Is io.carbone/carbone-mcp safe to use?

io.carbone/carbone-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.carbone/carbone-mcp?

io.carbone/carbone-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with io.carbone/carbone-mcp?

io.carbone/carbone-mcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio and sse and http transport.

Is io.carbone/carbone-mcp actively maintained?

io.carbone/carbone-mcp is actively maintained — last commit was 6 days ago.

io.carbone/carbone-mcp

Generate PDF/DOCX/XLSX/PPTX from templates+JSON. Convert Office/HTML/MD to PDF. Universal templating

ActiveNot tested

Writing

npm GitHub

54No CVEsactive

Quick Install

{
  "mcpServers": {
    "carbone": {
      "env": {
        "CARBONE_API_KEY": "your_api_key_here"
      },
      "args": [
        "-y",
        "carbone-mcp"
      ],
      "command": "npx"
    }
  }
}

Setup guide

Should you use this server?

Generate PDF/DOCX/XLSX/PPTX from templates+JSON. Convert Office/HTML/MD to PDF. Universal templating

✓

Is it safe?

No known CVEs for carbone-mcp.

No authentication — any process on your machine can connect.

License not specified.

✓

Is it maintained?

Last commit 6 days ago.

Will it work with my client?

Transport: stdio, sse, http. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y 'carbone-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Score Breakdown

MCPpedia Score

Click each category to see evidence

54C

Last scored 19h ago

How we score →

Security

20/30

No known vulnerabilities.

✓

Known CVEs — No known CVEs for carbone-mcpcheck OSV.dev

○

Tool safety — No tools to analyze

○

Tool poisoning — No tools to analyze

○

Injection vectors — No tools to analyze

✓

Tool stability — Tool definitions stable

○

Dependency health — found on deps.dev, recently updated

✗

License — No license specified

○

Authentication — No authentication required

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

○

Repository — active repo

CVEs checked daily via OSV.dev. Score algorithm is open source.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-carbone-carbone-mcp)](https://mcppedia.org/s/io-carbone-carbone-mcp)

Reviews

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.carbone/carbone-mcp safe to use?: io.carbone/carbone-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.carbone/carbone-mcp?: io.carbone/carbone-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with io.carbone/carbone-mcp?: io.carbone/carbone-mcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio and sse and http transport.
Is io.carbone/carbone-mcp actively maintained?: io.carbone/carbone-mcp is actively maintained — last commit was 6 days ago.

MCP Security Weekly

Get CVE alerts and security updates for io.carbone/carbone-mcp and similar servers.

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?