0.2.0npm · fidgetcoding-refero-mcp · latest release
Observed 2026-08-17T09:39:31.379Z using mcpSecurity-inventory. Protocol 2025-06-18.
| Tool | Category | Risk |
|---|---|---|
refero_design_mdRender a Refero style as an agent-friendly DESIGN.md (frontmatter, north star, color table, fonts, dos/donts, tags). When `save_to_project` is set, writes the file to <vault>/05-Projects/<NAME>/DESIGN.md.Input schema{
"type": "object",
"properties": {
"identifier": {
"type": "string",
"description": "uuid, hostname/URL, or site name to render."
},
"save_to_project": {
"type": "string",
"description": "Vault project folder name (e.g. \"PARZVL\"). Sanitized; must be [A-Za-z0-9_.-]."
}
},
"required": [
"identifier"
],
"additionalProperties": false
} | — | — |
refero_facetsDiscover what the catalog actually contains: ranked font stacks, color names, and theme counts. Call this BEFORE guessing search terms — the catalog has no tag taxonomy, so invented tags match nothing, while any font or color returned here can be passed straight to refero_search as a query.Input schema{
"type": "object",
"properties": {
"theme": {
"type": "string",
"enum": [
"light",
"dark"
],
"description": "Restrict the facet counts to light- or dark-themed sites."
},
"limit": {
"type": "number",
"description": "How many font and color values to return (default 25, max 100)."
}
},
"additionalProperties": false
} | — | — |
refero_getFetch the full design system for a single style. Accepts a uuid, a hostname/URL (e.g. cursor.com), or a site name (e.g. "Cursor"). Fuzzy-matches site names within Levenshtein distance 2.Input schema{
"type": "object",
"properties": {
"identifier": {
"type": "string",
"description": "uuid, hostname/URL, or site name."
}
},
"required": [
"identifier"
],
"additionalProperties": false
} | — | — |
refero_listBrowse the local catalog mirror with optional theme/tag filters. Returns paginated, stably-ordered results (newest first, then site name).Input schema{
"type": "object",
"properties": {
"theme": {
"type": "string",
"enum": [
"light",
"dark"
],
"description": "Filter to light- or dark-themed sites only."
},
"tags": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter by tag terms (matched against siteName + northStar in the catalog projection)."
},
"page": {
"type": "number",
"description": "1-indexed page number (default 1)."
},
"limit": {
"type": "number",
"description": "Items per page (default 20, max 50)."
}
},
"additionalProperties": false
} | — | — |
refero_refreshForce a full re-fetch of the styles.refero.design catalog and overwrite the local mirror. Useful after the catalog has changed and you don't want to wait for the 24h TTL.Input schema{
"type": "object",
"properties": {},
"additionalProperties": false
} | — | — |
refero_searchNatural-language search over the styles.refero.design catalog. Returns the top matches scored by an embedding model (when OPENAI_API_KEY is set) or a BM25-lite keyword fallback. The local catalog is mirrored on first call and refreshed automatically every 24 hours.Input schema{
"type": "object",
"properties": {
"query": {
"type": "string",
"description": "Natural-language vibe query, e.g. \"playful neobrutalist saas\"."
},
"theme": {
"type": "string",
"enum": [
"light",
"dark"
],
"description": "Filter to light- or dark-themed sites only."
},
"tags": {
"type": "array",
"items": {
"type": "string"
},
"description": "Filter to styles whose tags / name / northStar mention any of these terms."
},
"limit": {
"type": "number",
"description": "How many results to return (default 10, max 50)."
}
},
"required": [
"query"
],
"additionalProperties": false
} | — | — |
refero_similarRefero's own "similar styles" recommendation list for a given style. Useful for follow-up exploration once you've found a candidate via refero_search.Input schema{
"type": "object",
"properties": {
"identifier": {
"type": "string",
"description": "uuid, hostname/URL, or site name."
},
"limit": {
"type": "number",
"description": "How many similar styles to return (default 10, max 20)."
}
},
"required": [
"identifier"
],
"additionalProperties": false
} | — | — |
Compared with initial baseline using full_baseline.
| Risk | Change | Subject |
|---|---|---|
| No material changes recorded. | ||
| Severity | Finding | Advisory |
|---|---|---|
| No confirmed vulnerability is published for this version. | ||
Artifact SHA-256: bdce37357df943cf3b2e0fe22830808e335589ef3e253ad54e98e9a971ba0e75
Scanner: mcp-proof-engine 0.1.0.