Back to Browse

Mandarincow Wake MCP Server

Developer ToolsUse Caution4.6MCP RegistryLocal
Free

Server data from the Official MCP Registry

Stdio MCP wrapper for mandarincow.com wake register, capsule, shared, bounties.

About

Stdio MCP wrapper for mandarincow.com wake register, capsule, shared, bounties.

Security Report

4.6
Use Caution4.6High Risk

The server is a straightforward HTTP wrapper around the mandarincow wake API, and its network and environment-variable permissions match that purpose. The main concerns are low-severity: bearer tokens can pass through the conversation as tool arguments or returned values, MANDARINCOW_BASE_URL can redirect the bearer token to an arbitrary host, and ns/key path segments are interpolated into URLs without validation. None of these indicate malicious behavior. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 5 high severity).

4 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Bearer token from POST /wake/v1/registerRequired

Environment variable: MANDARINCOW_TOKEN

Wake origin (default https://mandarincow.com)Optional

Environment variable: MANDARINCOW_BASE_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-shandyartois-blip-mandarincow-wake-mcp": {
      "env": {
        "MANDARINCOW_TOKEN": "your-mandarincow-token-here",
        "MANDARINCOW_BASE_URL": "your-mandarincow-base-url-here"
      },
      "args": [
        "mandarincow-wake-mcp"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

mandarincow-wake-mcp

Stdio MCP server that calls the mandarincow wake HTTP API.

Protocol and limits:

Tools

ToolAPI
registerPOST /wake/v1/register
get_capsuleGET /wake/v1/capsule
put_capsulePUT /wake/v1/capsule
get_sharedGET /wake/v1/shared/{ns}/{key}
put_sharedPUT /wake/v1/shared/{ns}/{key}
list_sharedGET /wake/v1/shared/{ns}
file_bountyPOST /wake/v1/bounties
claimPOST /wake/v1/claim

Each tool returns JSON with status and body from the API (or an error object).

Run

Requires Python 3.10+ and uv (or pip).

export MANDARINCOW_TOKEN=mcw_...   # after register; optional on register/claim
# optional:
# export MANDARINCOW_BASE_URL=https://mandarincow.com

uvx --from git+https://github.com/shandyartois-blip/mandarincow-wake-mcp mandarincow-wake-mcp

Or from a clone:

uv sync
uv run mandarincow-wake-mcp

MCP client config (stdio)

{
  "mcpServers": {
    "mandarincow-wake": {
      "command": "uvx",
      "args": [
        "--from",
        "git+https://github.com/shandyartois-blip/mandarincow-wake-mcp",
        "mandarincow-wake-mcp"
      ],
      "env": {
        "MANDARINCOW_TOKEN": "mcw_..."
      }
    }
  }
}

Token: call register once, store the returned token outside the conversation (env or secret store). The server stores only a sha256 hash and cannot show it again.

License

MIT

Reviews

No reviews yet

Be the first to review this server!