eiros-control-plane (ricobiz/eiros-control-plane) is an MCP server listed on the M8ven Trust Index. It scores 24 out of 100, grade F. It declares 217 tools. No publisher has claimed this listing.

Warning

24/100

eiros-control-plane

Item: eiros-control-plane
Rating: 24
Author: M8ven

Persistent EIROS control plane with MCP bridge, adaptive scheduler and reverse wake.

→ ricobiz/eiros-control-plane · listed on github_code

Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every push why connect →

Who stands behind it

ricobiz

Source: github_code

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings

🚨

Reads files from sensitive locations

Touches: /etc/eiros/tunnel.env, /etc/eiros/rental-agent.env

🔐

You'll be asked for 1 credential: CONTROL_PLANE_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// tools this server exposes178 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

rental_status

Read Rental Agent database and policy status.

rental_ingest_text

Persist a rental lead supplied as plain text without fetching external sources.

rental_ingest_url

Persist a rental listing URL and provenance. Autonomous fetching is added by Scout later.

rental_ingest_phone

Persist a phone/contact lead tied to rental discovery context.

rental_property

Read one canonical rental property record by property id.

rental_shortlist

List canonical rental properties ordered by fit score and freshness.

rental_search

Run a bounded autonomous public-market discovery pass, normalize, deduplicate and rank results.

rental_sources

Read all preserved source listings and provenance for one canonical property.

rental_refresh

Re-fetch known public listing URLs for one property and update normalized facts without contacting anyone.

rental_browser_status

Read the isolated rental search browser handoff state and allowlisted verification sources.

rental_browser_snapshot

Open an allowlisted rental source in the persistent search browser and return a screenshot for manual human verification.

rental_browser_click

Apply one user-chosen coordinate click only while an allowlisted source is showing a detected human-verification page.

rental_browser_open

Create or reuse a persistent remote-browser session for an allowlisted rental source.

rental_browser_frame

Read the latest changed frame and status from a persistent rental browser session.

rental_browser_input

rental_browser_close

Close one remote browser page/session while preserving the persistent browser profile and cookies.

rental_contacts

Read public contact methods associated with one rental property and their provenance.

rental_outreach_plan

Dry-run discovery outreach for qualified leads, grouped by contact to avoid duplicate messages. Sends nothing.

rental_contact_qualified

Create durable draft threads and deduplicated outreach jobs for qualified leads. Does not send until a channel is authenticated.

rental_threads

List durable rental conversation threads, optionally filtered by property or status.

rental_thread

Read one durable rental conversation thread including linked properties and message ledger.

rental_policy

Read the current Rental Agent action and disclosure policy.

rental_open_app

Open the Rental Agent MCP App card inside ChatGPT.

health

Check whether the Claude-facing EIROS MCP endpoint is alive.

hub_bootstrap

Bootstrap Claude as an EIROS Hub participant.

hub_status

Read EIROS Hub participants and pending addressed messages.

dialog_inbox

Claim addressed messages for Claude.

dialog_ack

Acknowledge one addressed message after Claude has handled it.

dialog_send

Send one addressed EIROS Hub message from Claude or another participant.

ack_event

Acknowledge one EIROS Pulse event after handling.

pulse_status

Read EIROS Pulse event state for diagnostics.

open_mastering_panel

Open the interactive EIROS audio mastering panel with browser file upload and WAV download.

eirosmaster.open_mastering_panel

Compatibility alias for the ChatGPT connector namespace.

mastering_health

Check whether the dedicated EIROS remote mastering service is alive.

mastering_upload

Binary upload compatibility tool. In ChatGPT use open_mastering_panel for reliable browser file upload.

mastering_analyze

Measure format, integrated LUFS, true peak, loudness range, crest factor, stereo correlation and spectral energy without changing the audio.

mastering_render

Render a section-aware adaptive 48 kHz/24-bit WAV master. Intentional crescendos and section-level macro dynamics are preserved; only local residuals are corrected before final loudness and true-peak control.

mastering_list

List uploaded source assets, analyses and rendered masters stored on the EIROS VPS.

mastering_download

Download one rendered master as 48 kHz/24-bit WAV or 320 kbps MP3.

mastering_delete

Permanently delete one uploaded source, its analysis and every rendered output belonging to it.

mastering_prepare_mp3

Create or reuse a 320 kbps MP3 derivative of one rendered master and return its metadata.

mastering_delete_output

Permanently delete one rendered master and its MP3 derivative without deleting the uploaded source or other masters.

mastering_share_create

Create an unguessable, expiring public page for one master with streaming and WAV/MP3 downloads.

mastering_share_revoke

Immediately disable one previously created public mastering link.

eirosmaster.mastering_health

Compatibility alias for the ChatGPT connector namespace.

eirosmaster.mastering_upload

Compatibility alias for the ChatGPT connector namespace.

eirosmaster.mastering_analyze

Compatibility alias for the ChatGPT connector namespace.

eirosmaster.mastering_render

Compatibility alias for the ChatGPT connector namespace.

eirosmaster.mastering_list

Compatibility alias for the ChatGPT connector namespace.

eirosmaster.mastering_download

Compatibility alias for the ChatGPT connector namespace.

eirosmaster.mastering_delete

Compatibility alias for the ChatGPT connector namespace.

eirosmaster.mastering_prepare_mp3

Compatibility alias for the ChatGPT connector namespace.

eirosmaster.mastering_delete_output

Compatibility alias for the ChatGPT connector namespace.

eirosmaster.mastering_share_create

Compatibility alias for the ChatGPT connector namespace.

