Dialogbrain Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Dialogbrain Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Remote MCP server that connects your AI agent to a unified inbox spanning WhatsApp, Telegram, Instagram, Email, Livechat, and Voice calls — plus a workspace knowledge graph and AI agent orchestration.
https://api.dialogbrain.com/mcpmessages.read_history, threads.list, threads.searchmessages.send, messages.forward, messages.deletecontacts.find, contacts.discover, contacts.sync, contacts.profileworkspace.search, kg.find_entity, kg.get_relationshipsagents.ask, agents.simulate_inbound, agents.approve_draftAdd as a Custom Connector with URL https://api.dialogbrain.com/mcp. Sign in via OAuth when prompted.
In the ChatGPT Apps directory, search for "DialogBrain" (pending review). Or add as a Custom MCP Server with the same URL.
{
"mcpServers": {
"dialogbrain": {
"url": "https://api.dialogbrain.com/mcp",
"transport": "streamable-http",
"auth": "oauth2"
}
}
}OAuth 2.0 with Dynamic Client Registration (RFC 7591). Your MCP client registers automatically and is granted an access token scoped to one DialogBrain workspace. Revoke at any time from Settings → Developer in app.dialogbrain.com.
Every tool exposes accurate MCP hint annotations:
readOnlyHint — true for read tools (threads.list, messages.read_history, kg.find_entity, …)destructiveHint — true for delete tools (messages.delete, widgets.delete, …)openWorldHint — true for tools that touch third-party APIs (messages.send, web.search, contacts.sync, …)idempotentHint — derived from read-only/delete-by-id semanticsSee server.json for the registry manifest and gemini-extension.json for Gemini CLI integration.
MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.