vcon-mcp (vcon-dev/vcon-mcp) is an MCP server listed on the M8ven Trust Index. It scores 50 out of 100, grade D. It declares 65 tools. No publisher has claimed this listing.

D
Caution
50/100

vcon-mcp

MCP server for storing, managing, and analyzing IETF vCon (Virtual Conversation) data with AI assistants.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

vcon-dev

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
🚨
Secret credentials may flow to a network call
2 flows detected: LITELLM_MASTER_KEY, SUPABASE_SERVICE_ROLE_KEY. We can’t prove the destination matches the brand the credential belongs to.
🚨
Known vulnerabilities in dependencies: 1 critical, 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 4 credentials: NEO4J_PASSWORD, OPENAI_API_KEY, VCON_LICENSE_KEY, GROQ_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes65 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

ai_analyze_vcon

Run AI analysis (sentiment, summary, topics) on a specific vCon by UUID. Useful for re-analyzing or analyzing vCons that were created before the AI sidecar was available.

ai_analyzer_status

Get AI analyzer status: sidecar connection, analysis count, model info.

ai_query

Ask a natural language question about conversations. Provide context chunks from vCon transcripts for RAG-style Q&A.

jsonld_get_enrichment

Get the full JSON-LD-ex semantic enrichment for a vCon, including provenance annotations, confidence scores, integrity hash, and agent capabilities.

jsonld_verify_integrity

Verify the cryptographic integrity of a vCon enrichment. Returns whether the document has been tampered with since signing.

jsonld_confidence_query

Query confidence scores for a vCon. Returns per-party and per-analysis confidence with Subjective Logic opinions. Supports temporal decay calculation.

jsonld_provenance_chain

Trace the full provenance chain for a vCon: who created it, what models analyzed it, confidence scores, integrity verification, and data lineage.

jsonld_trust_propagation

Compute trust propagation through an analysis chain using Subjective Logic. For example: transcript confidence → sentiment confidence → summary confidence.

neo4j_query

Run a read-only Cypher query against the vCon knowledge graph. Use for finding repeat callers, topic clusters, contact networks, and escalation patterns.

neo4j_insights

Get pre-built graph insights: repeat_callers, topic_clusters, escalation_paths, contact_network, or graph_stats.

siprec_ingest_file

Manually trigger ingestion of a SIPREC XML or JSON file from the watch folder. Useful for testing or re-processing.

siprec_status

Get SIPREC adapter status: watch folder path, pending files, processed count.

teams_import_file

Import a Teams call record JSON file and create a vCon. File must follow MS Graph callRecord schema.

teams_import_folder

Import all Teams call record JSON files from a folder. Defaults to the sample-data directory.

teams_status

Get Teams adapter status: watch folder, stats, connection info.

whatsapp_import_file

Import a WhatsApp exported chat .txt file and create a vCon.

whatsapp_import_folder

Import all WhatsApp .txt files from a folder. Defaults to sample-data directory.

whatsapp_parse_preview

Parse a WhatsApp chat export and return a preview without creating a vCon.

whatsapp_status

Get WhatsApp adapter status.

get_database_analytics
get_monthly_growth_analytics
get_attachment_analytics
get_tag_analytics
get_content_analytics
get_database_health_metrics
get_database_size_info
get_smart_search_limits
get_database_shape
get_database_stats
analyze_query
get_schema

Get vCon schema definition in the requested format (json_schema or typescript).

get_examples

Get example vCons (minimal, phone_call, chat, email, video, full_featured) as JSON or YAML.

manage_tag
get_tags

Retrieve tags from a vCon. Provide a specific key to get one tag value, or omit key to get all tags as an object.

remove_all_tags

Remove all tags from a vCon.

search_by_tags

Search for vCons that have specific tag values. All specified tags must match (AND logic). REQUIRED: You must provide the tags parameter as an object with at least one key-value pair.

get_unique_tags
create_vcon_from_template

Create a new vCon from a predefined template (phone_call, chat_conversation, email_thread, video_meeting, custom).

vcon_fetch
vcon_taxonomy
vcon_capabilities
vcon_graph_shape
vcon_search
vcon_aggregate
describe_response_shape
create_vcon
get_vcon
search_vcons
search_vcons_content
search_vcons_semantic
search_vcons_hybrid
add_analysis
add_dialog

Add a dialog (conversation segment) to an existing vCon. Dialog can be a recording, text, transfer, or incomplete.

add_attachment

Add an attachment to an existing vCon. Attachments can be files, documents, or other data related to the conversation.

delete_vcon

Delete a vCon and all its related data (parties, dialog, analysis, attachments). This operation cannot be undone.

update_vcon

Update top-level vCon metadata (subject, extensions, must_support). For dialog, analysis, attachments use their specific tools.

update_dialog

Replace the dialog at the given index (PUT semantics: omitted fields are cleared). Index is the dialog's position in the vCon's dialog array.

remove_dialog

Remove the dialog at the given index. Per IETF core-02 §4.1.8 the slot is preserved as a content-stripped placeholder (keeps "type") so positional references in analysis/attachments do not shift.

update_analysis

Replace the analysis at the given index (PUT semantics: omitted fields are cleared). vendor is REQUIRED per IETF spec.

remove_analysis

Remove the analysis at the given index. Analysis is a referential leaf, so the element is hard-deleted and the remaining analyses are renumbered to stay contiguous.

update_attachment

Replace the attachment at the given index (PUT semantics: omitted fields are cleared).

remove_attachment

Remove the attachment at the given index. Attachments are referential leaves, so the element is hard-deleted and the rest renumbered to stay contiguous. Note: removing a "tags" attachment clears the vCon's tags.

add_party

Append a party to an existing vCon. Returns the new party index.

update_party

Replace the party at the given index (PUT semantics: omitted fields are cleared).

remove_party

Remove the party at the given index. Per IETF core-02 §4.1.8 the slot is preserved as an empty placeholder Party Object so positional references (dialog.parties, attachment.party, etc.) do not shift. Set anonymize=true to write {name:"anonymous"} instead of an empty object.

