← Back to search

yazio-mcp

GitHub Actions Scanned 23d ago

MCP server for accessing Yazio user & nutrition data (unofficial)

npm ↗
C
73 / 100

Versions

0.0.14latest
Jun 14, 2026
0.0.13
Feb 28, 2026
0.0.12
Dec 24, 2025
0.0.11
Dec 18, 2025
0.0.8
Dec 18, 2025
+ show 5 moreshow less
0.0.6
Dec 17, 2025
0.0.5
Sep 25, 2025
0.0.3
Sep 25, 2025
0.0.2
Sep 25, 2025
0.0.1
Sep 25, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 15

get_user
annotations: verified low

Get Yazio user profile information

readOnlyHint true openWorldHint true idempotentHint true
get_user_consumed_items
annotations: verified low

Get food entries for a specific date

readOnlyHint true openWorldHint true idempotentHint true
get_user_dietary_preferences
annotations: verified low

Get user dietary preferences and restrictions

readOnlyHint true openWorldHint true idempotentHint true
get_user_exercises
annotations: verified low

Get user exercise data for a date or date range

readOnlyHint true openWorldHint true idempotentHint true
get_user_goals
annotations: verified low

Get user nutrition and fitness goals

readOnlyHint true openWorldHint true idempotentHint true
get_user_settings
annotations: verified low

Get user settings and preferences

readOnlyHint true openWorldHint true idempotentHint true
get_user_suggested_products
annotations: verified low

Get product suggestions for the user

readOnlyHint true openWorldHint true idempotentHint true
get_user_water_intake
annotations: mismatch low

Get water intake data for a specific date

readOnlyHint true openWorldHint true idempotentHint true destructiveHint true
get_user_weight
annotations: mismatch low

Get user weight data

readOnlyHint true openWorldHint true idempotentHint true destructiveHint true
get_user_daily_summary
annotations: mismatch low

Get daily nutrition summary for a specific date

readOnlyHint true openWorldHint true idempotentHint true destructiveHint true
search_products
annotations: mismatch low

Search for food products in Yazio database. You can optionally specify user\'s sex, country and locale of the products to search for.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint true
get_product
annotations: mismatch low

Get detailed information about a specific product by ID

readOnlyHint true openWorldHint true idempotentHint true destructiveHint true
add_user_consumed_item
annotations: verified low

Add a food item to user consumption log

readOnlyHint false idempotentHint false destructiveHint true
remove_user_consumed_item
annotations: verified low

Remove a food item from user consumption log

readOnlyHint false idempotentHint true destructiveHint true
add_user_water_intake
annotations: verified low

Log a water intake entry. Requires date (YYYY-MM-DD HH:mm:ss format) and cumulative water_intake in milliliters (ml). Always get the latest water intake first and add the new amount to calculate the cumulative value.

readOnlyHint false idempotentHint false

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 44

info
Tool 'get_user_consumed_items' annotations are consistent annotation_checker · 80%
info
Tool 'get_user_dietary_preferences' annotations are consistent annotation_checker · 80%
info
Tool 'get_user_exercises' annotations are consistent annotation_checker · 80%
info
Tool 'get_user_goals' annotations are consistent annotation_checker · 80%
info
Tool 'get_user_settings' annotations are consistent annotation_checker · 80%
info
Tool 'get_user_suggested_products' annotations are consistent annotation_checker · 80%
info
Tool 'get_user' annotations are consistent annotation_checker · 80%
medium
Tool 'get_user_water_intake' claims destructive but name implies read-only operation annotation_checker · 80%
medium
Tool 'get_user_weight' claims destructive but name implies read-only operation annotation_checker · 80%
medium
Tool 'get_user_daily_summary' claims destructive but name implies read-only operation annotation_checker · 80%
medium
Tool 'search_products' claims destructive but name implies read-only operation annotation_checker · 80%
medium
Tool 'get_product' claims destructive but name implies read-only operation annotation_checker · 80%
info
Tool 'add_user_consumed_item' annotations are consistent annotation_checker · 80%
info
Tool 'remove_user_consumed_item' annotations are consistent annotation_checker · 80%
info
Tool 'add_user_water_intake' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@0.28.0 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Vulnerable dependency: uuid@13.0.0 (GHSA-w5hq-g745-h8pq) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: get_user manifest_parser · 85%
info
Tool: get_user_consumed_items manifest_parser · 85%
info
Tool: get_user_dietary_preferences manifest_parser · 85%
info
Tool: get_user_exercises manifest_parser · 85%
info
Tool: get_user_goals manifest_parser · 85%
info
Tool: get_user_settings manifest_parser · 85%
info
Tool: get_user_suggested_products manifest_parser · 85%
info
Tool: get_user_water_intake manifest_parser · 85%
info
Tool: get_user_weight manifest_parser · 85%
info
Tool: get_user_daily_summary manifest_parser · 85%
info
Tool: search_products manifest_parser · 85%
info
Tool: get_product manifest_parser · 85%
info
Tool: add_user_consumed_item manifest_parser · 85%
info
Tool: remove_user_consumed_item manifest_parser · 85%
info
Tool: add_user_water_intake manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 312 components sbom_generator · 100%
high
Hardcoded Password found in fliptheweb-yazio-mcp-492696d/README.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%