← Back to search

1Claw Vault

1clawAI Scanned 14d ago

MCP server for the 1claw secrets vault — lets AI agents fetch, store, and manage secrets at runtime

MCP Registry ↗ npm ↗
B
84 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 1

list_secrets
annotations: none low

List secret names in the local vault. Values are never exposed.

parameters object

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 20

low
Tool 'list_secrets' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @hono/node-server@1.19.13 (GHSA-frvp-7c67-39w9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-54fx-42gc-7vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-79qm-7rj5-m7r9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-hvrm-45r6-mjfj) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-w62v-xxxg-mg59) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.25 (GHSA-xgm2-5f3f-mvvc) dependency_analyzer · 95%
medium
Buffer.from base64 in 1clawAI-1claw-mcp-d1c311c/src/client.ts:81 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: list_secrets manifest_parser · 75%
info
Required env vars (19) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 263 components sbom_generator · 100%
high
Authorization Bearer Token found in 1clawAI-1claw-mcp-d1c311c/README.md secret_scanner · 70%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%