// known CVEs in dependencies1 critical3 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@3.2.4GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

high@opentelemetry/auto-instrumentations-node@0.48.0GHSA-q7rr-3cgh-j5r3

Prometheus exporter process crash via malformed HTTP request

high@opentelemetry/sdk-node@0.52.1GHSA-q7rr-3cgh-j5r3

Prometheus exporter process crash via malformed HTTP request

highkoa@3.1.1GHSA-7gcc-r8m5-44qm

Koa has Host Header Injection via ctx.hostname

low@opentelemetry/core@1.25.1GHSA-8988-4f7v-96qf

OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configAI_ANALYZER_VERBOSE
configAPI_AUTH_REQUIRED
configAPI_KEYS
configAPI_KEYS_READONLY
configAPI_KEY_HEADER
configAWS_REGION
configCORS_ORIGIN
configCURRENT_TENANT_ID
configDB_TYPEDatabase backend: Defaults to Supabase (=supabase). MongoDB is also supported via DB_TYPE=mongodb — see [docs/mongodb/setup.md](docs/mongodb/setup.md).
configEMBEDDING_PROVIDER
configENV_FILE
configJSONLD_VERBOSE
configLLAMA_SIDECAR_URL
configLOG_LEVEL
configMCP_DISABLED_CATEGORIES
configMCP_DISABLED_TOOLS
configMCP_ENABLED_CATEGORIES
configMCP_HTTP_ALLOWED_HOSTS
configMCP_HTTP_ALLOWED_ORIGINS
configMCP_HTTP_DNS_PROTECTION
configMCP_HTTP_HOST
configMCP_HTTP_JSON_ONLY
configMCP_HTTP_PORT
configMCP_HTTP_STATELESSStateless mode (=true): No session tracking, each request is independent
configMCP_SERVER_URL
configMCP_TOOLS_PROFILE
configMCP_TRANSPORT
configMONGO_DB_NAME
configMONGO_URL
configMQTT_BROKER_URL
configMQTT_ORG_ID
configMQTT_VERBOSE
configNEO4J_DATABASE
🔐 secretNEO4J_PASSWORD
configNEO4J_URI
configNEO4J_USER
configNEO4J_VERBOSE
🔐 secretOPENAI_API_KEY
configOTEL_ENABLED
configOTEL_ENDPOINT
configOTEL_EXPORTER_TYPE
configOTEL_LOG_LEVEL
configOTEL_SERVICE_NAME
configOTEL_SERVICE_VERSION
configREST_API_BASE_PATH
configREST_API_ENABLED
configREST_API_URL
configRLS_ENABLED
configSIPREC_FAILED_FOLDER
configSIPREC_POLL_INTERVAL
configSIPREC_PROCESSED_FOLDER
configSIPREC_VERBOSE
configSIPREC_WATCH_FOLDER
configSUPABASE_DB_SCHEMA
configTEAMS_VERBOSE
configTEAMS_WATCH_FOLDER
configTENANT_ATTACHMENT_TYPE
configTENANT_JSON_PATH
configVCON_INSTANCE_LABEL
🔐 secretVCON_LICENSE_KEY
configVCON_MCP_BUILD_TIME
configVCON_MCP_GIT_COMMIT
configVCON_MCP_VERSION
configVCON_OFFLINE_MODE
configVCON_PLUGINS_PATH
configVCON_REDIS_EXPIRY
configWHATSAPP_VERBOSE
configWHATSAPP_WATCH_FOLDER
configWHISPER_SIDECAR_URL
🔐 secretGROQ_API_KEY
configGROQ_MODEL
configLLAMA_HOST
configLLAMA_PORT
configWHISPER_MODEL
configWHISPER_HOST
configWHISPER_PORT
Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deployREDIS_URL
deploySUPABASE_ANON_KEY
deploySUPABASE_SERVICE_ROLE_KEY
deploySUPABASE_URL
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

65/65 tools missing one or more hints — ai_analyze_vcon (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); ai_analyzer_status (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); ai_query (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +62 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

46/65 tools referenced in tests (71%)

Write tests that reference each tool by name so every tool has at least one test.

Production dependencies are patched

0 critical, 3 high severity in production deps — @opentelemetry/auto-instrumentations-node@0.48.0 (high), @opentelemetry/sdk-node@0.52.1 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Dev dependencies

1 critical/high in dev-only deps (does not ship to users)

Upgrade dev dependencies when convenient.

Dependency freshness

3/34 production deps abandoned (no release in 2+ years): fast-json-stable-stringify@2023-06-22 (3.2y), koa-bodyparser@2023-07-21 (3.1y), @koa/cors@2023-12-11 (2.7y)

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/vcon-dev/vcon-mcp?variant=verified)](https://m8ven.ai/mcp/vcon-dev/vcon-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 5576bfa8d8fa0c8a2dd09b56ee0e4c7469c410fb
code hash: 0a5599bb59bf345d97bfe44592f845e0bd007c60ef055316ab787fb411f600b0
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client