# @box-kite/mcp

The Box Kite MCP server: what an agent may write, what a component takes, and whether a value actually works.

- **Type:** MCP server
- **Trust:** 85/100 (A), scored on the package rubric
- **Verification:** verified (build provenance)
- **Version:** 2.2.7
- **Author:** Maxim Procopenco
- **License:** MIT
- **npm:** @box-kite/mcp
- **Source:** https://github.com/box-kite/box-kite
- **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport)

## Trust

85/100 (A), scored on the package rubric
- Publisher verified: no
- Build provenance: verified attestation
- npm trusted publishing (OIDC): yes
- Install scripts: nothing suspicious found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 0 days

## Security scan

- **Status:** clean
- **Scanned:** 2026-10-22T13:44:32.112Z
- **Version scanned:** 2.2.7
- **CVEs:** none found by OSV at scan time

## Tools

40 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `appearance` — The appearance CSS property is used to display UI elements with platform-specific styling, based on the operating system's theme.
- `animation` — One of the four presets — their `@keyframes` are registered already and their durations ride `--transitionTime`, so `prefers-reduced-motion` stops them with no 
- `animationDelay` — The animation-delay CSS property specifies the amount of time to wait from applying the animation to an element before beginning to perform the animation. Milli
- `animationDirection` — The animation-direction CSS property sets whether an animation should play forward, backward, or alternate back and forth between playing the sequence forward a
- `animationDuration` — The animation-duration CSS property sets the length of time that an animation takes to complete one cycle. Milliseconds: `animationDuration={1100}` is `1100ms`,
- `animationFillMode` — The animation-fill-mode CSS property sets how a CSS animation applies styles to its target before and after its execution.
- `animationIterationCount` — The animation-iteration-count CSS property sets the number of times an animation sequence should be played before stopping.
- `animationName` — Which `@keyframes` to run: a sequence registered with `Box.keyframes()`, one of the four preset names, or a name from a stylesheet this library never wrote — an
- `animationPlayState` — The animation-play-state CSS property sets whether an animation is running or paused.
- `animationRange` — The shorthand that sets both ends of the range at once: one value sets the start and leaves the end at `normal`, two set both. `entry` is the whole of the eleme
- `animationRangeEnd` — Where along the timeline the animation finishes: a named part of the pass (`cover`, `contain`, `entry`, `exit`, `entry-crossing`, `exit-crossing`), an offset in
- `animationRangeStart` — Where along the timeline the animation starts. Same values as the end, and the pair is what turns "when this element is scrolled past" into "while it is enterin
- `animationTimeline`
- `animationTimingFunction` — How an animation progresses through each cycle: a keyword, one of the four sampled springs, or a curve of your own — `cubic-bezier()`, `steps()` and `linear()` 
- `borderStyle` — The border-style shorthand CSS property sets the line style for all four sides of an element's border.
- `borderRadius` — The border-radius CSS property rounds the corners of an element's outer border edge. You can set a single radius to make circular corners, or two radii to make 
- `borderRadiusTop` — The border-top-radius CSS property rounds the top corners of an element by specifying the radius (or the radius of the semi-major and semi-minor axes) of the el
- `borderRadiusRight` — The border-right-radius CSS property rounds the right corners of an element by specifying the radius (or the radius of the semi-major and semi-minor axes) of th
- `borderRadiusBottom` — The border-bottom-radius CSS property rounds the bottom corners of an element by specifying the radius (or the radius of the semi-major and semi-minor axes) of 
- `borderRadiusLeft` — The border-left-radius CSS property rounds the left corners of an element by specifying the radius (or the radius of the semi-major and semi-minor axes) of the 
- `borderRadiusTopLeft` — The border-top-left-radius CSS property rounds the top-left corner of an element by specifying the radius (or the radius of the semi-major and semi-minor axes) 
- `borderRadiusTopRight` — The border-top-right-radius CSS property rounds the top-right corner of an element by specifying the radius (or the radius of the semi-major and semi-minor axes
- `borderRadiusBottomRight` — The border-bottom-right-radius CSS property rounds the bottom-right corner of an element by specifying the radius (or the radius of the semi-major and semi-mino
- `borderRadiusBottomLeft` — The border-bottom-left-radius CSS property rounds the bottom-left corner of an element by specifying the radius (or the radius of the semi-major and semi-minor 
- `borderRadiusStart` — Rounds both corners on the side the text starts from: the left ones in a left-to-right writing mode, the right ones in a right-to-left one.
- `borderRadiusEnd` — Rounds both corners on the side the text ends at: the right ones in a left-to-right writing mode, the left ones in a right-to-left one.
- `borderRadiusStartStart` — Rounds the block-start, inline-start corner: top-left in a left-to-right writing mode, top-right in a right-to-left one.
- `borderRadiusStartEnd` — Rounds the block-start, inline-end corner: top-right in a left-to-right writing mode, top-left in a right-to-left one.
- `borderRadiusEndEnd` — Rounds the block-end, inline-end corner: bottom-right in a left-to-right writing mode, bottom-left in a right-to-left one.
- `borderRadiusEndStart` — Rounds the block-end, inline-start corner: bottom-left in a left-to-right writing mode, bottom-right in a right-to-left one.
- `position` — The position CSS property sets how an element is positioned in a document. The top, right, bottom, and left properties determine the final location of positione
- `anchorName` — Names this element as an anchor, so a floating layer can hang off it by name. The `--` is optional here and added on the way out, the way a `vars` key's is, so 
- `positionAnchor` — Which anchor this element is positioned against, by the name `anchorName` gave it. Needs `position="absolute"` or `"fixed"` beside it — an anchored element is a
- `positionArea`
- `positionTryFallbacks`
- `positionTryOrder`
- `positionVisibility`
- `top`
- `right`
- `bottom`

## Install

**Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured.
**Config** (claude-code):
```json
"{\n  \"mcpServers\": {\n    \"mcp\": {\n      \"command\": \"npx\",\n      \"args\": [\n        \"-y\",\n        \"@box-kite/mcp\"\n      ]\n    }\n  }\n}"
```

## Blast radius

Contained to moderate — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs on your machine; read-only tool surface.
- Floor 13, ceiling 31 (tier: unknown)
- `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low.
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/%40box-kite%2Fmcp
- Install plan: https://forgeregistry.com/api/v1/packages/%40box-kite%2Fmcp/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/%40box-kite%2Fmcp
- HTML page: https://forgeregistry.com/registry/%40box-kite%2Fmcp
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.