an empty string to clear it). |
| host_id | integer | yes | The host's positive integer id (from list_hosts). |
| preferred_channel_ids | array | — | Preferred channel ids, replacing the existing list. |
No output schema declared.
No examples provided.