nimbio-mcp-server (nimbio-labs/nimbio-mcp-server) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 54 tools. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
C
Emerging
74/100

nimbio-mcp-server

Official Model Context Protocol server for the Nimbio community API — run your gates, members and guest access from an LLM agent. npm: @nimbio/mcp-server

→ nimbio-labs/nimbio-mcp-server· listed on github_repo_search

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

nimbio-labs

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// tools this server exposes54 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

nimbio_my_keys
nimbio_update_settings
nimbio_manage_home
nimbio_remove_home
nimbio_update_sense_line
nimbio_update_nfc_tag
nimbio_update_geofence
nimbio_settings
nimbio_homes
nimbio_sense_lines
nimbio_nfc_tags
nimbio_list_gates
nimbio_key_statuses
nimbio_hold_opens
nimbio_create_guest_link
nimbio_revoke_guest_link
nimbio_manage_access_code
nimbio_set_access_code_mode
nimbio_configure_guest_view_entry
nimbio_manage_short_code
nimbio_list_guest_links
nimbio_list_access_codes
nimbio_access_code_mode
nimbio_guest_view_entry
nimbio_short_codes
nimbio_set_hold_open
nimbio_add_hold_open_window
nimbio_remove_hold_open_window

Delete a one-off hold-open window by its event id, from nimbio_hold_opens.

nimbio_manage_recurring_hold_open
nimbio_whoami
nimbio_gate_status
nimbio_community_overview
nimbio_access_log
nimbio_gate_status_log
nimbio_change_log
nimbio_key_usage
nimbio_add_members
nimbio_approve_member
nimbio_manage_member_keys
nimbio_update_key
nimbio_set_key_schedule
nimbio_list_members
nimbio_key_schedule
nimbio_list_keys
nimbio_open_gate
nimbio_open_my_gate
nimbio_manage_webhook
nimbio_replay_webhook
nimbio_send_message
nimbio_set_my_notifications
nimbio_webhooks
nimbio_webhook_deliveries
nimbio_messages
nimbio_my_notification_settings
// quality suggestions

All four hints declared on every tool

27/54 tools missing one or more hints — nimbio_my_keys (missing: destructiveHint, idempotentHint); nimbio_settings (missing: destructiveHint, idempotentHint); nimbio_homes (missing: destructiveHint, idempotentHint), +24 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/nimbio-labs/nimbio-mcp-server)](https://m8ven.ai/mcp/nimbio-labs/nimbio-mcp-server)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: c8e96619588efcac0ee43881aa87a8b1496488d3
code hash: 1f78ff952a2e057b30a0ff2389e18c54fc3411d687ea8900d2d40474f64d368f
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client