← Browse

@thomasdavis/cli

B

MCP server package @blahai/cli

mcp_servermcp

Install

agr install @thomasdavis/cli --target claude

This artifact does not publish files for Claude.

Document

{ "name": "@blahai/cli", "version": "0.102.0", "type": "module", "scripts": { "build": "tsup src/index.ts --format cjs,esm --dts && shx mkdir -p dist/mcp/server && shx cp src/mcp/server/start.ts dist/mcp/server/ && shx cp -r src/templates dist/templates", "watch": "tsup src/index.ts --format cjs,esm --dts --watch", "dev": "NODE_ENV=development tsx src/index.ts", "mcp": "NODE_ENV=development tsx src/index.ts mcp", "test": "vitest run --reporter=verbose", "test:watch": "vitest", "lint": "eslint .", "clean": "rm -rf dist", "prepublishOnly": "pnpm run build", "preversion": "pnpm run lint && pnpm run test", "version": "pnpm run build && git add -A", "release": "pnpm run clean && changeset publish", "init": "tsx src/index.ts init", "validate": "tsx src/index.ts validate" }, "bin": { "blah": "./dist/index.js" }, "scripts-info": { "dev": "Run the CLI in development mode with debug logging enabled", "build": "Build the CLI for production use (no debug logging)" }, "main": "./dist/index.js", "module": "./dist/index.mjs", "types": "./dist/index.d.ts", "publishConfig": { "access": "public" }, "engines": { "node": ">=18.0.0" }, "repository": { "type": "git", "url": "git+https://github.com/thomasdavis/blah.git" }, "files": [ "dist", "src/templates" ], "keywords": [ "mcp", "modelcontextprotocol", "agent", "host" ], "author": "Ajax", "license": "MIT", "description": "Barely Logical Agent Host", "dependencies": { "@ai-sdk/openai": "^1.2.5", "@blahai/schema": "0.4.0", "@modelcontextprotocol/sdk": "1.8.0", "ai": "^4.1.61", "axios": "^1.7.8", "boxen": "^7.1.1", "chalk": "^5.4.1", "cli-table3": "^0.6.5", "commander": "^11.1.0", "cors": "^2.8.5", "dotenv": "^16.3.1", "express": "^4.21.2", "node-fetch": "^3.3.2", "openai": "^4.0.0", "pino": "^9.6.0", "pino-pretty": "^13.0.0", "wrap-ansi": "^9.0.0", "zod": "^3.24.2" }, "devDependencies": { "@repo/eslint-config": "workspace:", "@repo/typescript-config": "workspace:", "@types/boxen": "^3.0.5", "@types/cors": "^2.8.17", "@types/express": "^5.0.0", "@types/node": "^22.13.5", "@types/wrap-ansi": "^8.1.0", "shx": "^0.3.4", "ts-node": "^10.9.2", "tsup": "^8.4.0", "tsx": "^4.7.1", "typescript": "^5.7.3", "vitest": "^3.0.8" } }

Trustgrade B

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • warnLicenseno SPDX license detected

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-f93146b426ad2026-08-06