MCP server that serves knowledge about your components based on your Storybook stories and documentation
94%
Total Score
healthy
Frequent releases, active organization-backed development, and strong publication hygiene outweigh minor workflow and monorepo transparency gaps.
The repository name does not match the package and its README does not mention @storybook/mcp, which creates a small package-to-source transparency gap; the organization-backed monorepo context partly compensates for that mismatch.
All 20 workflows were analyzed successfully, all 52 action references are pinned, and no untrusted checkout or script-injection findings were reported. Two high-confidence low-severity adhoc package-install findings remain minor workflow hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tmcp Version ^1.19.4 | — | — |
valibot Version ^1.4.0 | — | — |
@tmcp/transport-http Version ^0.8.5 | — | — |
@tmcp/adapter-valibot Version ^0.1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.