vocion-core (vocion/vocion-core) is an MCP server listed on the M8ven Trust Index. It scores 0 out of 100, grade F. It declares 38 tools. No publisher has claimed this listing.
Open source agent workforce platform. Next.js + Postgres + MCP server for AI agent teams with human-in-the-loop review, built in.
Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
vocion
Source: github_repo_search
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
workspace_listList every agent, skill, and object type defined in the active workspace directory. Returns slugs, names, and descriptions — not full prompts.
workspace_getReturn the full manifest (including prompt text) for one agent, skill, or object type. Use after workspace_list to pick the slug.
workspace_write_skillWrite a skill SKILL.md (frontmatter + body) to workspace/<org>/skills/. Writes to disk + auto-applies to DB. Git is external — pass autoCommit=true to opt in. Returns files written, new context SHA, and the apply diff.
workspace_write_agentWrite an agent manifest + system prompt. Writes to disk + auto-applies to DB. Git is external — pass autoCommit=true to opt in.
workspace_write_object_typeWrite an object type manifest (schema, source relevance, classification prompt). Writes to disk + auto-applies to DB. Git is external — pass autoCommit=true to opt in.
workspace_deleteRemove the files for an agent, skill, or object type from workspace/<org>/. Auto-commits + auto-applies (which will remove the row from the DB on the next apply).
workspace_applyReconcile workspace/<org>/ to the database and record a workspace_version audit row. Use after editing files directly (outside MCP) or when auto-apply was disabled.
workspace_diffDry-run apply — shows created/updated/unchanged counts without writing. Equivalent to `workspace_apply dryRun=true`.
workspace_version_historyShow the last N workspace_version rows: sha, summary, applied_by, applied_at. Useful for answering "when did this prompt last change?"
objects_listReturn business_object rows for this org. Filter by type slug (e.g. discovery_call, deal).
objects_getReturn a business_object row with its type and document links.
object_types_listReturn the business_object_type rows. Useful for discovering what type slugs are valid for objects_list.
search_queryRun a retrieval query against indexed documents (pgvector + Postgres FTS hybrid). Returns ranked documents with snippets, source type, dates, and links. Filter by sources (e.g. ["zoom","gmail"]) to narrow scope.
web_searchLive web search. Returns ranked titles, URLs, and snippets.
fetch_urlFetch one URL and return its readable text/markdown.
crawl_siteSame-origin BFS crawl; returns pages (capped depth + count).
generate_imageGenerate an image from a prompt; returns the saved artifact URL.
run_codeEvaluate a math expression (builtin) or run code (sandbox provider).
create_artifactCreate a CSV, SVG chart, or doc and return its URL.
mission_listList authored mission templates (starting points) for this org.
mission_startStart an open-ended team mission from a brief — from a template (missionSlug) or ad-hoc (team). Plans the work, then runs to completion or the first approval gate.
mission_list_runsList mission runs (optionally filtered by status).
mission_get_runGet one mission run with its plan (task graph), team, artifacts, and status.
mission_approveApprove a paused mission run (awaiting_review) and continue execution.
mission_cancelCancel a mission run.
mission_promoteDraft a reusable Workflow from a completed mission run (for review before activating).
teams_listReturn the workspace lead plus every team of agents: lead agent, member roster, and exactly one resolved accountable human per team. Accountability provenance rides on `accountable.source` — "team" = set explicitly on the team, "workspace" = inherited from the workspace default. A null lead means "n…
plugins_listReturn every skill registered via the plugin system (separate from prompt-only skills in the DB).
plugins_reloadClear the registry and re-run plugin discovery. Use during local development after updating a plugin package. Hot-reload of edited local files is limited by Node ESM caching.
workflow_listReturn every workflow defined in workspace/<org>/workflows/ with its trigger and step count.
workflow_getReturn the complete manifest for a workflow including all step bodies.
workflow_run_startKick off a workflow manually. If the workflow hits an approve step, the run pauses and returns with status=paused.
workflow_run_listReturn recent workflow_run rows, newest first. Filter by workflow slug or status.
workflow_run_getFull detail for one run including per-step results.
workflow_run_resumeAfter a human approves the current approve step, continue execution from where it left off.
workflow_run_cancelPermanently cancel a running or paused run. Cannot be un-cancelled.
playbook_listReturn the catalog of skills and playbooks for this org (slug, name, description, kind, origin, version, license).
playbook_getReturn a playbook's SKILL.md body and optionally one named sibling resource (REFERENCE.html, etc.). Resources are listed on the catalog row.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used
Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
Auth.js: Email normalizer validates the address before Unicode normalization, allowing a homoglyph @ bypass
Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)
Vitest browser mode serves unsanitized otelCarrier query parameter as inline script
AUTH_SECRETBILLING_PLAN_ENVCHECKLY_EMAIL_ADDRESSCHECKLY_LOGICAL_IDCHECKLY_PROJECT_NAMECLERK_SECRET_KEYENVIRONMENT_URLPLAYWRIGHT_BASE_URLRESEND_API_KEYRESEND_WEBHOOK_SECRETSEED_ORG_IDSTRIPE_SECRET_KEYSTRIPE_WEBHOOK_SECRETVOCION_ALLOW_QUEUE_RESETVOCION_AUTH_PROVIDERVOCION_CREDENTIAL_VAULT_KEYVOCION_EMAIL_SURFACEVOCION_MAIL_DOMAINVOCION_MAIL_ENABLEDVOCION_MAIL_FROMVOCION_MCP_AGENT_SLUGVOCION_ORG_IDVOCION_ORG_NAMEVOCION_THINKING_BUDGETWORKSPACE_AUTO_APPLYWORKSPACE_AUTO_COMMITWORKSPACE_PATHdemo/workspaceDATABASE_URLNEXT_PUBLIC_APP_URLNEXT_PUBLIC_BETTER_STACK_INGESTING_HOSTNEXT_PUBLIC_BETTER_STACK_SOURCE_TOKENNEXT_PUBLIC_CLERK_PUBLISHABLE_KEYNEXT_PUBLIC_LANGFUSE_BASE_URLNEXT_PUBLIC_LANGFUSE_PROJECT_IDNEXT_PUBLIC_LOGGING_LEVELNEXT_PUBLIC_SENTRY_DSNNEXT_PUBLIC_STRIPE_PUBLISHABLE_KEYPORTSENTRY_ORGANIZATIONSENTRY_PROJECTTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
38/38 tools missing one or more hints — workspace_list (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); workspace_get (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); workspace_write_skill (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +35 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
No hardcoded API keys
4 live-looking API keys in source: 4 AWS access key
Move secrets to environment variables (process.env.X) or your secret manager.
Tool test coverage
17/38 tools referenced in tests (45%)
Write tests that reference each tool by name so every tool has at least one test.
No eval / new Function
1 eval() or new Function() call — dynamic code execution
Replace eval / Function with explicit parsing or safer alternatives.
Production dependencies are patched
4 critical, 16 high severity in production deps — next@16.1.6 (critical), next@16.1.6 (critical)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Dev dependencies
7 critical/high in dev-only deps (does not ship to users)
Upgrade dev dependencies when convenient.
Dependency freshness
3/75 production deps abandoned (no release in 2+ years): gray-matter@2023-07-12 (3.2y), @dnd-kit/utilities@2023-11-06 (2.9y), rehype-slug@2023-11-20 (2.8y)
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/vocion/vocion-core)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check