conector

MCPattested
v0.1.6Secra SolutionsMITUpdated 4d agonpmGitHub

Self-hosted MCP gateway: connect 1,178 apps once and use them from Claude, Codex, Cursor, Gemini CLI, Copilot and 42 more AI agents.

Works in
ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Attested build
A verified provenance attestation binds this artifact to the listed repository. Nobody has claimed the listing yet — this proves where the code was built, not who stands behind it.
4GitHub stars
2Forks
4d agoLast update
Needs 1 credential before it runs
  • CONECTOR_TOKENAPI keyrequired

    Access token (cnr_…) created in the Conector panel under Connect agents

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package
AuthorSecra Solutions
LicenseMIT
Version0.1.6
Sourcenpm+mcp-registry
Trust Status
B
65/100Good
✓Listed in Forge index+10/10
✓Identity verified · attested build+20/20
—Ed25519 publish signature+0/5
→ Included automatically when the publisher runs `forge publish`
—Domain verification+0/5
→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }
✓npm Trusted Publishing (Sigstore)+5/5
—npm maintainer match+0/5
→ Publisher: add the verified GitHub login to the npm package's maintainers (npm owner add <login>)
✓CVE scan · clean+30/30
—Static analysis · clean+0/20
→ Suspicious install scripts or obfuscated code detected
Paste into Claude Code, Cursor, or any AI assistant to fix all gaps
StatusIdentity verified
PublisherUnverified
SignatureUnsigned
Domain—
Provenance✓ Sigstore-verified · 41fc867
Dependencies✓ 60 resolved+ · none vulnerable
Tool surface40 tools · none privileged
Security scan⚠ Warnings (1)v0.1.6 · todayHow well does this scan work?
PROMPTtool:pushover_sendExfiltration-shaped instruction
EvalsNone
IndexedOct 17, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

40 tools · none privileged · 1 flagged for injection
Statically extracted from the published packagev0.1.6 · 12h ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

openai_generate_imageGenerates images from a description with a GPT Image model and saves them on the server (Conector's

Generates images from a description with a GPT Image model and saves them on the server (Conector's

No input schema was published for this tool.

elevenlabs_text_to_speechGenerates the audio of a text with an ElevenLabs voice and saves it on the server (Conector's downloads

Generates the audio of a text with an ElevenLabs voice and saves it on the server (Conector's downloads

No input schema was published for this tool.

deepl_translateTranslates one or more texts with DeepL. Returns, in the same order, each translation and the detected source language.

Translates one or more texts with DeepL. Returns, in the same order, each translation and the detected source language.

No input schema was published for this tool.

aws_costsAWS cost by service and period (Cost Explorer). Each Cost Explorer query costs 0.01 USD.

AWS cost by service and period (Cost Explorer). Each Cost Explorer query costs 0.01 USD.

No input schema was published for this tool.

make_scenariosList the Make scenarios (most recent first) with their status, schedule and last edit: across all

List the Make scenarios (most recent first) with their status, schedule and last edit: across all

No input schema was published for this tool.

aircall_callsLists the most recent calls: direction, status, duration, line, agent and the other party's number.

Lists the most recent calls: direction, status, duration, line, agent and the other party's number.

No input schema was published for this tool.

chatwork_send_messagePosts a message to a Chatwork room (group, direct chat or “My Chat”).

Posts a message to a Chatwork room (group, direct chat or “My Chat”).

No input schema was published for this tool.

line_send_messageSends a text (push) message to a user, group or room that follows the official account. Counts toward the monthly quota.

Sends a text (push) message to a user, group or room that follows the official account. Counts toward the monthly quota.

No input schema was published for this tool.

pushbullet_sendSend a note (or a link) to all your Pushbullet devices, or to just one.

Send a note (or a link) to all your Pushbullet devices, or to just one.

No input schema was published for this tool.

pushover_sendinjection riskSend a notification to the configured user or group (its key is already stored in Conector).

Send a notification to the configured user or group (its key is already stored in Conector).

INJECTIONExfiltration-shaped instructionSend a notification to the configured user or group (its key is already stored in Conector).

No input schema was published for this tool.

zulip_send_messagePost a message in a channel (stream) with its topic, or send a direct message to one or more people by email.

Post a message in a channel (stream) with its topic, or send a direct message to one or more people by email.

No input schema was published for this tool.

close_searchSearch leads by text (company, contact, email, phone…) or with Close's search syntax

Search leads by text (company, contact, email, phone…) or with Close's search syntax

No input schema was published for this tool.

clickhouse_queryRuns a read-only SQL query (SELECT, SHOW, DESCRIBE, EXPLAIN…) and returns columns and rows.

Runs a read-only SQL query (SELECT, SHOW, DESCRIBE, EXPLAIN…) and returns columns and rows.

No input schema was published for this tool.

foursquare_search_placesSearches for places by name, category or type (e.g. “cafe”) near a city or some coordinates.

Searches for places by name, category or type (e.g. “cafe”) near a city or some coordinates.

No input schema was published for this tool.

geoapify_geocodeConverts an address or a place into coordinates: returns the normalized address, latitude, longitude

Converts an address or a place into coordinates: returns the normalized address, latitude, longitude

No input schema was published for this tool.

geocodio_geocodeConverts an address (US, Canada, Mexico or UK) into coordinates, with the normalized address and

Converts an address (US, Canada, Mexico or UK) into coordinates, with the normalized address and

No input schema was published for this tool.

geokeo_geocodeConverts an address or a place into coordinates: returns the formatted address, latitude and longitude.

Converts an address or a place into coordinates: returns the formatted address, latitude and longitude.