eirosmaster.mastering_share_revoke

Compatibility alias for the ChatGPT connector namespace.

musetalk_health

Read durable MuseTalk job API health and active job count.

musetalk_job_create

Upload video and audio bytes and queue one durable MuseTalk V1.5 render job.

musetalk_job_status

Read durable state, retries and error details for one render job.

musetalk_job_cancel

Mark a non-terminal job cancelled. This does not delete the RunPod or its volume.

musetalk_job_download

Return the rendered MP4 bytes after a job reaches done state.

room_heartbeat

Refresh one active room or pulse session for presence indicators.

room_telemetry_update

Persist one boot/runtime stage of a Claude-hosted widget.

room_snapshot

Read shared room history, participant presence and operator control state.

room_cleanup_stale

Recycle stale shared-room sessions and stale outbound dialogue deliveries.

operator_send

Send one Rico operator message to ChatGPT, Claude or both.

operator_call_contact

Call one EIROS contact by phone number, agent_id or canonical address from the operator room.

conversation_control_set

Pause, resume or stop delivery for one shared project room.

conversation_control_get

Read current shared project room control state.

dialog_peek

Read available addressed messages without claiming them; used by Claude Pulse.

open_room_launcher

Mount the compact EIROS presence, queue and addressed-wake launcher.

open_collab_room

Open the shared ChatGPT, Claude and Rico collaboration room.

open_claude_pulse

Mount the persistent addressed EIROS wake channel for this Claude conversation.

open_claude_inbox

Mount the addressed message inbox for this Claude conversation.

directory_list

Read the EIROS AI phone book after bootstrap.

directory_get

Read one AI contact by agent_id, alias or ai:// address.

contact_call

Call an online AI contact or leave durable mail automatically when offline.

mail_send

Leave one durable asynchronous message in another AI participant's mailbox.

mailbox_status

Read pending call and mail counts for one bootstrapped participant.

hub_register

Deprecated compatibility alias for hub_bootstrap.

hub_heartbeat

Refresh participant presence without changing project or dialogue state.

dialog_release

Release a claimed message back to the recipient queue after a failed or deferred attempt.

dialog_history

Read the ordered shared dialogue history for one project thread.

project_state_get

Read durable shared project state and revision.

project_state_set

Replace shared project state with optimistic revision checking.

core_snapshot

Read the durable EIROS core, operational state, queue summary and recent journal context.

get_state

Read persistent Eiros state plus the cached-catalog SUM compatibility envelope.

set_state

Replace persistent state, or dispatch a SUM command for cached MCP catalogs.

list_files

List files inside the Eiros workspace.

read_file

Read a UTF-8 text file inside the Eiros workspace.

write_file

Create or replace a UTF-8 text file inside the Eiros workspace.

run_shell

Run a command as the isolated service user when operator mode is enabled.

queue_status

Read the durable scheduled queue, one task, filtered tasks and recent events.

queue_enqueue

Create a durable task with its own exact wake time or recurrence interval.

queue_claim

Claim the highest-priority due task of the requested mode with a bounded lease.

queue_heartbeat

Renew an active task lease after validating owner and claim token.

queue_commit

Commit a verified step, complete it, or schedule its exact next wake time.

queue_fail

Record a failed step and retry at an explicit time or with automatic backoff.

queue_cancel

Cancel a queued or running task and clear its lease.

scheduler_status

Read adaptive worker heartbeat, next wake time and pending brain inbox.

queue_reschedule

Move a non-terminal task to any exact Unix time or a relative delay.

78 further tools are not listed here. The complete surface is in the source.

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

configEIROS_MUSETALK_STATE_ROOT

configEIROS_MUSETALK_MCP_PORT

configEIROS_MUSETALK_MCP_TRANSPORT

configEIROS_PROBE_ALLOW_LIVE_DATA_DIR

configEIROS_DATA_DIR

configEIROS_COMPANION_PATH

configEIROS_ENABLE_CUSTOM_WIDGET_DOMAIN

configEIROS_VPS_OPS_TRANSPORT

configEIROS_TEST_ALLOW_LIVE_DATA_DIR

🔐 secretCONTROL_PLANE_API_KEY

configEIROS_RENTAL_TUNNEL_ID

configEIROS_WIDGET_DOMAIN

configEIROS_MASTERING_ROOT

configSUDO_USER

configEIROS_RENTAL_DATA_DIR

configEIROS_RENTAL_PORT

configEIROS_RENTAL_HOST

// quality suggestions

Tool annotations

145/217 tools have annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

72/217 tools missing one or more hints — health (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); hub_bootstrap (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); hub_status (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +69 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Destructive tools are labelled

1 tool perform destructive updates without destructiveHint — musetalk_job_create deletes at line 105 (video_path.unlink(missing_ok=True))

Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

Tool test coverage

109/217 tools referenced in tests (50%)

Write tests that reference each tool by name so every tool has at least one test.

No access to sensitive paths

Reads sensitive paths: /etc/eiros/tunnel.env, /etc/eiros/rental-agent.env

Remove reads of sensitive system paths. If you genuinely need them, document why in the README.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail

The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Verified](https://m8ven.ai/badge/mcp/ricobiz/eiros-control-plane?variant=verified)](https://m8ven.ai/mcp/ricobiz/eiros-control-plane)

Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.

commit: 30d73560f87932a7e62855c75e362b1f23091333

code hash: 00063d566e23c66e8f0934567fb275cf30d3e2b81ecc337189b9ec69e21e7ee2

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client