MCP Server — Connect your AI
Turns your Convoro community into an MCP server so you can connect an AI assistant (Claude or any MCP client) directly to your forum. Generate a personal access token, point your A...
Turns your Convoro community into an MCP server so you can connect an AI assistant (Claude or any MCP client) directly to your forum. Generate a personal access token, point your AI client at your forum's MCP endpoint, and it can search and read discussions, post and reply, send messages, and (if you're a moderator/admin) moderate — all acting as you and limited to what you're allowed to do.
AI security review
✓
Reviewed safe · 94/100
A clean, well-structured MCP server extension using standard Laravel/Sanctum auth with per-user permission gating. No RCE, SQL injection, SSRF, hardcoded credentials, or data exfiltration was found.
- low · Visibility scoping depends on host app — Moderation tools (LockTopic, PinTopic) check user permissions, and write tools check ban status and PostGuard rules. Read tools (GetTopic, SearchTopics, RecentActivity) rely on Topic::visible() scope rather than per-user visibility checks; whether private/restricted topics are fully excluded depends on the host app's visible() implementation, which is not provided here.
- low · HTML sanitization delegated to host — AI-supplied text in CreateTopic/Reply/SendDirectMessage is escaped via e() and passed through App\Support\Content::clean() (host sanitizer) before storage, which is appropriate; effectiveness depends on the host Content::clean implementation, not included here.
Automated review of v1.0.0 by claude-opus-4-8 2 days ago. This is an automated signal to aid your judgment — not a guarantee.