← Browse

@mcowger/plexus-backend

A

MCP server package plexus-backend

mcp_servermcp

Install

agr install @mcowger/plexus-backend --target claude

This artifact does not publish files for Claude.

Document

{ "name": "plexus-backend", "version": "1.0.0", "type": "module", "scripts": { "start": "bun run --cwd ../.. generate:openapi:asset && bun run src/index.ts", "dev": "bun run --cwd ../.. generate:openapi:asset && bun run --watch src/index.ts", "typecheck": "bun x tsc --noEmit", "test": "bun run --cwd ../.. generate:openapi:asset && bun run --cwd ../.. build:frontend:if-needed && bunx --bun vitest run --config vitest.config.ts --changed HEAD", "test:force-all": "bun run --cwd ../.. generate:openapi:asset && bun run --cwd ../.. build:frontend:if-needed && bunx --bun vitest run --config vitest.config.ts", "test:watch": "bun run --cwd ../.. generate:openapi:asset && bunx --bun vitest --config vitest.config.ts", "rekey": "bun run src/cli/rekey.ts", "backup": "bun run src/cli/backup.ts", "generate-migrations": "cd ../.. && bun run scripts/generate-migrations.ts", "lint:migrations": "cd ../.. && bun run scripts/lint-migrations.ts" }, "dependencies": { "@earendil-works/pi-ai": "0.83.0", "@fastify/bearer-auth": "^10.1.2", "@fastify/cors": "^11.3.0", "@fastify/multipart": "^10.1.0", "@fastify/static": "^10.1.2", "@google/genai": "^2.14.0", "@modelcontextprotocol/sdk": "^1.30.0", "@plexus/shared": "workspace:*", "@sinclair/typebox": "^0.34.52", "csv-parse": "^7.0.0", "dotenv": "^17.4.2", "drizzle-orm": "^0.45.2", "drizzle-zod": "^0.8.3", "eventsource-encoder": "^1.0.2", "eventsource-parser": "^3.1.0", "fastify": "^5.11.0", "headroom-ai": "^0.22.4", "js-tiktoken": "^1.0.21", "parse-duration": "^2.1.8", "pkce-challenge": "^6.0.0", "postgres": "^3.4.9", "winston": "^3.19.0", "winston-transport": "^4.9.0", "yaml": "^2.8.4", "zod": "^4.4.3" }, "devDependencies": { "@electric-sql/pglite": "^0.5.3", "@types/bun": "latest", "@types/node": "^26.1.2", "@types/winston": "^2.4.4", "drizzle-kit": "^0.31.10", "form-data": "^4.0.6" } }

Trustgrade A

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • passLicense

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-56898f1386872026-08-06