QAmcp
GitHub
NewYour score can change any day. QAmcp Monitor keeps testing your server and emails you when it breaks. Free for 1 server.See what Monitor does →

Directory / co.build

co.build

by co.build · https://co.build/mcp

Open-source mods for the devices you own, with owner reports on what works.

23 tools✓ no account neededPricing: not listed
Visit website
86 /100
PASS · WITH NOTES

12 of 12 checks · 5 Nov 2026

Test it now for current results

At a glance

Runs where
On their server. What you send to it goes to them.
What you need
Nothing: it answered without a login
Tools
23 tools
Its own safety labels
11 read-only, 5 labeled as deleting or destroying, 7 labeled as changing things
Memory it takes
About 11,500 tokens of your AI's memory, just for its tool descriptions
Largest answer
About 41.7 KB in our test
Tools that look alike
1 pair of tools with nearly the same description, so the AI may pick the wrong one
Speed
Average answer in our test: 706 ms

Tokens are an estimate: the characters in its tool names, descriptions and inputs, divided by 4. The exact number depends on your AI model. Safety labels are what the server says about itself. From our latest test, 5 Nov 2026.

Is co.build MCP server safe?

A test can only see what the server shows from outside, not what it does with your data behind the scenes. Connect servers from makers you trust.

What this test does not check

What QAmcp can and can't see · How to tell if an MCP server is safe · Hidden instructions · Prompt injection

Known security advisories

It lists no public code, so there is nothing to look up in GitHub Security Advisories or OSV.dev. QAmcp tests how a server behaves. It does not scan source code.

What it can do

23 tools, in the server's own words.

prepare_installation_report

After setup, ask the owner whether they want to share before preparing a sanitized draft.

publish_installation_report

Publish the saved installation report preview under the connected user's public co.build account.

prepare_feedback

After the owner has actually used a mod and agreed to leave feedback, prepare a private preview of a public post on its co.build page.

publish_feedback

Post the saved feedback preview under the connected user's public co.build account.

get_review_task

Defenders: a volunteer malware check of one whole mod co.build lists.

submit_review

Submit your check of a get_review_task task before its lease expires.

report_review_usage

After the main session submits one whole-mod review, report exact usage summed across its reviewing subagents: taskId, inputTokens (uncached), outputTokens, ca…

release_review_task

Ends your own unsubmitted get_review_task lease now, without a verdict, so the mod goes back in the pool.

submit_install_check

Every install reads the code first.

get_my_devicesread-only

Read the connected user's private saved devices, including typed-in devices, together with devices from their approved installation reports.

get_my_installationsread-only

Read the connected user's current, public installation reports for follow-up or correction, and to recognize mods they use.

withdraw_installation_report

After the user explicitly asks to withdraw this report, remove its public feedback and installation count and cancel pending email follow-ups.

schedule_installation_followup

Schedule one installation check-in email for 1–72 hours from now, only after the user explicitly requests or agrees to that email.

cancel_installation_followup

Permanently cancel the connected user's pending installation check-in email at their explicit request.

get_installation_statsread-only

Public distinct-owner counts for a catalog mod.

searchread-only

Find devices and public-source mods by device name, model, feature, or project name.

get_top_modsread-only

Answer what's most popular or rising, as co.build/top ranks it: across all devices, for one kind of device (categoryId, from the returned categories) or for th…

fetchread-only

Read a device or mod found by search.

get_deviceread-only

List a device's models, available and requested features, curated picks and public mods.

get_modread-only

Get a mod's source, license, maintenance status, model and platform support, caveats, subscription needs and documented setup.

get_feedbackread-only

Check real community experience before recommending a mod.

prepare_report_linkread-only

After the user reports a setup outcome, prepare a co.build form link for them to review and submit.

compare_modsread-only

Compare up to four shortlisted mods in one call.

Test results

Safe mode: only tools labeled read-only were run. How the test works

Test it yourself

Free and open source. Same checks, same score.

npx qamcp-cli https://co.build/mcp

Show this score on GitHub

Free for every server in the directory. Paste this into your README: the badge shows the score from our latest test.

QAmcp badge for co.build

[![QAmcp score](https://qamcp.dev/s/build-co-cobuild.svg)](https://qamcp.dev/s/build-co-cobuild.html)

Score over time

One test so far. New tests will show here.

Reviews

Coming soon: reviews from people who use co.build, signed in with GitHub, one per person. Reviews never change the score.

Is this your server? Get an alert the moment it breaks.

QAmcp Monitor tests it every hour and emails you when it goes down, the score drops, a tool changes or a secret leaks. Free for 1 server, no card.

Have a concern, or want it removed? Ask us and we'll take it off the list. How the directory works