Saucebox Registry
← Browse

@yaodub/server

A

MCP server package @getcast/server

mcp_servermcp

Install

agr install @yaodub/server --target claude

This artifact does not publish files for Claude.

Document

{ "name": "@getcast/server", "version": "0.3.0", "description": "Cast server — routes messages to Claude agents in containers", "type": "module", "main": "dist/index.js", "exports": { ".": "./dist/index.js", "./admin": "./src/admin/index.ts", "./admin/schemas": "./src/admin/schemas.ts" }, "scripts": { "build": "tsc", "start": "node dist/index.js", "dev": "tsx watch src/index.ts", "typecheck": "tsc --noEmit", "format": "prettier --write "src//*.ts"", "format:check": "prettier --check "src//.ts"", "test": "vitest run", "test:watch": "vitest", "cli": "tsx src/cli.ts", "tui": "tsx src/tui.ts", "sync:snapshots": "curl -fsS 'https://api.getcast.dev/api/models?current=snapshot' -o snapshots/models.json && curl -fsS 'https://api.getcast.dev/api/updates?current=snapshot' -o snapshots/version.json" }, "dependencies": { "@getcast/admin-schema": "workspace:", "@getcast/agent-schema": "workspace:", "@getcast/ext-calendar": "workspace:", "@getcast/ext-email": "workspace:", "@getcast/ext-web-fetch": "workspace:", "@getcast/ext-whatsapp": "workspace:", "@getcast/extension-schema": "workspace:", "@clack/prompts": "^1.0.1", "@mariozechner/pi-tui": "^0.53.0", "@modelcontextprotocol/sdk": "^1.26.0", "@slack/bolt": "^4.7.2", "@trpc/server": "^11.16.0", "archiver": "^7.0.1", "better-sqlite3": "^11.8.1", "chalk": "^5.6.2", "chokidar": "^5.0.0", "cli-highlight": "^2.1.11", "cookie-parser": "^1.4.7", "cors": "^2.8.6", "cron-parser": "^5.5.0", "dotenv": "^16.4.7", "express": "^5.2.1", "grammy": "^1.40.0", "imapflow": "^1.0.174", "istextorbinary": "^9.5.0", "js-tiktoken": "^1.0.18", "mailparser": "^3.7.2", "mime": "^4.1.0", "nodemailer": "^6.10.1", "pino": "^9.6.0", "ws": "^8.19.0", "zod": "^4.3.6" }, "devDependencies": { "@types/archiver": "^7.0.0", "@types/better-sqlite3": "^7.6.12", "@types/cookie-parser": "^1.4.10", "@types/cors": "^2.8.19", "@types/express": "^5.0.6", "@types/mailparser": "^3.4.5", "@types/node": "^22.10.0", "@types/nodemailer": "^6.4.17", "@types/ws": "^8.18.1", "@vitest/coverage-v8": "^4.0.18", "pino-pretty": "^13.0.0", "prettier": "^3.8.1", "tsx": "^4.19.0", "typescript": "^5.7.0", "vitest": "^4.0.18" }, "engines": { "node": ">=20" } }

Trustgrade A

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • passLicense

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-d433af2fd3f02026-08-06