← Back to search Server uses network capabilities via: axios, fetch(), httpx, urllib Server uses filesystem capabilities via: fs, fs sync ops, open(), os, path, pathlib Server uses shell capabilities via: child_process, execSync() Server uses env_vars capabilities via: os.environ, process.env
@abgov/adsp-sdk-mcp-server
Government of Alberta - MCP server for ADSP documentation and Node SDK reference lookup.
npm
? Not scanned yet
Versions
1.10.0latestJul 29, 2026
1.9.0Jul 29, 2026
1.8.0Jul 28, 2026
1.7.2Jul 24, 2026
1.7.1Jul 24, 2026
+ show 11 moreshow less
1.7.0Jul 22, 2026
1.6.0Jul 21, 2026
1.5.0Jul 21, 2026
1.4.0Jul 20, 2026
1.3.1Jul 8, 2026
1.3.0Jul 8, 2026
1.2.0Jul 7, 2026
1.1.0Jul 6, 2026
1.0.0Jul 6, 2026
0.0.1Jul 6, 2026
0.0.0Jul 6, 2026
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 74
high
Hardcoded OAuth client secret in GovAlta-adsp-monorepo-8a07b21/libs/adsp-py-common/adsp_py_common/constants.py
high
Hardcoded OAuth client secret in GovAlta-adsp-monorepo-8a07b21/apps/form-gateway/src/address/router.spec.ts
high
Hardcoded OAuth client secret in GovAlta-adsp-monorepo-8a07b21/apps/agent-service/src/agent/configuration/mcpCredentials.spec.ts
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 182 direct dependencies
medium
Suspicious package name: express-healthcheck
medium
Suspicious package name: express-session
medium
Suspicious package name: express-validator
medium
Suspicious package name: react-components
medium
Suspicious package name: react-dom
medium
Suspicious package name: react-dotenv
medium
Suspicious package name: react-is
medium
Suspicious package name: react-markdown
medium
Suspicious package name: react-redux
medium
Suspicious package name: react-refresh
medium
Suspicious package name: react-tooltip
medium
Vulnerable dependency: @keycloak/keycloak-admin-client@23.0.7 (GHSA-r8jr-wg88-fq5c)
medium
Vulnerable dependency: dompurify@3.4.12 (GHSA-55q2-fjhq-7xh7)
medium
Vulnerable dependency: protobufjs@8.6.0 (GHSA-j3f2-48v5-ccww)
medium
Vulnerable dependency: protobufjs@8.6.0 (GHSA-jfj6-75fj-8934)
medium
Vulnerable dependency: qs@6.15.2 (GHSA-4mjr-xmp4-gh2g)
medium
Vulnerable dependency: qs@6.15.2 (GHSA-x5fp-wj9c-mxmx)
medium
Vulnerable dependency: validator@13.12.0 (GHSA-9965-vmph-33xx)
medium
Vulnerable dependency: validator@13.12.0 (GHSA-vghf-hv5q-vc2g)
medium
Vulnerable dependency: @babel/core@7.14.5 (GHSA-4x5r-pxfx-6jf8)
medium
Vulnerable dependency: moment@2.29.1 (GHSA-8hfj-j24r-96c4)
medium
Vulnerable dependency: moment@2.29.1 (GHSA-wc69-rhjr-hc9g)
medium
Vulnerable dependency: underscore@1.13.6 (GHSA-qpx9-hpmf-5gmw)
medium
Vulnerable dependency: yaml@2.4.2 (GHSA-48c2-rrv3-qjmp)
medium
Vulnerable dependency: ajv@8.6.1 (GHSA-2g4f-4pwh-qvx6)
medium
Vulnerable dependency: webpack@5.92.0 (GHSA-38r7-794h-5758)
medium
Vulnerable dependency: webpack@5.92.0 (GHSA-4vvj-4cpr-p986)
medium
Vulnerable dependency: webpack@5.92.0 (GHSA-8fgc-7cc6-rx7x)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-35jp-ww65-95wh)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-42h9-826w-cgv3)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-654m-c8p4-x5fp)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-777c-7fjr-54vf)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-7q8q-rj6j-mhjq)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-898c-q2cr-xwhg)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-f4gw-2p7v-4548)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-gcfj-64vw-6mp9)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-hcpx-6fm6-wx23)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-hfxv-24rg-xrqf)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-j5f8-grm9-p9fc)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-jqh4-m9w3-8hp9)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-mmx7-hfxf-jppx)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-mwf2-3pr3-8698)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-p92q-9vqr-4j8v)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-pjwm-pj3p-43mv)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-pmv8-rq9r-6j72)
medium
Vulnerable dependency: axios@1.15.2 (GHSA-xj6q-8x83-jv6g)
medium
Vulnerable dependency: lodash@4.17.23 (GHSA-f23m-r3pf-42rh)
medium
Vulnerable dependency: lodash@4.17.23 (GHSA-r5fr-rjxr-66jc)
medium
Hex string literal (>50 chars) in GovAlta-adsp-monorepo-8a07b21/apps/tenant-management-webapp/src/app/pages/admin/services/feedback/feedback/feedbacks.spec.tsx:41
medium
Hex string literal (>50 chars) in GovAlta-adsp-monorepo-8a07b21/apps/tenant-management-webapp/src/app/pages/admin/services/feedback/feedback/feedbacks.spec.tsx:55
medium
Buffer.from base64 in GovAlta-adsp-monorepo-8a07b21/apps/cache-service/src/redis.ts:98
medium
Buffer.from base64 in GovAlta-adsp-monorepo-8a07b21/apps/agent-service/src/agent/workspace/managedWorkspace.ts:270
medium
Buffer.from base64 in GovAlta-adsp-monorepo-8a07b21/.github/scripts/unit-test-agent.js:567
medium
Buffer.from base64 in GovAlta-adsp-monorepo-8a07b21/.github/scripts/unit-test-agent.js:584
medium
Buffer.from base64 in GovAlta-adsp-monorepo-8a07b21/libs/core-common/src/cursor.ts:4
info
package.json metadata
info
Transport: stdio
info
Required env vars (35)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 3876 components
high
Hardcoded Password found in GovAlta-adsp-monorepo-8a07b21/apps/calendar-service/knexfile.js
high
Hardcoded Password found in GovAlta-adsp-monorepo-8a07b21/apps/task-service/knexfile.js
high
Hardcoded Password found in GovAlta-adsp-monorepo-8a07b21/apps/comment-service/knexfile.js
high
Hardcoded Password found in GovAlta-adsp-monorepo-8a07b21/apps/value-service/knexfile.js
medium
No build provenance detected (SLSA L0)