Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"wokelo": {
"args": [
"-y",
"mcp-remote@latest",
"https://mcp.wokelo.ai/mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Company and market intelligence, news, enrichment, and agentic workflows for dealmakers.
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@github/copilot' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories — click any category to see the underlying evidence.
GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor
## Summary A security vulnerability has been identified in GitHub Copilot CLI where a malicious bare git repository nested inside a project directory can achieve arbitrary code execution when the agent performs git operations. By exploiting git's automatic bare repository discovery during directory traversal, an attacker can set `core.fsmonitor` or other executable config keys to run arbitrary commands without user awareness or approval. ## Details Git supports bare repositories — repositorie
GitHub Copilot CLI Dangerous Shell Expansion Patterns Enable Arbitrary Code Execution
## Summary A security vulnerability has been identified in GitHub Copilot CLI's shell tool that could allow arbitrary code execution through crafted bash parameter expansion patterns. An attacker who can influence the commands executed by the agent (e.g., via prompt injection through repository files, MCP server responses, or user instructions) can exploit bash parameter transformation operators to execute hidden commands, bypassing the safety assessment that classifies commands as "read-only."
This server is missing a description. Tools and install config are also missing.If you've used it, help the community.
Add informationBe the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in other
MCP server for Spanning Cloud Backup — M365/GWS/Salesforce backups, restores, audit.
AI agent control of 3D printers — 432 tools for OctoPrint, Moonraker, Bambu, Prusa, Elegoo
MCP server for Kaseya Autotask PSA — companies, tickets, projects, time entries, and more.
On-chain provenance lookup for AnchorRegistry. Resolve AR-IDs, hashes, and full trees. Authless.
MCP Security Weekly
Get CVE alerts and security updates for io.github.Wokelo-AI/wokelo-mcp-server and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Dealmaking research for AI assistants - company intelligence, transaction data, and research deliverables via MCP.
The problem with AI assistants for dealmaking research
You are likely already using an AI assistant - Claude, ChatGPT, Copilot, or similar. But every one of them shares the same core limitations: training data with a cutoff date, no access to premium sources, a reliance on web search that surfaces the same SEO-optimized headlines everyone else sees, and the need for constant back-and-forth prompting just to get to a usable result.
How Wokelo MCP supercharges your existing tools
Wokelo MCP is built to solve every one of those limitations for dealmaking research - bundled premium subscriptions, a native company and transactions database, zero hallucination, a proprietary news algorithm to surface signals your competitors aren't seeing, and a single query that delivers a finished deliverable without you staying in the loop.
| Generic AI assistant | Wokelo MCP | Relevant for | |
|---|---|---|---|
| Company data | Open web + training data with a cutoff date; misses emerging or less-covered players | 100M+ entity-resolved company database queried directly | Company discovery & enrichment |
| Premium sources | Inaccessible, requires separate subscriptions | 30+ pre-integrated premium sources, bundled | Company research |
| Transaction data | No native deal database | Exhaustive fundraises + M&A database; every acquirer/target entity-resolved | Deal & M&A research |
| Signal quality | Web search returns SEO-optimized headlines, the same results everyone else sees | Proprietary news algorithm surfaces hidden signals not biased by headlines | Company discovery, research, monitoring & alerts |
| Source integrity | Source credibility unpredictable; no deduplication or entity resolution | Thousands of verified global publishers; deduplicated, entity-resolved | Monitoring & alerts |
| Accuracy | 10-40% hallucination rate on structured queries; compounds with list length | Zero hallucination, every data point source-verified | End-to-end dealmaking research |
| Bulk enrichment | Manual re-prompting every 20-25 rows; credits exhausted across sequential calls | Full list enriched in a single MCP call | Company enrichment |
| Output format | Raw links or text requiring human synthesis; never client-ready | Structured briefing or finished PDF/PPT in your firm's template | Research deliverables |
| Methodology | Cannot codify or consistently apply firm-specific frameworks | Firm methodology codified once; applied consistently on every run | Research deliverables |
| Workflow | Requires active involvement throughout | Trigger and pick up the finished deliverable asynchronously | Research deliverables |
Wokelo MCP is a hosted remote server. No local installation required. Connect using the server URL and authenticate once via browser.
Server URL:
https://mcp.wokelo.ai/mcp
Transport: Streamable HTTP Authentication: OAuth 2.0 with Dynamic Client Registration (browser-based login on first connection)
Claude Desktop connects to remote OAuth servers through its built-in Connectors UI:
https://mcp.wokelo.ai/mcpNote: Remote MCP servers with OAuth authentication are added through the Connectors UI, not through the
claude_desktop_config.jsonfile. This is by design in Claude Desktop.
Run the following in your terminal:
claude mcp add --transport http wokelo https://mcp.wokelo.ai/mcp
Then open a Claude Code session and run /mcp to complete the OAuth authentication flow. Your