← Back to search

@agentick/mcp

GitHub Actions Scanned 8d ago

MCP server and client for Agentick — standalone, pluggable, world-class

npm ↗
C
70 / 100

Versions

0.15.3latest
Jul 8, 2026
0.15.2
Jul 7, 2026
0.15.1
Jul 2, 2026
0.15.0
Jun 7, 2026
0.14.68
May 19, 2026
+ show 40 moreshow less
0.14.67
May 19, 2026
0.14.66
May 17, 2026
0.14.65
May 14, 2026
0.14.64
May 14, 2026
0.14.63
May 11, 2026
0.14.62
May 7, 2026
0.14.61
May 7, 2026
0.14.60
May 7, 2026
0.14.59
May 5, 2026
0.14.58
May 4, 2026
0.14.57
Apr 30, 2026
0.14.56
Apr 30, 2026
0.14.55
Apr 28, 2026
0.14.54
Apr 28, 2026
0.14.53
Apr 28, 2026
0.14.52
Apr 27, 2026
0.14.51
Apr 23, 2026
0.14.50
Apr 22, 2026
0.14.49
Apr 22, 2026
0.14.48
Apr 21, 2026
0.14.47
Apr 21, 2026
0.14.46
Apr 20, 2026
0.14.45
Apr 20, 2026
0.14.44
Apr 20, 2026
0.14.43
Apr 17, 2026
0.14.42
Apr 17, 2026
0.14.41
Apr 17, 2026
0.14.40
Apr 17, 2026
0.14.39
Apr 16, 2026
0.14.38
Apr 16, 2026
0.14.37
Apr 16, 2026
0.14.36
Apr 16, 2026
0.14.35
Apr 15, 2026
0.14.34
Apr 15, 2026
0.14.33
Apr 15, 2026
0.14.32
Apr 14, 2026
0.14.31
Apr 13, 2026
0.14.30
Apr 13, 2026
0.14.29
Apr 10, 2026
0.14.27
Apr 10, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

alpha
annotations: none low

beta
annotations: none low

test-client
annotations: none low

x number
dynamic-tool
annotations: none low

fail
annotations: none low

x number
greet
annotations: none low

Permissions 5

network medium
Server uses network capabilities via: fetch(), http, ws
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
database medium
Server uses database capabilities via: redis
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 84

low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'fail' has no annotations annotation_checker · 100%
low
Tool 'alpha' has no annotations annotation_checker · 100%
low
Tool 'beta' has no annotations annotation_checker · 100%
low
Tool 'test-client' has no annotations annotation_checker · 100%
low
Tool 'dynamic-tool' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 133 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-reconciler dependency_analyzer · 60%
medium
Vulnerable dependency: turbo@2.8.3 (GHSA-3qcw-2rhx-2726) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.8.3 (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.0.0 (GHSA-3qcw-2rhx-2726) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.0.0 (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.11 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@0.27.3 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Vulnerable dependency: happy-dom@17.0.0 (GHSA-37j7-fg3j-429f) dependency_analyzer · 95%
medium
Vulnerable dependency: happy-dom@17.0.0 (GHSA-6q6h-j7hj-3r64) dependency_analyzer · 95%
medium
Vulnerable dependency: happy-dom@17.0.0 (GHSA-w4gp-fjgq-3q4g) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.0.0 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: @nestjs/core@11.1.13 (GHSA-36xv-jgw5-4q75) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.16.0 (GHSA-3h5v-q93c-6h6q) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.16.0 (GHSA-58qx-3vcg-4xpx) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.16.0 (GHSA-96hv-2xvq-fx4p) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@20.0.0 (GHSA-58w9-8g37-x9v5) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@20.0.0 (GHSA-f3m7-gqxr-g87x) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@20.0.0 (GHSA-g93w-mfhg-p222) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@20.0.0 (GHSA-jj27-h5hq-8x99) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@20.0.0 (GHSA-jrmj-c5cx-3cw6) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/compiler@20.0.0 (GHSA-v4hv-rgfq-gp49) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@20.0.0 (GHSA-692r-grfm-v8x7) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@20.0.0 (GHSA-f3m7-gqxr-g87x) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@20.0.0 (GHSA-g93w-mfhg-p222) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@20.0.0 (GHSA-jj27-h5hq-8x99) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@20.0.0 (GHSA-jrmj-c5cx-3cw6) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@20.0.0 (GHSA-prjf-86w9-mfqv) dependency_analyzer · 95%
medium
Vulnerable dependency: @angular/core@20.0.0 (GHSA-rgjc-h3x7-9mwg) dependency_analyzer · 95%
medium
Buffer.from base64 in agenticklabs-agentick-f27572c/example/express/src/agents/task-assistant.tsx:22 entropy_analyzer · 75%
medium
Buffer.from base64 in agenticklabs-agentick-f27572c/packages/adapters/bedrock/src/bedrock.ts:389 entropy_analyzer · 75%
medium
Buffer.from base64 in agenticklabs-agentick-f27572c/packages/adapters/bedrock/src/bedrock.ts:431 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: greet manifest_parser · 70%
info
Tool: fail manifest_parser · 70%
info
Tool: alpha manifest_parser · 70%
info
Tool: beta manifest_parser · 70%
info
Tool: test-client manifest_parser · 75%
info
Tool: dynamic-tool manifest_parser · 75%
info
Transport: sse manifest_parser · 90%
info
Required env vars (35) manifest_parser · 80%
high
High-risk OAuth scope: https://www.googleapis.com/auth/cloud-platform oauth_scope_analyzer · 80%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
medium
OAuth authorization code flow without PKCE oauth_scope_analyzer · 75%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 115 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%