Capacitiesmcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Capacitiesmcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP server for Capacities — search, create content, save weblinks, and analyze your knowledge base from any MCP-compatible client.
Choose the option that fits your setup:
capacities-desktop-extension.dxt.dxt file and enter your API token when promptedAll dependencies are bundled — no additional setup needed.
git clone https://github.com/inconceivablelabs/capacitiesMCP.git
cd capacitiesMCP
npm install
npm run buildThen add to your MCP client config (e.g. Claude Desktop's claude_desktop_config.json):
{
"mcpServers": {
"capacities": {
"command": "node",
"args": ["/path/to/capacitiesMCP/server/dist/index.js"],
"env": {
"CAPACITIES_API_TOKEN": "your_token_here"
}
}
}
}For running as a persistent service (e.g. behind an MCP gateway):
cd server
docker build -t capacities-mcp .
docker run -d \
-e CAPACITIES_API_TOKEN=your_token_here \
capacities-mcpThe Docker image uses server/ which contains only the runtime package and compiled output — no source or dev dependencies.
| Tool | Description |
|---|---|
search_content | Search across Capacities spaces using keywords |
list_spaces | List all your Capacities spaces |
get_space_info | Detailed info about a specific space |
smart_search | Context-aware search with related content |
advanced_search | Search with date ranges, object types, and filters |
create_structured_note | Create structured templates (meeting, daily-reflection, task-list, research) |
save_weblink | Save a URL as a weblink with metadata and tags |
add_to_daily_note | Add content to today's daily note |
analyze_content_patterns | Analyze patterns in your content |
identify_knowledge_gaps | Find underdeveloped topics |
| Environment Variable | Required | Default |
|---|---|---|
CAPACITIES_API_TOKEN | Yes | — |
CAPACITIES_API_BASE_URL | No | https://api.capacities.io |
LOG_LEVEL | No | info |
capacitiesMCP/
├── src/ # TypeScript source (single source of truth)
├── server/ # Runtime packaging
│ ├── Dockerfile # Container build
│ ├── package.json # Runtime dependencies only
│ └── dist/ # Compiled output (built from root src/)
├── tsconfig.json # Builds src/ → server/dist/
├── manifest.json # DXT extension manifest
└── *.dxt # Pre-built extension packagesnpm run build compiles src/ directly into server/dist/. There is one source, one build step, and one output location used by all three installation methods.
npm install
npm run build # Compile TypeScript
npm run dev # Watch mode
npm run inspector # MCP Inspector for debugging
npm test # Run testsSee CLAUDE.md for architecture details.
MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.