xenon-widgets

Install

npx -y xenon-mcp@1.0.0

Built for

Any MCP client. Works as a standard MCP server, so it can be added to any MCP client, including Claude, Cursor and Codex. Based on the listing description and package type. This is not a certification from those products.

Transports: stdio.

Links

• Repository
• npm package xenon-mcp
• Registry record

Other

Audit report

Tested by AddonAudit.

Sandbox handshake completed, with warnings: license.

Automated smoke test, not a security guarantee.

Version

1.0.0

Audited

2 Nov 2026

Package

npm xenon-mcp

Advisories

0 critical, 0 high, 0 medium, 0 low

Time to ready

34 ms

Network

Disabled

• Pass Version. Pinned npm xenon-mcp@1.0.0
• Pass Known vulnerabilities. No critical, high, or medium advisories were returned.
• Warn License. The package license field says “SEE LICENSE IN LICENSE”. No recognized SPDX license id.
• Pass Install scripts. No preinstall, install, postinstall, or prepare script.
• Pass Credential patterns. No credential patterns in the published artifact.
• Pass Package size. 30.9 KB
• Pass Maintainer activity. Active 3 days ago.
• Pass Sandbox. MCP handshake completed. 9 tools listed. Tool count measured offline in our sandbox; some servers load more tools when connected.

Tools

• xenon_status Check that Xenon is running on this computer and ready for widgets: its version, the Widget SDK version, whether community widgets are on and whether a dashboard is open. Call it first.
• sdk_reference Read the Xenon Widget SDK reference: the manifest, the message protocol, data streams, actions, storage, sizing and the sandbox rules. With no section you get the table of contents. Read it before writing a widget.
• new_widget Write a working starter widget (manifest, HTML, CSS, JS showing live CPU and memory) into a new or empty folder. Edit it from there, then install_widget.
• check_widget Run the checks Xenon runs before installing, without installing: the package rules, what the sandbox will refuse (inline scripts, remote code, hosts) and the Store's review notes.
• install_widget Install or update the widget from its folder put it on the dashboard and show its page (a new page when the one in view is full). Permissions it asks for still wait for the person to approve them on the dashboard. Then call widget_issues an
• widget_issues What went wrong in an installed widget while it ran: errors and console.error lines, requests the sandbox blocked, whether its permissions are approved, and how heavy it is. Errors thrown in widget code show as "Script error." because of th
• widget_screenshot A picture of the widget's tile as it is on screen now. Anything on top of the dashboard shows too. Not available on Linux under Wayland.
• my_widgets List the widgets the person made (not Store downloads). With an id and a folder, write that widget's files into the folder to keep working on it.
• share_widget A share code for one of the person's own widgets, which anyone can paste into Xenon, plus the Store review notes. To put it in the Store the person sends it from xenon-app.com/submit.

Raw audit JSON

Metadata checks

• Repository activity: Active in the last 180 days
• License: No recognized SPDX id
• Metadata quality: High

Score 70 uses public metadata only. It is separate from the audit tier. Payment never changes a score. How listings are checked.