Shokunin
opencode · by EliasOulkadi
職人 Shokunin 62 AI agent skills for OpenCode, Claude Code, Cursor, Windsurf. ChromaDB memory, MCP servers, declarative self-updates. Multi-model, open source, zero cost.
4 open CVEs
MIT license
Actively maintained
Last commit 16d ago
Works with most clients
Transport: stdio, sse
1 tool · ~37 tok
Grade A · 0.0% of 200K ctx
MCPpedia last refreshed this data
This server has been archived and is no longer actively maintained.
Shokunin is an MCP server that 職人 Shokunin 62 AI agent skills for OpenCode, Claude Code, Cursor, Windsurf. ChromaDB memory, MCP servers, declarative self-updates. Multi-model, open source, zero cost. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 59/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients - only the file and path differ.
CD
Supported in Claude Desktopstdio, sse · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"shokunin": {
"args": [
"-y",
"opencode"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/shokunin)
Read me
What Shokunin does
62 engineering skills + persistent AI memory. One command. Zero servers.
Test This Server
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Scored, not listed
Why this score
Five weighted categories - click any category to see the underlying evidence.
Score breakdown
59/100across 5 weighted dimensions
0255075100
14
20
15
10
−41
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev4 open
CVE-2026-45831highCVSS 8.8
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never checks which tenant, database, or collection that permission applies to allowing users to perform cross tenant actions.
Affected:
>= 0.5.0source →CVE-2026-45833high
ChromaDB has a code injection vulnerability
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/default_tenant/databases/default_database/collections/{collection_id} if they have the UPDATE_COLLECTION permission.
Affected:
>= 0.4.17source →CVE-2026-45830highCVSS 8.8
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to.
Affected:
>= 0.4.17source →CVE-2026-45829critical
ChromaDB Python project has a pre-authentication code injection vulnerability
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.
Affected:
>= 1.0.0source →Inventory
Tools (1)
Click any tool to inspect its schema.
~37 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Shokunin safe to use?
- Shokunin has 8 known CVEs tracked by MCPpedia. You can verify these on OSV.dev by searching for "opencode". Review the Security section above for details before installing.
- How do I install Shokunin?
- Shokunin supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can Shokunin do?
- Shokunin provides 1 tool: verify_file_path. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Shokunin?
- Shokunin is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
- Is Shokunin actively maintained?
- Shokunin is actively maintained - last commit was 16 days ago. It has 113 GitHub stars.
Related
Similar servers
Others in ai-ml / data
I
io.github.callstack/agent-device96MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps
5.1k 5
I
io.github.HUANGCHIHHUNGLeo/claude-real-video96Let any LLM watch a video locally — and search everything it has ever watched.
2.2k 6
Modelcontextprotocol96The official MCP server implementation for the Perplexity API Platform
2.6k 4
Dbhub96Token-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite
3.7k 2
MCP Security Weekly
Get CVE alerts and security updates for Shokunin and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.