← Back to search

@model-graph-tools/mcp-server

GitHub Actions Scanned 28d ago

MCP server for querying the WildFly management model graph

B
79.5 / 100

Versions

0.10.6latest
May 20, 2026
0.10.5
May 8, 2026
0.10.2
May 8, 2026
0.10.1
May 6, 2026
0.10.0
May 6, 2026
+ show 29 moreshow less
0.9.0
May 6, 2026
0.8.2
May 5, 2026
0.8.1
May 5, 2026
0.8.0
May 4, 2026
0.7.6
May 4, 2026
0.7.5
May 4, 2026
0.7.4
May 3, 2026
0.7.3
May 3, 2026
0.7.2
May 3, 2026
0.7.1
May 3, 2026
0.7.0
May 3, 2026
0.6.6
May 3, 2026
0.6.5
May 3, 2026
0.6.4
May 3, 2026
0.6.3
May 2, 2026
0.6.2
May 2, 2026
0.6.1
May 2, 2026
0.6.0
May 1, 2026
0.5.3
May 1, 2026
0.5.2
May 1, 2026
0.5.1
May 1, 2026
0.5.0
May 1, 2026
0.4.1
May 1, 2026
0.4.0
May 1, 2026
0.3.1
May 1, 2026
0.3.0
May 1, 2026
0.2.1
May 1, 2026
0.2.0
May 1, 2026
0.1.0
May 1, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 20

list_sources
annotations: none low

Lists all known WildFly versions and feature packs with their availability (running/not_found).

start_source
annotations: none low

Starts the model graph database for a WildFly version or feature pack. Downloads data automatically if needed — this may take up to a minute on first use. IMPORTANT: This starts the model graph database, NOT the WildFly application server. When describing this action to users, say 'starting the model graph for WildFly X', never 'starting WildFly X'.

stop_source
annotations: none low

Stops the model graph for a WildFly version or feature pack.

search_resources
annotations: none low

Searches for management model resources by name, address, or description.

browse_resource
annotations: none low

Returns a resource with its children, attributes, operations, and capabilities. The primary drill-down tool. Includes description, stability, parent, full attribute metadata (allowed values, units, restart requirements, attribute groups), operation stability and characteristics (read-only, runtime-only, global), parameter relationships (requires/alternatives), and sub-attribute composition via CONSISTS_OF for complex attributes (LIST/OBJECT).

describe_resource
annotations: none low

Returns a concise, human-readable description of a resource — its purpose, required add-operation parameters, required and optional attributes, and a CLI example. Use this for 'how do I add/configure X?' questions instead of browse_resource.

search_operations
annotations: none low

Searches operations across all resources by name or description. Can filter by resource address, read-only vs. mutating, and runtime-only. Returns stability level, deprecation info, and operation characteristics.

search_attributes
annotations: none low

Searches attributes across all resources. Can filter to only deprecated attributes or by stability level. Returns access type and required flag.

find_capabilities
annotations: none low

Searches for capabilities by name and shows which resources declare or reference them (via attributes and parameters).

find_deprecated
annotations: none low

Finds all deprecated elements (resources, attributes, operations, and parameters), optionally filtered by version or type.

find_by_stability
annotations: none low

Finds all elements (resources, attributes, operations, and parameters) with a given stability level, optionally filtered by type. Mainly useful for non-default levels (experimental, preview, community).

get_statistics
annotations: none low

Overview of the management model: identity metadata (name, version, type), node counts, stability breakdown per element type, deprecation counts, and relationship counts.

compare_versions
annotations: none low

Compares two WildFly versions or feature packs to find added, removed, and newly deprecated resources/attributes/operations. Also detects attribute, operation, and parameter changes within resources that exist in both versions.

get_resource_tree
annotations: none low

Returns all resources in the subtree under a given address. Use to explore the resource hierarchy without recursive browse_resource calls.

find_relationships
annotations: none low

Shows dependency and exclusivity relationships between attributes and between operation parameters for a resource. Exposes REQUIRES (must be set together) and ALTERNATIVE (mutually exclusive) relationships.

find_sensitive_attributes
annotations: none low

Find security-sensitive attributes marked with IS_SENSITIVE constraints. Returns attributes with their constraint type and resource. Use to audit passwords, keys, and other secrets in the management model.

get_allowed_values
annotations: none low

Get allowed option values, numeric ranges, and string length constraints for attributes and parameters. Answers 'what values can I set for X?' questions.

find_restart_required
annotations: none low

Find attributes that require a server restart after modification. Filter by restart level (no-services, all-services, jvm) and/or resource address. Answers "what changes need a server restart?" questions.

find_attribute_groups
annotations: none low

Discover attribute groups — logical groupings of related attributes within resources. Filter by resource address or group name.

run_cypher
annotations: none low

Escape hatch for advanced users: runs an arbitrary read-only Cypher query against the management model. Results capped at 100 rows with a 10s timeout.

Permissions 1

shell high
Server uses shell capabilities via: child_process

Scan Findings 48

low
Tool 'list_sources' has no annotations annotation_checker · 100%
low
Tool 'start_source' has no annotations annotation_checker · 100%
low
Tool 'stop_source' has no annotations annotation_checker · 100%
low
Tool 'search_resources' has no annotations annotation_checker · 100%
low
Tool 'browse_resource' has no annotations annotation_checker · 100%
low
Tool 'describe_resource' has no annotations annotation_checker · 100%
low
Tool 'search_operations' has no annotations annotation_checker · 100%
low
Tool 'search_attributes' has no annotations annotation_checker · 100%
low
Tool 'find_capabilities' has no annotations annotation_checker · 100%
low
Tool 'find_deprecated' has no annotations annotation_checker · 100%
low
Tool 'find_by_stability' has no annotations annotation_checker · 100%
low
Tool 'get_statistics' has no annotations annotation_checker · 100%
low
Tool 'compare_versions' has no annotations annotation_checker · 100%
low
Tool 'get_resource_tree' has no annotations annotation_checker · 100%
low
Tool 'find_relationships' has no annotations annotation_checker · 100%
low
Tool 'find_sensitive_attributes' has no annotations annotation_checker · 100%
low
Tool 'get_allowed_values' has no annotations annotation_checker · 100%
low
Tool 'find_restart_required' has no annotations annotation_checker · 100%
low
Tool 'find_attribute_groups' has no annotations annotation_checker · 100%
low
Tool 'run_cypher' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: esbuild@0.28.0 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list_sources manifest_parser · 85%
info
Tool: start_source manifest_parser · 85%
info
Tool: stop_source manifest_parser · 85%
info
Tool: search_resources manifest_parser · 85%
info
Tool: browse_resource manifest_parser · 85%
info
Tool: describe_resource manifest_parser · 85%
info
Tool: search_operations manifest_parser · 85%
info
Tool: search_attributes manifest_parser · 85%
info
Tool: find_capabilities manifest_parser · 85%
info
Tool: find_deprecated manifest_parser · 85%
info
Tool: find_by_stability manifest_parser · 85%
info
Tool: get_statistics manifest_parser · 85%
info
Tool: compare_versions manifest_parser · 85%
info
Tool: get_resource_tree manifest_parser · 85%
info
Tool: find_relationships manifest_parser · 85%
info
Tool: find_sensitive_attributes manifest_parser · 85%
info
Tool: get_allowed_values manifest_parser · 85%
info
Tool: find_restart_required manifest_parser · 85%
info
Tool: find_attribute_groups manifest_parser · 85%
info
Tool: run_cypher manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
info
SBOM generated: 123 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%