Weavatrix Online MCP Server

by weavatrix Your server? Claim it

local only

Weavatrix Online runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 24 Aug 2026.

Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.

—

Installs / week

not published

Stars

0 open issues

24 Aug 2026

Last commit

from GitHub

MIT

License

JavaScript

What the code does

We read the source, 6 h ago · rules ccca72095570

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Reads secrets and sends them out src/security/malware-rules.mjs:57

    pattern: /(?:readFileSync|readFile|createReadStream|openSync|Get-Content|\bcat\s)[\s\S]{0,100}?(?:\.ssh\/id_(?:rsa|ed25519|dsa)|\.aws\/credentials|\.git-credentials|\/etc\/shadow|\.docker\/config\.json|\.kube\/config)/i,

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Touches key and credential files src/security/malware-rules.mjs:57

    pattern: /(?:readFileSync|readFile|createReadStream|openSync|Get-Content|\bcat\s)[\s\S]{0,100}?(?:\.ssh\/id_(?:rsa|ed25519|dsa)|\.aws\/credentials|\.git-credentials|\/etc\/shadow|\.docker\/config\.json|\.kube\/config)/i,

Sends data to a third-party sink src/security/malware-rules.mjs:65

    pattern: /discord(?:app)?\.com\/api\/webhooks|hooks\.slack\.com\/services|api\.telegram\.org\/bot|pastebin\.com\/raw|burpcollaborator|oastify\.com|interact\.sh|webhook\.site|canarytokens\.(?:com|org)|dnslog\.cn/i,

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Weavatrix Online and you get told the day something new turns up.

Alternatives to Weavatrix Online

same job, measured the same way

Weavatrix Online

by sergii-ziborov

Weavatrix Online extension: guarded sync, advisories, malware review, architecture contracts.

62 installs/wk local only

Quicksign

by causehacker

E-signatures for contracts and NDAs. Draft with AI, review, and send for signature.

21 installs/wk 4 tools answering

Gatefile

by cloudcorprecords

Extract a repo's contribution gates into machine-readable contribution-gates.json.

local only

mcp-retriever

by keiranhaax

One MCP server for web search, page extraction, and cited research.

100 installs/wk local only

Big Indexer

by ahmedxuhri

Architecture-aware MCP context with boundaries, seams, impact scope, and BGI-TWIN guidance.

81 installs/wk local only

Stratum MCP

by smartmemory

Structured execution for coding agents: contracts, postconditions, gates, guardrails.

235 installs/wk local only

Zip Archive Create Extract Bomb Guard

by theluckystrike

Create, inspect and extract zip archives offline, with traversal, symlink and zip-bomb guards.

12 tools answering

Zip

by theluckystrike

Create, inspect and extract zip archives offline, with traversal, symlink and zip-bomb guards.

local only

Weavatrix Online — questions

Answers built from our own checks of this server.

Why is there no uptime for Weavatrix Online?

Weavatrix Online runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.

Is Weavatrix Online open source?

Yes — it is published under the MIT licence, written in JavaScript and 1 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.