No input schema was published for this tool.

here_geocodeConverts an address or a place into coordinates: returns the normalized address, latitude, longitude

Converts an address or a place into coordinates: returns the normalized address, latitude, longitude

No input schema was published for this tool.

tableau_sessionSigns in to Tableau (if needed) and returns the site and user ids (LUID), the site name and the

Signs in to Tableau (if needed) and returns the site and user ids (LUID), the site name and the

No input schema was published for this tool.

hackernews_front_pageReturns the first stories of a Hacker News list with title, link, points, comments and author.

Returns the first stories of a Hacker News list with title, link, points, comments and author.

No input schema was published for this tool.

toggl_hoursYour time entries between two dates (only the last 3 months; for earlier dates, use the Reports API): start, end,

Your time entries between two dates (only the last 3 months; for earlier dates, use the Reports API): start, end,

No input schema was published for this tool.

jotform_responsesResponses (submissions) of a form by submission date: id, date, status and each question with its answer as

Responses (submissions) of a form by submission date: id, date, status and each question with its answer as

No input schema was published for this tool.

surveymonkey_responsesResponses of a survey, from the most recent to the oldest: id, date, status (completed, partial…), email if

Responses of a survey, from the most recent to the oldest: id, date, status (completed, partial…), email if

No input schema was published for this tool.

crisp_conversationsChat conversations, paginated: session id, contact (name and email), state (pending, unresolved or

Chat conversations, paginated: session id, contact (name and email), state (pending, unresolved or

No input schema was published for this tool.

freshservice_searchFilters tickets using Freshservice syntax: status (2 open, 3 pending, 4 resolved, 5 closed), priority (1

Filters tickets using Freshservice syntax: status (2 open, 3 pending, 4 resolved, 5 closed), priority (1

No input schema was published for this tool.

deel_peoplePeople in the organization (employees and contractors): id, name, email, job title, country, hiring type,

People in the organization (employees and contractors): id, name, email, job title, country, hiring type,

No input schema was published for this tool.

workable_candidatesCandidates for all jobs or for one, optionally of a stage, by email or created since a date: id,

Candidates for all jobs or for one, optionally of a stage, by email or created since a date: id,

No input schema was published for this tool.

lemonsqueezy_ordersOrders: id, number, date, customer, email, product, total, status (paid, refunded, partial_refund, pending,

Orders: id, number, date, customer, email, product, total, status (paid, refunded, partial_refund, pending,

No input schema was published for this tool.

quaderno_invoicesIssued invoices, from the most recent to the oldest: id, number, date, customer, tax ID, country, total, currency, status

Issued invoices, from the most recent to the oldest: id, number, date, customer, tax ID, country, total, currency, status

No input schema was published for this tool.

pennylane_invoicesCustomer invoices (issued) or supplier invoices (received), from the most recent to the oldest: id, number,

Customer invoices (issued) or supplier invoices (received), from the most recent to the oldest: id, number,

No input schema was published for this tool.

zohocrm_coqlRuns a COQL query (Zoho CRM's SQL: select fields from Module where … order by … limit n offset m) and

Runs a COQL query (Zoho CRM's SQL: select fields from Module where … order by … limit n offset m) and

No input schema was published for this tool.

zohocrm_searchSearches the records of a module (Leads, Contacts, Accounts, Deals…) by criteria ((Field:operator:value), e.g.

Searches the records of a module (Leads, Contacts, Accounts, Deals…) by criteria ((Field:operator:value), e.g.

No input schema was published for this tool.

canva_designsYour own designs and those shared with you: by relevance if you search for text and, otherwise, from the most recent to the oldest.

Your own designs and those shared with you: by relevance if you search for text and, otherwise, from the most recent to the oldest.

No input schema was published for this tool.

canva_exportExports a design to PDF, PNG, JPG or PPTX and saves it on the server (Conector's downloads folder); for PNG and JPG,

Exports a design to PDF, PNG, JPG or PPTX and saves it on the server (Conector's downloads folder); for PNG and JPG,

No input schema was published for this tool.

pinterest_pinsPins in the account or on a board: id, title, description, destination link, board, date and image. Returns

Pins in the account or on a board: id, title, description, destination link, board, date and image. Returns

No input schema was published for this tool.

pinterest_analyticsAccount totals between two dates (default: the last 30 days; at most 90 days back): impressions,

Account totals between two dates (default: the last 30 days; at most 90 days back): impressions,

No input schema was published for this tool.

sesamehr_employeesLists employees (active by default): id, name, email, code, phone and current presence (online,

Lists employees (active by default): id, name, email, code, phone and current presence (online,

No input schema was published for this tool.

sesamehr_work_entriesWork entries (clock-ins and clock-outs) for the whole company or one employee between two dates: employee, type,

Work entries (clock-ins and clock-outs) for the whole company or one employee between two dates: employee, type,

No input schema was published for this tool.

signaturit_requestsLists signature requests with their documents: request id and date and, per document, id, file, signer and

Lists signature requests with their documents: request id and date and, per document, id, file, signer and

No input schema was published for this tool.

signaturit_downloadDownloads the signed document (or its audit report) of a request as a PDF and saves it on the server

Downloads the signed document (or its audit report) of a request as a PDF and saves it on the server

No input schema was published for this tool.

40 of 40 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Self-hosted MCP gateway: connect 1,178 apps once and use them from Claude, Codex, Cursor, Gemini CLI, Copilot and 42 more AI agents.

Keywords
mcpmodel-context-protocolmcp-servermcp-gatewayai-agentsclaudecodexcursorgemini-cliintegrationsoauthself-hostedmcp-proxyclaude-codegithub-copilotllmagentic-aicomposio-alternative
Alternatives
Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-10-21 — observed resolution, not a publisher declaration.

60 packages resolved · 3 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

38 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

+26 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.

Topics

Related in git & code hosting