Skills/npm/revclamp-mcp

revclamp-mcp@1.20.32

CAUTION

Publisher claims: "Zero-take-rate Stripe 2025-03-31.basil, Visa CE 3.0 & EU/XI VIES VAT guardrails MCP server." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server) · listed in the official MCP RegistryPublisher revclamp · publishing for 19 daysInstalls 0Last detonated 9 h ago
What would fix thisWatchDispute verdict

Coverage

Server started and answered tools/list.
Tested
MCP initialize and tools/list · every tool description, for hidden instructions · every file read, file written and host contacted by what ran
Not tested
what the tools do when called with real credentials

Before you give it your token

It will ask for
REVCLAMP_API_KEYREVCLAMP_CREDENTIALS_PATHREVCLAMP_WEBHOOK_SECRETConfiguration, not credentials: NODE_TEST_CONTEXT, REVCLAMP_MCP_MODE, REVCLAMP_MCP_URL
Where it talks to
revclamp.com (its own)
What the honeypot saw
no credential files read · no network
What we could not test
what the tools do when called with real credentials

Connect it with a scoped credential, under the guard. It asks for REVCLAMP_API_KEY, REVCLAMP_CREDENTIALS_PATH, REVCLAMP_WEBHOOK_SECRET and talks to revclamp.com. Give the credential to the guard, not the server: the value never enters the server's environment and only travels to the host you bind.

$vet-skills run --secrets REVCLAMP_API_KEY=revclamp.com,REVCLAMP_CREDENTIALS_PATH=revclamp.com,REVCLAMP_WEBHOOK_SECRET=revclamp.com -- npx -y revclamp-mcp

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-14 and scored it 77/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Credential pass-through configuration; Prompting user to enter sensitive credentials. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 20 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
20sclaimed9 tools: revclamp_audit_revenue_leakage, revclamp_evaluate_ghost_usage, revclamp_stage_stripe_dispute_ce3, revclamp_validate_eu_vat_vies, revclamp_reconcile_b2b_net_terms, revclamp_verify_webhook_signature, revclamp_calculate_roi_and_plan_fit, revclamp_simulate_webhook_replay, revclamp_lint_dispute_evidence
20stools4c782441e1e74173
20stoolsea627123439cb895
20stools23919bab2ea320cf
20stools49f1a95bd688a949
20stools42dbe8c4a15fd74b
20stools9719b1d32e765b8f
20stoolsd98cffdfe703b2f9
20stools5400fd3562d0ad10
20stools333b825b026ed6ae
20sprocessscript backend runs setup only
20sprocessno install scripts to re-run

Static findings

HIGH
Credential pass-through configurationindex.mjs:1009 · Credential pass-through configuration — agent relays sensitive credentials" REVCLAMP_WEBHOOK_SECRET Synthetic/test webhook secret used by --verify-webhook (never pass secrets in CLI argv).",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST02
MEDIUM
npx invocation of non-well-known packagelocal_engine.mjs:2681 · npx invocation of non-well-known package — may execute untrusted code…STATELESS_OPEN_CORE", message: "Running in stateless local mode. Run `npx --yes revclamp-mcp@latest --init-workspace` (zero email required) to provision a free…Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagelocal_engine.mjs:2682 · npx invocation of non-well-known package — may execute untrusted codecommand: "npx --yes revclamp-mcp --init-workspace <work_email>",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageindex.mjs:1409 · npx invocation of non-well-known package — may execute untrusted coderesendCommand: `REVCLAMP_API_KEY=${cmdKeyToken} npx -y revclamp-mcp@${PACKAGE_VERSION} --resend-otp ${cleanEmail}`,Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagelocal_engine.mjs:2684 · npx invocation of non-well-known package — may execute untrusted codecliActivateCommand: "npx -y revclamp-mcp@latest --init-workspace [email protected]",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageindex.mjs:1394 · npx invocation of non-well-known package — may execute untrusted codeverifyCommandHint: `REVCLAMP_API_KEY=${cmdKeyToken} npx -y revclamp-mcp@${PACKAGE_VERSION} --verify-otp ${cleanEmail} <6-digit-code>`,Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageindex.mjs:1393 · npx invocation of non-well-known package — may execute untrusted codenextStepCommand: `REVCLAMP_API_KEY=${cmdKeyToken} npx -y revclamp-mcp@${PACKAGE_VERSION} --resend-otp ${cleanEmail}`,Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageindex.mjs:1408 · npx invocation of non-well-known package — may execute untrusted codenextStepCommand: `REVCLAMP_API_KEY=${cmdKeyToken} npx -y revclamp-mcp@${PACKAGE_VERSION} --verify-otp ${cleanEmail} <6-digit-code>`,Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packageindex.mjs:1322 · npx invocation of non-well-known package — may execute untrusted codeoptionalBindEmailCommand: `${optionalBindEmailCmdPrefix}npx -y revclamp-mcp@${PACKAGE_VERSION} --init-workspace <work_email>`,Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagelocal_engine.mjs:2683 · npx invocation of non-well-known package — may execute untrusted codezeroEmailInitCommand: "npx --yes revclamp-mcp@latest --init-workspace",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
CRITICAL
Prompting user to enter sensitive credentialsindex.mjs:2108 · Prompting user to enter sensitive credentials — social engineering"Error: passing webhook secrets in CLI arguments is forbidden; provide the secret via the REVCLAMP_WEBHOOK_SECRET environment variable."Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST03

Cost to the agent

Instructions loaded
≈93 tok
1 file · 11 in bundle
Tool list per prompt
≈3,003 tok
9 tools · 334 per tool
Handshake
529 ms
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 204

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for revclamp-mcp@1.20.32 as of 9 h ago. This is the package itself, not its dependencies.

What would make this Verified

3 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Prompting user to enter sensitive credentials≈ +9 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  2. Unclaimed publisher≈ +8 on the totalClaim revclamp: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  3. Credential pass-through configuration≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  4. npx invocation of non-well-known package≈ +2 on the totalPin versions and sources; vendor anything fetched at install time.
Publish a new version to npm, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim revclampPropose a patch to the maintainer