← Back to search

@lexmanh/shed-mcp-server

GitHub Actions Scanned 26d ago

MCP server for Shed — exposes disk scan and analysis tools to Claude Desktop and Claude Code

npm ↗
C
74.4 / 100

Versions

0.4.0-beta.1latest
May 8, 2026
0.3.0-beta.2
May 8, 2026
0.3.0-beta.1
May 8, 2026
0.2.0-beta.10
May 7, 2026
0.2.0-beta.9
May 7, 2026
+ show 8 moreshow less
0.2.0-beta.8
Apr 22, 2026
0.2.0-beta.7
Apr 22, 2026
0.2.0-beta.6
Apr 22, 2026
0.2.0-beta.5
Apr 22, 2026
0.2.0-beta.4
Apr 22, 2026
0.2.0-beta.3
Apr 21, 2026
0.2.0-beta.2
Apr 21, 2026
0.2.0-beta.1
Apr 21, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 4

list_projects
annotations: none low

List all detected projects under a given path. Returns project type, path, last-modified date, and total cleanable size. Read-only.

root string maxDepth number
analyze_project
annotations: none low

Get detailed analysis of a single project: all cleanable items, risk tiers, git status, last activity. Read-only.

path string
estimate_cleanup
annotations: none low

Estimate space freed by cleaning a set of items. Runs safety checks and returns what would be allowed vs skipped. Read-only — never deletes anything.

includeRed boolean
get_disk_usage
annotations: none low

Get current disk usage on the user machine (free / used / total).

path string

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs/promises
shell high
Server uses shell capabilities via: child_process
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 22

low
Tool 'list_projects' has no annotations annotation_checker · 100%
low
Tool 'analyze_project' has no annotations annotation_checker · 100%
low
Tool 'estimate_cleanup' has no annotations annotation_checker · 100%
low
Tool 'get_disk_usage' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: vitest@2.1.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: tsup@8.3.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list_projects manifest_parser · 70%
info
Tool: analyze_project manifest_parser · 70%
info
Tool: estimate_cleanup manifest_parser · 70%
info
Tool: get_disk_usage manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 26 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%