grok-build-mcp-server — Grok CLI as MCP tools

TypeScript MCP server that wraps the xAI Grok Build CLI ( grok -p ) so any MCP client can query Grok with your existing login.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
19
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/15 matched
No executable scripts0/113 script file(s) of 19
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • installs a third-party MCP server (tool-poisoning vector): "… claude mcp add grok-build -- npx -y @talabisaac/grok-build-mcp-server ``` Or add it manuall…"
  • reads environment variables (where API keys live) in src/utils/commandExecutor.ts: "…ve with its trimmed stdout. * * `env: process.env` is intentional and load-bearing: it fo…"
  • spawns shell commands or evaluates code in src/utils/commandExecutor.ts: "…import { spawn } from 'child_process'; import { Logger } from './logger.js';…"
  • reads environment variables (where API keys live) in src/utils/grokExecutor.ts: "…nction grokCommand(): string { return process.env.GROK_CLI_PATH || CLI.COMMANDS.GROK; } …"
Content SHA-256
78ae4d1fbc76f584…
Commit
b76f4c14f0
Files
.gitignore
LICENSE
README.md
package-lock.json
package.json
tsconfig.json
+13

About

Author
a3lab01create-bit ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
coding
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill