pCloud MCP — hostable storage for Grok / Grokbot iOS

Hostable MCP server for pCloud storage so Grok, Grokbot iOS, Claude and other MCP clients can browse, read, write and share files.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 50/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
18
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
50/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/16 matched
No executable scripts0/18 script file(s) of 18
Pinned source1/1commit/SHA-256 recorded
Named author0/1unknown
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • installs a third-party MCP server (tool-poisoning vector): "…t Grokbot iOS Ask the bot to add a custom remote MCP server at `https://YOUR_HOST/mcp`, then complete …"
  • reads environment variables (where API keys live) in src/config.ts: "…lue = value.slice(1, -1); } if (process.env[key] === undefined) process.env[key] = …"
  • reads environment variables (where API keys live) in src/http.ts: "…erUrl.hostname !== "127.0.0.1") { process.env.MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_U…"
  • reads environment variables (where API keys live) in src/index.ts: "…urn process.argv.includes("--stdio") || process.env.TRANSPORT === "stdio"; } async functio…"
Content SHA-256
cd5c83b087dd4883…
Commit
22154556c6
Files
.dockerignore
.gitignore
Dockerfile
LICENSE
README.md
docker-compose.yml
+12

About

Author
rghrb ↗
Listed on
github:RongleCat/awesome-grok-bot ↗
Category (approx.)
agentops
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill