deepin-desktop-mcp (xxxos/deepin-desktop-mcp) is an MCP server listed on the M8ven Trust Index. It scores 56 out of 100, grade D. It declares 21 tools. No publisher has claimed this listing.

D
Caution
56/100

deepin-desktop-mcp

MCP server for controlling Deepin desktop system settings and applications, including WiFi, Bluetooth, brightness, theme, volume, app launching, file operations, and shutdown.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

xxxos

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// tools this server exposes21 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

switch_wifi

开关 WiFi 无线网络。用户说打开/关闭 WiFi、无线网络时使用。switch=true 开启,false 关闭。

switch_bluetooth

开关蓝牙。用户说打开/关闭蓝牙时使用。switch=true 开启,false 关闭。

get_bluetooth_devices

查看当前已连接的蓝牙设备列表。用户询问连了哪些蓝牙耳机/音箱/设备时使用。

set_brightness

调整屏幕亮度。用户说调亮/调暗、设置亮度百分比时使用。percent 取值 0-100。

switch_eyes_protection

开关护眼/色温模式。用户说打开护眼模式、夜间模式、色温时使用。switch=true 开启自动色温,false 关闭。

switch_theme

切换系统主题。用户说浅色/深色/自动主题时使用。theme 可选 Light、Dark、Auto。

switch_wallpaper

随机切换一张系统壁纸。用户说换壁纸、换桌面背景时使用。

set_volume

设置系统音量或静音。用户说调大/调小声音、静音时使用。volume 为 0-100;mute=true 静音,false 取消静音。

set_performance_mode

切换电源性能模式。用户说高性能/平衡/节能模式时使用。mode 可选 performance、balance、powersave。

open_url

用系统默认浏览器打开网址或网站。用户说打开B站/百度/某个https链接时使用。 url_or_site 三种传法任选: - 完整 URL:如 https://www.xiaohongshu.com - 网站域名:如 xiaohongshu.com(自动补 https://) - 网站名/别名:如 小红书、bilibili、B站、百度(常见中文站名基本都支持) 只要用户提到打开某个网站,就把网站名直接传进来调用本工具,不要自行判断是否支持; 如果网站名识别失败,请改用完整 URL 再调一次。 也支持模糊类别名(如「音乐网站」「视频网站」「购物网站」),将打开该类别的默认站点。 若浏览器已打开,

site_search

在指定网站搜索关键词并打开搜索结果页。用户说「搜索X」「帮我搜一下X」「在B站搜X」时使用。 query 是搜索关键词(如「Python 教程」);site 是站点名或别名(如 bilibili、B站、百度、google、知乎、淘宝), 省略或无法识别时默认用百度搜索。site 拿不准时传网站域名(如 xiaohongshu.com)也可以,不要自行判断不支持。

launch_app

打开或关闭本机应用(含系统应用和第三方应用)。 switch=true 打开,false 关闭。 常用 app_name: - 系统:terminal, browser, fileManager, controlCenter, calculator, systemMonitor - 办公/社交:wps, wpsWriter, wpsPresentation, wpsSpreadsheet, dingtalk, wechat, wecom 用户说打开微信/钉钉/WPS/设置/终端时使用本工具;若要打开具体网站请用 open_url。

get_system_memory

查看系统内存使用情况。用户问内存还剩多少、内存占用时使用。

set_font_size

设置系统字号。用户说调大/调小字体、设置字号时使用。size 建议 9.0 到 20.0,例如 10.5、12。

file_operation

文件操作:打开/复制/移动/重命名/删除文件或文件夹,或创建文件夹/文件(可带内容)。需要明确的绝对路径。

list_directory

列出目录下的文件和子文件夹。用户说查询文件、看看目录里有什么、桌面上有哪些文件时使用。

read_file_content

读取文本文件内容。用户说读一下某个文件、查看文件内容时使用。仅适合较小的文本文件。

lock_screen

锁定屏幕。用户说锁屏、锁上电脑、锁定屏幕时使用。

shutdown_system

关机。 - confirm=false(默认):只弹出系统关机确认界面,由用户在屏幕上点确认,适合说「关机」时先让用户确认。 - confirm=true:直接关机。仅当用户明确说「确认关机」「马上关机」「立即关机」时才传 true。 不要在用户没说确认时把 confirm 设为 true。

create_schedule

创建日程提醒文件(ICS)。用户说提醒我、创建日程时使用。时间格式: yyyy-MM-ddThh:mm:ss。

music_control

控制正在播放的音乐/媒体。用户说播放/暂停/下一首/上一首时使用。

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configDEEPIN_MCP_CONFIG
configDEEPIN_MCP_ENV
configMCP_ENDPOINT本工具可控制系统设置、开关机、读写/删除本地文件等。错误调用、模型误判或配置(尤其是 token)泄露,可能导致数据丢失、隐私风险或系统异常。使用即表示你了解并自行承担全部风险;作者不对任何直接或间接损失负责。
configLOG_LEVEL.env 密钥与运行环境:MCP_ENDPOINT、
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

21/21 tools missing one or more hints — switch_wifi (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); switch_bluetooth (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_bluetooth_devices (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +18 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Destructive tools are labelled

1 tool perform destructive updates without destructiveHint — file_operation deletes at line 957 (shutil.rmtree(src))

Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.

Tool inputs are validated

17/21 tool handlers declare input schemas (81%)

Declare an inputSchema with zod/joi/yup on every tool definition.

Tests exist

No test files found

Add tests that exercise each declared tool.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/xxxos/deepin-desktop-mcp?variant=verified)](https://m8ven.ai/mcp/xxxos/deepin-desktop-mcp)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 5d9ee6d2c4814963452d85d1fa8e3c9c896c9533
code hash: 917fdc57fd941aa1ba69f9c071b5f0ce1bef6ea48bc6d74bf8646fbd2912af0f
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client