feishu-mcp-serverless (zxdwhda/feishu-mcp-serverless) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 10 tools. No publisher has claimed this listing.

C
Emerging
74/100

feishu-mcp-serverless

Feishu MCP with OAuth and durable state for Alibaba Cloud Function Compute

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

zxdwhda

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// tools this server exposes10 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

feishu_search_files

用于按关键词寻找飞书文档、多维表格、知识库文件。并行查询云文档和 Wiki、合并去重;每个来源最多 limit 条,返回标题/类型/链接,不读取正文。部分来源失败会明确提示;不要把它当成没有结果。

feishu_read_document

用于阅读 docx 文档或 Wiki 中的文档。默认读取官方 Markdown;支持 text 纯文本。按 offset/max_chars 分段,truncated 时用 next_offset 继续,不能将一段当作全文。表格记录请用 feishu_query_records。

feishu_create_document

用于创建新文档,可提供 Markdown 正文和目标文件夹 token。转换成功后才创建。返回文档 ID;若正文写入失败会保留已创建文档 ID,先检查该文档,勿重复创建。

feishu_append_document

用于在指定文档末尾追加 Markdown,保留原文。支持 Wiki 链接。不会替换现有内容;超时后先读取确认,避免重复追加。

feishu_get_table_schema

用于从 base/Wiki 链接了解多维表格。未指定 table_id 时列出数据表;指定后并行读取字段和视图,返回字段类型、选项及各自分页标记。写入或筛选前先核对字段。

feishu_query_records

用于按字段和条件查询记录。先读取表结构;仅返回一页,has_more 为 true 时继续分页再计算完整总额。日期筛选 value 按飞书格式,例如 ["ExactDate","毫秒时间戳"];不支持 SQL。

feishu_search_tools

用于寻找日常工具未覆盖的飞书能力,如日历、任务、消息、权限或复杂文档块。仅搜索操作说明,不搜索用户文件。默认返回摘要和工具名;用 feishu_get_tool_schema 读取选中工具的参数。

feishu_get_tool_schema

用于获取 feishu_search_tools 返回的一个操作的完整参数定义、读写标注及执行入口。不访问用户文件。

feishu_read_tool

用于执行已通过 feishu_get_tool_schema 确认的只读操作。服务端拒绝写入操作。日常文件搜索、文档读取、表格查询优先使用专用工具。

feishu_call_tool

完整能力兼容入口。先用 feishu_get_tool_schema 读取参数,再执行指定原生操作;可能创建、覆盖、删除资料、发送消息或修改权限,操作须符合用户请求。只读操作优先使用 feishu_read_tool。失败或超时后不要盲目重试写入。

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configALIYUN_PROFILE
configREVISION
// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/zxdwhda/feishu-mcp-serverless)](https://m8ven.ai/mcp/zxdwhda/feishu-mcp-serverless)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: d98df45854e59e40707d12fe58e783cb082f8906
code hash: 8ca9519ab46039fc68e92054c2e658967c1988530afb78a6c61a31036b774fff
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client