wopee-mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited wopee-mcp (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
AI-powered autonomous testing for your apps -- connect Claude, Cursor, or any MCP-compatible AI agent to Wopee.io and generate test cases, user stories, and run autonomous tests in seconds.
npx wopee-mcp[Documentation](https://docs.wopee.io/guides/wopee-mcp/) | [Landing Page](https://wopee.io/mcp/) | [Dashboard](https://cmd.wopee.io)
Add this server to your MCP configuration.
{
"mcpServers": {
"wopee": {
"command": "npx wopee-mcp",
"env": {
"WOPEE_PROJECT_UUID": "your-project-uuid-here",
"WOPEE_API_KEY": "your-api-key-here"
}
}
}
}#### Required Environment Variables
#### Optional Environment Variables
If you're behind a corporate proxy/VPN and experiencing connection timeouts, you can configure proxy settings using standard environment variables:
{
"mcpServers": {
"wopee": {
"command": "npx wopee-mcp",
"env": {
"WOPEE_PROJECT_UUID": "your-project-uuid-here",
"WOPEE_API_KEY": "your-api-key-here",
"HTTPS_PROXY": "http://your-proxy-server:8080"
}
}
}
}#### Supported Proxy Environment Variables
#### Finding Your Proxy Settings
If you're unsure about your proxy settings, check your VS Code settings (settings.json) for http.proxy value, or consult your IT department. Common corporate proxy formats:
http://proxy.company.com:8080http://10.x.x.x:8080http://username:[email protected]:8080 (if authentication is required)This is not required for MCP to work. If you see HTTPS or certificate-related errors, that indicates a TLS or certificate trust issue in your environment.
If the server fails with errors such as `UNABLE_TO_VERIFY_LEAF_SIGNATURE` or `certificate has expired`, it may be due to:
WOPEE_API_URL points to an internal or dev server)#### Preferred solutions (secure)
Example:
export NODE_EXTRA_CA_CERTS=/etc/ssl/certs/internal-ca.pemIn MCP config env:
"env": {
"WOPEE_PROJECT_UUID": "your-project-uuid-here",
"WOPEE_API_KEY": "your-api-key-here",
"NODE_EXTRA_CA_CERTS": "/path/to/ca.pem"
}#### Insecure workaround (not recommended)
For local debugging only, you may disable TLS verification in Node. This should never be used in production, as it disables HTTPS security and exposes traffic to interception.
export NODE_TLS_REJECT_UNAUTHORIZED=0Or in MCP config env:
"env": {
"WOPEE_PROJECT_UUID": "your-project-uuid-here",
"WOPEE_API_KEY": "your-api-key-here",
"NODE_TLS_REJECT_UNAUTHORIZED": "0"
}Treat this as a debug-only escape hatch, not a normal setup step.
Note: Some users have reported setting PYTHONHTTPSVERIFY=0 as well. This MCP server does not use Python; that variable has no effect on it. It would only apply if you run a Python-based MCP host or other tooling that also performs HTTPS in the same environment—outside the scope of this server.
Most tools in this MCP server require a suiteUuid to operate. You have two options to get started:
Start by fetching your existing analysis suites:
Use the wopee_fetch_analysis_suites tool to retrieve all available suites for your project.This will return a list of all analysis suites with their UUIDs, which you can then use with other tools.
If you don't have any suites yet, you have two options:
Automatic Analysis: Create and dispatch a full analysis/crawling suite:
Use the wopee_dispatch_analysis tool to create and dispatch a new analysis/crawling suite.Blank Suite: Create an empty suite for manual configuration:
Use the wopee_create_blank_suite tool to create a blank analysis suite.Both options will return a suite UUID, which you can use for subsequent operations.
#### wopee_fetch_analysis_suites
Fetches all analysis suites for your project. This is a good starting point to see what suites are available.
Example Usage:
Fetch all existing analysis suites for my project#### wopee_dispatch_analysis
Creates and dispatches a new analysis/crawling suite for your project, or reruns an existing one. Use this to start a fresh analysis session or to re-trigger a previous analysis.
additionalInstructions _(optional)_ - Additional instructions to guide the agent during the analysis/crawling phase (e.g. focus areas, things to ignore, login steps, etc.)additionalVariables _(optional)_ - Additional environment variables to pass to the analysis. Array of objects, each with:key - Variable name, must be uppercase with underscores only (e.g. MY_VAR, BASE_URL)value - Variable value (non-empty string)rerun _(optional)_ - If provided, reruns an existing analysis suite instead of creating a new one. Object with:suiteUuid - UUID of the existing suite to rerunanalysisIdentifier - Analysis identifier of the existing suitemode - Rerun mode: FULL (reruns the entire analysis including crawling and generation) or CRAWLING (reruns only the crawling phase)Example Usage:
Dispatch a new analysis suiteDispatch a new analysis suite and focus on the checkout flowDispatch a new analysis suite with additional variables CARD_FILAMENT=123321123 and AUTH_TOKEN=abc123Rerun the full analysis for suite <suiteUuid> with analysis identifier <analysisIdentifier>Rerun only the crawling phase for suite <suiteUuid> with analysis identifier <analysisIdentifier>#### wopee_create_blank_suite
Creates a blank analysis suite for your project. Use this when you want to manually configure and populate a suite rather than having it automatically analyzed.
