← Browse

@surgefm/v2land-redstone

A

MCP server package v2land-redstone

mcp_servermcp

Install

agr install @surgefm/v2land-redstone --target claude

This artifact does not publish files for Claude.

Document

{ "name": "v2land-redstone", "private": false, "version": "0.1.0", "license": "MIT", "description": "langchao.org backend service", "scripts": { "build": "node node_modules/gulp-cli/bin/gulp.js build", "prod": "node node_modules/gulp-cli/bin/gulp.js build && NODE_ENV=production node dist/app.js", "start": "node node_modules/gulp-cli/bin/gulp.js server", "dev": "docker-compose rm -v -f && docker-compose build && docker-compose up", "coverage": "make coverage", "mcp": "node dist/mcp.js" }, "dependencies": { "@modelcontextprotocol/sdk": "^1.26.0", "@aws-sdk/client-s3": "^3.997.0", "@aws-sdk/client-ses": "^3.997.0", "@elastic/elasticsearch": "^7.6.1", "@postlight/mercury-parser": "^2.2.1", "@socket.io/redis-adapter": "^7.1.0", "acl": "^0.4.11", "acl-sequelize": "^0.3.5", "algoliasearch": "^4.13.0", "apple-signin-auth": "^1.5.1", "axios": "^0.21.2", "bcrypt": "^5.0.1", "bcryptjs": "^2.4.3", "body-parser": "^1.19.0", "bull": "^4.8.3", "compression": "^1.7.4", "connect-redis": "^6.1.3", "connect-session-sequelize": "^6.1.1", "cors": "^2.8.5", "crypto": "^1.0.1", "crypto-random-string": "^3.0.1", "delay": "^4.3.0", "dotenv": "^8.2.0", "download": "^8.0.0", "exa-js": "^2.4.0", "express": "^4.17.1", "express-pino-logger": "^4.0.0", "express-session": "^1.17.0", "googleapis": "^100.0.0", "ioredis": "^5.0.4", "leancloud-storage": "^4.5.2", "libpq": "^1.8.9", "moment-timezone": "^0.5.27", "multer": "^1.4.2", "nodejieba": "^2.6.0", "nodemailer": "^6.6.1", "nodemailer-express-handlebars": "^3.1.0", "oauth": "^0.9.15", "openai": "^6.24.0", "parse-domain": "^2.3.4", "pg": "^8.0.0", "pg-native": "^3.0.0", "pinyin": "^2.9.0", "redis": "^4.0.6", "response-time": "^2.3.2", "sequelize": "^5.21.3", "sequelize-typescript": "^1.1.0", "serve-favicon": "^2.5.0", "socket.io": "^4.4.1", "socket.io-redis": "^5.2.0", "source-map": "^0.7.4", "swagger-ui-express": "^4.3.0", "unique-string": "^2.0.0", "urlencode": "^1.1.0", "uuid": "^3.3.3", "v2land-url-trimmer": "^0.0.10", "validator": "^13.7.0", "web-push": "^3.6.7", "zod": "^3.25.0" }, "devDependencies": { "@types/bcrypt": "^3.0.0", "@types/bcryptjs": "^2.4.2", "@types/bull": "^3.15.8", "@types/compression": "^1.7.0", "@types/cors": "^2.8.6", "@types/dotenv": "^8.2.0", "@types/download": "^8.0.1", "@types/express": "^4.17.2", "@types/express-pino-logger": "^4.0.2", "@types/express-session": "^1.17.4", "@types/ioredis": "^4.28.10", "@types/mocha": "^7.0.2", "@types/moment-timezone": "^0.5.12", "@types/mongodb": "^4.0.7", "@types/multer": "^1.4.2", "@types/node": "^16.0.0", "@types/nodemailer": "^6.4.0", "@types/oauth": "^0.9.1", "@types/passport": "^1.0.7", "@types/pino-std-serializers": "2.4.1", "@types/pinyin": "^2.8.1", "@types/postlight__mercury-parser": "^2.2.4", "@types/qs": "^6.9.0", "@types/response-time": "^2.3.4", "@types/sequelize": "^4.28.8", "@types/serve-favicon": "^2.5.0", "@types/supertest": "^2.0.8", "@types/urlencode": "^1.1.1", "@types/uuid": "^3.4.6", "@types/validator": "^12.0.1", "@types/web-push": "^3.6.3", "@typescript-eslint/eslint-plugin": "^2.26.0", "@typescript-eslint/parser": "^2.26.0", "eslint": "^6.8.0", "gulp": "^4.0.2", "gulp-develop-server": "^0.5.2", "gulp-sourcemaps": "^2.6.5", "gulp-typescript": "^6.0.0-alpha.1", "husky": "^4.2.3", "mocha": "^7.1.1", "module-alias": "^2.2.2", "nyc": "^15.0.1", "reflect-metadata": "^0.1.13", "source-map-support": "^0.5.16", "supertest": "^4.0.2", "typescript": "^4.6.3" }, "_moduleAliases": { "~": "dist", "@": "dist/src", "@Configs": "dist/config", "@Models": "dist/models", "@Types": "dist/types", "@Utils": "dist/utils", "@Controllers": "dist/api/controllers", "@Policies": "dist/api/policies", "@Services": "dist/api/services", "@Modes": "dist/api/modes", "@Responses": "dist/api/responses", "@Sockets": "dist/sockets", "@MCP": "dist/api/mcp" } }

Trustgrade A

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • passLicense

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-feecde868abd2026-08-06