td-atlas (grigabyte/td-atlas) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 41 tools. No publisher has claimed this listing.

C
Caution
74/100

td-atlas

An atomised index of TouchDesigner, a live bridge into a running instance, and an offline .toe reader — exposed to AI agents over MCP.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

grigabyte

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// tools this server exposes41 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

td_search_operators

Find TouchDesigner operators by what they do.

td_operator_schema

Every parameter of an operator: exact names, defaults, menu options, ranges.

td_search_parameters

Find which operators have a parameter matching a description.

td_python_api

Python members and methods available on a class, with inherited ones.

td_docs

Search or read TouchDesigner's documentation, mirrored offline.

td_expression_help

Look up TouchDesigner expression and command syntax.

td_status

Whether TouchDesigner is reachable, and what project it has open.

td_log

Your own trail: every bridge call this host has made, and how it went.

td_instances

Which TouchDesigner instances are running, and which one these tools reach.

td_doctor

Check the whole chain — install, index, probe pass, bridge, this server.

td_network

List the operators inside a component and how they are wired.

td_op_info

Inspect one operator in the running project: type, wiring, live parameter values.

td_build

Apply several edits to the project as one atomic, undoable block.

td_set_params

Set parameters on an existing operator, checked against the index first.

td_render

Render a TOP and return the image, so you can see what you built.

td_health

Find what is quietly broken — the failures nothing reports.

td_palette

Search the ready-made components TouchDesigner ships in its palette.

td_palette_load

Install one of TouchDesigner's palette components into the project.

td_glossary

Look up TouchDesigner terminology.

td_errors

Every operator at or under `path` currently reporting an error or warning.

td_exec

Run Python inside TouchDesigner and return its output.

td_project_read

Read a .toe or .tox from disk, without TouchDesigner running.

td_project_text

Dump a whole .toe/.tox network as JSON, without TouchDesigner running.

td_project_write

Write an edited td_project_text dump back into a new .toe/.tox.

td_variant_save

Keep the current state of a .toe/.tox so it can be returned to and compared.

td_variant_list

List saved variants — of one .toe/.tox, or of every project that has any.

td_variant_restore

Write a saved variant back out as a .toe/.tox file.

td_variant_diff

Compare two saved variants of the same project.

td_project_grep

Search the Python and GLSL held inside a project's DATs.

td_project_diff

Compare two .toe/.tox files and report what actually changed.

td_snapshot

Save a component to a file so it can be diffed later.

td_example

Show a working example network for an operator.

td_undo

Undo (or redo) the last change, including whole td_build batches.

td_claim_scope

Announce one subtree of the network as yours while you work in it.

td_release_scope

Give a claimed subtree back before its claim expires.

td_scopes

Which subtrees other agents have claimed, and until when.

td_extension_add

Attach a Python class to a COMP as an extension, in one call.

td_annotate

Leave a note in the network saying what you built and why.

td_annotations

Read the notes in a network — including the ones a person left for you.

td_flags

Read the flags that decide whether a node runs and what is visible.

td_set_flags

Turn node flags on or off — bypass a node, hide it, stop it cooking.

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configBASE
configTD_ATLAS_HOME
configTD_ATLAS_INSTALL
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

41/41 tools missing one or more hints — td_search_operators (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); td_operator_schema (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); td_search_parameters (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +38 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Destructive tools are labelled

1 tool perform destructive updates without destructiveHint — td_snapshot deletes at line 1400 (destination.unlink())

Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/grigabyte/td-atlas?variant=verified)](https://m8ven.ai/mcp/grigabyte/td-atlas)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 33ebe79801ac269bccc3ae0516b7cd46d1134886
code hash: 71737c29f077dc1bb91ef4a7ebc7e443758d821317a466a0b678986fea2eaba6
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client