1. Conduid
  2. Security
  3. Flow Otter
MCP server · Security

Flow Otter

by · github.com/jp5lab/flow-otter

MCP server that lets AI agents author Node-RED flows a plant operator can read — computed layout, typed authoring, safety-spine staging and rollback.

Unclaimed ai-agentsdashboard-2mcpmodel-context-protocolnode-rednodejstypescript
InstallView source
34Low

Scored a month ago · breakdown

About Flow Otter

Flow Otter is an MCP server published by jp5lab in the Security category: mCP server that lets AI agents author Node-RED flows a plant operator can read — computed layout, typed authoring, safety-spine staging and rollback.

The repository has 1 stars and 0 forks, with the last commit 5 months ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/jp5lab/flow-otter

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Flow Otter

Powered by Claude · Grounded in docs

I know everything about Flow Otter. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v1.2.0v1.2.0 — Security hardening + non-idempotent-retry guard + correctness audit · 17 May 2026Security hardening + correctness audit. Second-round review pass: closes path-traversal exposure on `set_target`, fixes a subflow-instance authoring bug that left every staged subflow failing validation, eliminates an audit race against…
v1.1.0v1.1.0 — Roundtrip fidelity + config-knob enforcement + tool-ID symmetry · 17 May 2026Correctness pass. The v0.3.0 schema additions (junction, tab `locked`/`env`, group `g`/`info`/`x/y/w/h`, comment `w/h`) were declared in `flows-json.ts` but never propagated through the decompile→compile pipeline, so any author tool…
v1.0.1v1.0.1 — Sealed release · 16 May 2026FlowOtter v1.0.1 — sealed release. v1 is feature-frozen; bug & security fixes only. 60 MCP tools across read / author / deploy / dangerous tiers with byte-identical idempotent compilation, snapshot-before-deploy with hash-drift refusal,…
Questions

About Flow Otter

How do I install Flow Otter?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Flow Otter safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Flow Otter still maintained?

Yes — the latest release is v1.2.0 (17 May 2026), and the last commit was 5 months ago. The repository has 1 stars.