SeaTable MCP (seatable/seatable-mcp) is an MCP server listed on the M8ven Trust Index. It scores 48 out of 100, grade D. It declares 23 tools. No publisher has claimed this listing.
The official Model Context Protocol (MCP) server for SeaTable, built and maintained by SeaTable GmbH. It lets AI agents interact with data in your bases — reading, writing, searching, linking, and querying rows through a focused set of tools. The server intentionally focuses on data operations, not schema management (creating/deleting tables or columns), keeping the tool set lean and safe for auto
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
seatable
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
add_rowAdd a single row. For multiple rows, always use append_rows instead of calling add_row in a loop. Link and file/image columns cannot be set here — use link_rows and upload_file instead.
add_select_optionsAdd new options to a single-select or multi-select column. Use this before writing rows with option values that do not exist yet.
append_rowsBatch insert rows. Rejects unknown columns. Link and file/image columns cannot be set here — use link_rows and upload_file instead. Note: the response may contain column keys instead of column names due to a SeaTable API limitation.
create_snapshotCreate a snapshot of the current base. Requires at least one change since the last snapshot and at least 10 minutes since the last snapshot.
delete_rowsDelete one or more rows from a table by their IDs.
download_fileRead the content of a file attached to a row in a file or image column. Use get_row first to see available files in the column, then pass the exact file_name to select a specific file. Returns JSON with: file_name, file_size (bytes), content, content_type, and download_link (only when content_type …
echo_argsDebug tool that returns exactly what arguments the client sent
find_rowsget_rowGet a row by ID from a table
get_row_activitiesGet the change history of a specific row. Returns a list of activities showing who changed what and when, including old and new values. 25 activities per page.
get_schemaReturns the normalized schema for the base
link_rowsCreate links between rows via the dedicated links endpoint. This is the ONLY way to create links — link columns cannot be written via add_row or update_rows.
list_basesList available SeaTable bases. Use the returned names as the "base" parameter in other tools.
list_collaboratorsList users who have access to this base. Returns email (internal user ID) and display name. Use the email values when writing to collaborator columns. Call this once to resolve @auth.local addresses in collaborator columns before displaying them to the user.
list_rowsList rows from a table with pagination (defaults: page=1, page_size=100). Use find_rows for filtering/sorting or query_sql for SQL queries.
list_tablesList tables in the SeaTable base with their columns (name, type, key). Includes select options and link configuration where applicable.
ping_seatableHealth check that verifies connectivity and auth to SeaTable
query_sqlExecute SQL queries against SeaTable (SELECT, UPDATE, DELETE, INSERT). Use ? placeholders for parameters. Syntax rules: - Quote table/column names with backticks: `Table Name`, `Column Name` (not double quotes). Required for names with spaces, hyphens, or names matching function names. - SELECT ret…
search_rowsSearch rows with a filter object
unlink_rowsRemove links between rows via the dedicated links endpoint. This is the ONLY way to remove links — link columns cannot be modified via update_rows.
update_rowsBatch update rows. Rejects unknown columns. Link and file/image columns cannot be modified here — use link_rows/unlink_rows and upload_file instead.
upload_fileUpload a file or image to a row. Accepts base64-encoded file data and attaches it to the specified file or image column. By default appends to existing files; set replace=true to overwrite.
upsert_rowsBatch upsert rows by matching on one or more key columns. If a match exists, update it; otherwise insert a new row. Rejects unknown columns. Link and file/image columns cannot be set here — use link_rows/unlink_rows and upload_file instead.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Axios: Header Injection via Prototype Pollution
Allocation of Resources Without Limits or Throttling in Axios
CORS_ALLOWED_ORIGINSComma-separated list of allowed origins for CORS (HTTP mode only, disabled if unset)HOSTLOG_LEVELMCP_SEATABLE_TRANSPORTMCP_TRANSPORTMETRICS_PORTPrometheus metrics port (default: 9090, HTTP mode only)OPENAI_APPS_CHALLENGE_TOKENSEATABLE_MCP_HOSTNAMEPORTTool test coverage
16/23 tools referenced in tests (70%)
Write tests that reference each tool by name so every tool has at least one test.
Production dependencies are patched
0 critical, 10 high severity in production deps — axios@1.13.6 (high), axios@1.13.6 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Dev dependencies
1 critical/high in dev-only deps (does not ship to users)
Upgrade dev dependencies when convenient.
Dependency freshness
3/10 production deps abandoned (no release in 2+ years): bottleneck@2023-02-22 (3.5y), prom-client@2024-06-27 (2.2y), axios-retry@2024-08-02 (2.1y)
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/seatable/seatable-mcp)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check