Example Usage:
Create a blank analysis suite for my projectThese tools generate various artifacts for a specific suite. All require a suiteUuid and type to generate.
#### wopee_generate_artifact
Generates a specific file(artifact) for the selected suite.
suiteUuid - The UUID of the suitetype - "APP_CONTEXT" | "GENERAL_USER_STORIES" | "USER_STORIES_WITH_TEST_CASES" | "TEST_CASES" | "TEST_CASE_STEPS" | "REUSABLE_TEST_CASES" | "REUSABLE_TEST_CASE_STEPS"Example Usage:
Generate app context for my most recent analysis suiteThese tools retrieve generated artifacts for a specific suite. All require a suiteUuid and type.
#### wopee_fetch_artifact
Fetches the enquired file(artifact) from the selected suite.
suiteUuid - The UUID of the suitetype - "APP_CONTEXT" | "GENERAL_USER_STORIES" | "USER_STORIES" | "PLAYWRIGHT_CODE" | "PROJECT_CONTEXT"identifier - Identifier of the test case to fetch Playwright code for, ex. US003:TC004Example Usage:
Fetch user stories for the latest suiteThese tools are used to update or set certain files(artifacts) for a specific suite. suiteUuid, type and content is required.
#### wopee_update_artifact
Updates/replaces existing file(artifact) for a specific suite
suiteUuid - The UUID of the suitetype - "APP_CONTEXT" | "GENERAL_USER_STORIES" | "USER_STORIES" | "PLAYWRIGHT_CODE" | "PROJECT_CONTEXT"content - Markdown content for app context, general user stories and project context, structured JSON for user storiesidentifier - Identifier of the test case to fetch Playwright code for, ex. US003:TC004Example Usage:
Update app context file for the most recent suite with this content: <YourMarkdown>#### wopee_dispatch_agent
Dispatches an autonomous testing agent to execute test cases for a selected suite. Tests run asynchronously (typically 1-3 minutes). This tool confirms dispatch and returns tracking info — not final results.
suiteUuid - The UUID of the suite containing the test casesanalysisIdentifier - The analysis identifier for the suitetestCases - Array of test case objects to execute, each containing:testCaseId - The ID of the test caseuserStoryId - The ID of the associated user storywopee_fetch_recent_executions or wopee_fetch_executed_test_cases to check results later.Example Usage:
Dispatch agent for my latest suite's user story US001 and test case TC003#### wopee_fetch_recent_executions
Fetches the most recent test case executions for the current project (up to 20, newest first). Use this to quickly check the status of recently dispatched tests without needing to remember specific suite UUIDs.
WOPEE_PROJECT_UUID from environment)Example Usage:
What's the status of my recent test runs?How did my tests go?#### wopee_fetch_executed_test_cases
Fetches executed test cases and their results for a given analysis suite. Use this to check the status and reports of dispatched agent runs.
suiteUuid - The UUID of the analysis suite to fetch results foranalysisIdentifier _(optional)_ - Analysis identifier to narrow results (e.g. A068)Example Usage:
Fetch test results for suite <suiteUuid>Show me the executed test cases for my latest analysis suitewopee_fetch_analysis_suites to see existing suites, ORwopee_dispatch_analysis to create a new suitewopee_generate_artifact with APP_CONTEXT and specific suiteUuidwopee_generate_artifact with GENERAL_USER_STORIES and specific suiteUuidwopee_generate_artifact with USER_STORIES_WITH_TEST_CASES and specific suiteUuidwopee_generate_artifact with REUSABLE_TEST_CASES and specific suiteUuidwopee_generate_artifact with REUSABLE_TEST_CASE_STEPS and specific suiteUuidwopee_generate_artifact with TEST_CASE_STEPS and specific suiteUuidwopee_dispatch_agent to execute test cases with the autonomous testing agentwopee_fetch_recent_executions to quickly check status of recent test runswopee_fetch_executed_test_cases to check detailed status and reports for a specific suitefetch-test-results prompt for a formatted summary of all test resultsfetch-project-summaryFetches analysis suites and their user stories/test cases, then displays a formatted summary with two markdown tables: a suite overview and a detailed test case breakdown.
fetch-test-resultsFetches analysis suites and their executed test case results, then displays formatted markdown tables showing execution status, agent report status, and code report status for each test case. Also surfaces failed report details.
suiteUuid. Always start by fetching or creating a suite.wopee_dispatch_analysis tool will go through whole cycle of processing - crawling the application and generating all of the files(artifacts) one by one.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.