Grokbot Mcp

Local MCP server that lets MCP clients (Claude Code, etc.) message your Grok Bot agents via Cursor BDK. macOS & Windows.

View source ↗

Caution: review the findings below before installing.

CautionScan verdict · score 62/100
Coverage
full
Checks run
Rule-based pattern scan
Files checked
14
Findings
4
Scanned
2026-11-01

Badges are rule-based checks, not guarantees: Safe means our rules found no obvious threat in the code we could read. Review code before installing.

View source ↗
Botlens score · 8 factors
62/100

Each factor is 0, ½ or 1, computed only from catalog fields (scan result, coverage, findings, script files, commit/SHA, author, last seen, install link). A heuristic summary, not a guarantee.

Scan verdict0.5/1Caution
Code coverage1/1full
Rule findings0/15 matched
No executable scripts0/15 script file(s) of 14
Pinned source1/1commit/SHA-256 recorded
Named author1/1initcatcher
Recently seen1/1last seen 2026-10-30
Install path0.5/1source URL only

Scan details

Findings
  • reads environment variables (where API keys live) in scripts/grokbot-mcp.mjs: "…ess.loadEnvFile(ENV_FILE); const PORT = process.env.GROKBOT_MCP_PORT || "3790"; const MCP_U…"
  • spawns shell commands or evaluates code in scripts/grokbot-mcp.mjs: "… import { spawn, spawnSync } from "node:child_process"; import { randomBytes } from "node:cry…"
  • installs persistence (cron/launch agent/shell rc) in scripts/grokbot-mcp.mjs: "…ath = () => join(homedir(), "Library", "LaunchAgents", `${LABEL}.plist`); const vbsPath = ()…"
  • uploads data to a remote server in scripts/grokbot-mcp.mjs: "…talled"}`); try { const r = await fetch(MCP_URL, { method: "POST", signal: AbortSignal.timeout(3000) });…"
Content SHA-256
937c03189d2250e2…
Commit
f5f2717d41
Files
.gitignore
.npmignore
AGENTS.md
LICENSE
README.md
package-lock.json
+8

About

Author
initcatcher ↗
Listed on
github ↗
Category (approx.)
agentops
First seen
2026-10-30
Last seen
2026-10-30
URL
github.com ↗
Get the Botlens skill