← Back to search

MCP Registry Server

modelcontextprotocol streamable_http Scanned 9d ago

Publish and discover MCP servers via the official MCP Registry. Powered by HAPI MCP server.

MCP Registry ↗
? Not scanned yet

Versions

1.1.0latest
Oct 9, 2025
1.0.2
Oct 8, 2025
1.0.1
Oct 8, 2025
1.0.0
Oct 8, 2025

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 63

info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
info
SBOM generated: 167 components sbom_generator · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 184 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: golang.org/x/mod@0.38.0 (GO-2026-6179) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/mod@0.38.0 (GO-2026-6180) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.54.0 (GO-2026-5932) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/klauspost/compress@1.18.0 (GO-2026-5841) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/mod@0.37.0 (GO-2026-6179) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/mod@0.37.0 (GO-2026-6180) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/pkg/model/types.go:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/openapi_compliance_test.go:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/validators_test.go:1894 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/validators_test.go:1895 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/publish_registry_validation_test.go:98 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/publish_registry_validation_test.go:148 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/publish_registry_validation_test.go:207 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/publish_test.go:219 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/publish_integration_test.go:236 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/http_test.go:944 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/http_test.go:1067 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/github_oidc_test.go:29 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/github_oidc_test.go:125 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/github_oidc_test.go:144 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/github_oidc_test.go:171 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/github_oidc_test.go:196 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/oidc_test.go:42 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/oidc_test.go:67 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/http_test.go:92 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/http_test.go:421 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/http_test.go:567 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/http_test.go:669 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/http_test.go:760 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/http_test.go:1149 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/http_test.go:1232 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/dns_test.go:65 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/dns_test.go:229 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/dns_test.go:378 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/dns_test.go:482 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/dns_test.go:654 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/dns_test.go:749 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/dns_test.go:833 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/dns_test.go:920 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/dns_test.go:988 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/api/handlers/v0/auth/dns_test.go:1053 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/mcpb_test.go:27 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/mcpb_test.go:51 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/mcpb_test.go:58 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/mcpb_test.go:73 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/mcpb_test.go:81 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/mcpb_test.go:89 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/mcpb_test.go:97 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/mcpb_test.go:138 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/mcpb_test.go:147 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/mcpb_test.go:157 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/mcpb_test.go:169 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in modelcontextprotocol-registry-a25f166/internal/validators/registries/cargo_test.go:144 entropy_analyzer · 70%
critical
Database URL with Password found in modelcontextprotocol-registry-a25f166/docker-compose.yml secret_scanner · 85%
critical
Database URL with Password found in modelcontextprotocol-registry-a25f166/scripts/mirror_data/load_production_data.go secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
high
Declared package 'current-lucky-words' matches no manifest in the repo identity_guard · 70%