Saucebox Registry
← Browse

@openmake/openmake-api

A

MCP server package openmake-api

mcp_servermcp

Install

agr install @openmake/openmake-api --target claude

This artifact does not publish files for Claude.

Document

{ "name": "openmake-api", "version": "1.21.0", "description": "OpenMake API Server", "main": "dist/server.js", "scripts": { "build": "tsc && npm run copy-agent-data && npm run copy-report-templates && npm run build-info", "copy-agent-data": "mkdir -p dist/agents/data && cp -R src/agents/data/. dist/agents/data/", "copy-report-templates": "mkdir -p dist/report-templates && cp -R src/report-templates/. dist/report-templates/", "build-info": "node ../../scripts/build-info.js", "dev": "ts-node --files src/server.ts", "start": "node dist/server.js", "watch": "tsc --watch", "test": "jest", "test:watch": "jest --watch", "test:coverage": "jest --coverage", "eval:routing": "ts-node src/evaluation/run-evaluation.ts", "eval:routing:strict": "OMK_EVAL_PASS_THRESHOLD=1.0 ts-node src/evaluation/run-evaluation.ts", "eval:response": "ts-node src/evaluation/run-response-evaluation.ts", "eval:citation": "ts-node src/evaluation/run-citation-evaluation.ts", "eval:all": "npm run eval:routing && npm run eval:response && npm run eval:citation" }, "dependencies": { "@anthropic-ai/sdk": "^0.95.1", "@modelcontextprotocol/sdk": "^1.25.3", "@mozilla/readability": "^0.6.0", "@openai-oauth/core": "^2.0.0", "@opendataloader/pdf": "^2.4.7", "@openmake/config": "", "@openmake/shared-types": "", "@opentelemetry/api": "^1.9.1", "@opentelemetry/exporter-trace-otlp-http": "^0.219.0", "@opentelemetry/instrumentation-express": "^0.67.0", "@opentelemetry/instrumentation-http": "^0.219.0", "@opentelemetry/resources": "^2.8.0", "@opentelemetry/sdk-node": "^0.219.0", "@opentelemetry/sdk-trace-node": "^2.8.0", "@opentelemetry/semantic-conventions": "^1.41.1", "@types/pg": "^8.16.0", "axios": "^1.13.2", "babel-jest": "^30.4.1", "bcryptjs": "^3.0.3", "chalk": "^4.1.2", "cli-highlight": "^2.1.11", "commander": "^14.0.3", "cookie-parser": "^1.4.7", "dotenv": "^17.2.3", "express": "^5.2.1", "express-rate-limit": "^8.2.1", "helmet": "^8.1.0", "inquirer": "^13.2.2", "ioredis": "^5.10.1", "js-yaml": "^4.1.1", "jsdom": "^29.0.1", "jsonwebtoken": "^9.0.3", "lru-cache": "^7.18.3", "multer": "^2.0.2", "nodemailer": "^9.0.0", "officeparser": "^7.2.1", "openai": "^6.37.0", "ora": "^9.2.0", "pg": "^8.18.0", "turndown": "^7.2.2", "turndown-plugin-gfm": "^1.0.2", "undici": "^7.24.5", "uuid": "^13.0.0", "web-push": "^3.6.7", "winston": "^3.19.0", "ws": "^8.18.3", "zod": "^4.3.6" }, "devDependencies": { "@types/bcryptjs": "^2.4.6", "@types/cookie-parser": "^1.4.7", "@types/cors": "^2.8.17", "@types/express": "^5.0.6", "@types/inquirer": "^9.0.9", "@types/jest": "^30.0.0", "@types/js-yaml": "^4.0.9", "@types/jsdom": "^28.0.1", "@types/jsonwebtoken": "^9.0.10", "@types/multer": "^2.0.0", "@types/node": "^24.0.0", "@types/turndown": "^5.0.6", "@types/web-push": "^3.6.4", "@types/ws": "^8.18.1", "ts-jest": "^29.4.11", "ts-node": "^10.9.2", "typescript": "^5.3.2" } }

Trustgrade A

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • passLicense

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-3eca1c6fdaed2026-08-06