← Back to search

autotel-mcp

GitHub Actions Scanned 9d ago

OpenTelemetry instrumentation for Model Context Protocol (MCP) with distributed tracing support

D
40 / 100

Versions

autotel-mcp-instrumentation
44.0.0latest
Jul 30, 2026
43.0.0
Jul 30, 2026
42.0.0
Jul 27, 2026
41.0.0
Jul 20, 2026
40.0.1
Jul 13, 2026
+ show 17 moreshow less
40.0.0
Jun 20, 2026
39.0.0
Jun 20, 2026
38.0.0
Jun 16, 2026
37.0.0
Jun 15, 2026
36.0.0
Jun 12, 2026
35.0.0
Jun 12, 2026
34.0.2
Jun 6, 2026
34.0.0
May 31, 2026
33.0.1
May 29, 2026
33.0.0
May 28, 2026
32.0.0
May 24, 2026
31.0.0
May 20, 2026
30.0.4
May 13, 2026
30.0.3
May 5, 2026
30.0.0
Apr 29, 2026
29.0.1
Apr 27, 2026
29.0.0
Apr 15, 2026
autotel-mcp
0.1.19latest
Jul 30, 2026
0.1.18
Jul 13, 2026
0.1.17
Jul 11, 2026
0.1.16
Jun 20, 2026
0.1.15
Jun 6, 2026
+ show 44 moreshow less
0.1.13
Jun 2, 2026
0.1.12
Jun 2, 2026
0.1.11
May 29, 2026
0.1.10
May 20, 2026
0.1.9
May 19, 2026
0.1.8
May 10, 2026
0.1.7
May 5, 2026
0.1.4
May 1, 2026
0.1.3
Apr 27, 2026
0.1.2
Apr 19, 2026
0.1.1
Apr 16, 2026
29.0.0
Apr 8, 2026
28.0.2
Mar 23, 2026
28.0.1
Mar 23, 2026
28.0.0
Mar 19, 2026
27.0.0
Mar 10, 2026
26.0.1
Mar 7, 2026
26.0.0
Mar 4, 2026
25.0.0
Mar 1, 2026
24.0.0
Feb 23, 2026
23.0.0
Feb 14, 2026
22.0.0
Feb 11, 2026
21.1.0
Feb 8, 2026
21.0.0
Feb 1, 2026
20.0.0
Feb 1, 2026
19.0.0
Jan 31, 2026
18.0.0
Jan 31, 2026
17.0.1
Jan 27, 2026
17.0.0
Jan 26, 2026
16.0.0
Jan 22, 2026
15.0.1
Jan 14, 2026
15.0.0
Jan 8, 2026
14.0.0
Jan 5, 2026
13.0.0
Jan 3, 2026
11.0.0
Dec 7, 2025
10.0.0
Dec 6, 2025
9.0.0
Dec 3, 2025
8.0.0
Nov 30, 2025
7.0.0
Nov 28, 2025
6.0.0
Nov 28, 2025
5.0.0
Nov 27, 2025
4.0.0
Nov 26, 2025
3.0.0
Nov 26, 2025
2.0.0
Nov 26, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 41

score_span_instrumentation
annotations: none low

Score a span for instrumentation quality and semantic convention coverage.

explain_instrumentation_score
annotations: none low

Explain the instrumentation scoring rubric and fix ideas.

list_metrics
annotations: none low

List metric series if the backend supports metrics.

search_logs
annotations: none low

Search logs if the backend supports logs.

correlate
annotations: none low

Given a trace ID, return the trace + metrics from involved services + correlated logs. One call for the full picture.

explain_slowdown
annotations: none low

Identify when and why a service degraded. Combines anomaly detection with cross-signal correlation.

discover_services
annotations: none low

Discover services with cross-signal metadata (operations, severities, metric names, and inferred language).

discover_trace_fields
annotations: none low

Discover trace/span field names, inferred types, and example values from sampled traces.

discover_log_fields
annotations: none low

Discover log field names, inferred types, and example values from sampled logs.

validate_collector_config
annotations: none low

Validate an OTLP receiver collector config fragment.

suggest_collector_config
annotations: none low

Suggest a minimal OTLP receiver collector config.

explain_collector_config
annotations: none low

Explain the OTLP receiver collector config shape and defaults.

search_traces
annotations: none low

Search traces by service, operation, status, tags, time window, and error flag.

search_spans
annotations: none low

Search spans by service, operation, status, tags, time window, duration, and error flag.

get_trace
annotations: none low

Get a trace by trace ID.

summarize_trace
annotations: none low

Summarize a trace into a compact incident-friendly view.

backend_health
annotations: none low

Check backend health and readiness. Returns liveness plus the signal coverage map (traces / metrics / logs) so you can see at a glance what the backend can answer for, not just whether it is up.

backend_capabilities
annotations: none low

Describe which telemetry signals the active backend can serve.

list_capabilities
annotations: none low

List the server capabilities, transports, tools, resources, and backend signals.

collector_get_versions
annotations: none low

List available OpenTelemetry Collector schema versions supported by the upstream catalog.

collector_list_components
annotations: none low

List collector components (receivers/processors/exporters/connectors/extensions) for a given version.

collector_component_schema
annotations: none low

Get JSON Schema for a collector component configuration.

collector_component_readme
annotations: none low

Get README/reference text for a collector component.

collector_validate_component_config
annotations: none low

Validate collector component config against the versioned upstream JSON schema.

collector_refresh_catalog
annotations: none low

Refresh local in-memory collector metadata cache from upstream GitHub catalog.

get_llm_usage
annotations: none low

Aggregate LLM token usage by model and service.

list_llm_models
annotations: none low

Discover LLM models in use and their usage frequency.

get_llm_model_stats
annotations: none low

Get latency, token, and error statistics for one LLM model.

get_llm_expensive_traces
annotations: none low

Find traces with the highest total LLM token usage.

get_llm_slow_traces
annotations: none low

Find the slowest traces that include LLM spans.

list_llm_tools
annotations: none low

Discover tool/function spans and group them by tool name.

list_services
annotations: none low

List known services.

list_operations
annotations: none low

List operations for a service.

service_map
annotations: none low

Build a service dependency map with node and edge health metrics.

find_anomalies
annotations: none low

Scan for statistical outliers: latency spikes, error rate jumps. Use after list_services to check a specific service.

find_root_cause
annotations: none low

Walk a trace span tree to identify the bottleneck span. Use after get_trace or search_traces when investigating a slow/errored trace.

find_errors
annotations: none low

Aggregate error spans grouped by service and operation. Use to get an overview of what is failing.

check_slos
annotations: none low

Report SLO violations. Provide p99 latency and error rate targets.

semconv_list_namespaces
annotations: none low

List OpenTelemetry semantic-convention namespaces available from upstream.

semconv_get_namespace
annotations: none low

Get semantic-convention groups for one namespace (for example: http, rpc, database).

semconv_refresh_cache
annotations: none low

Clear semantic-conventions cache so subsequent calls fetch fresh upstream content.

Permissions 4

network medium
Server uses network capabilities via: fetch(), http
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 126

low
Tool 'score_span_instrumentation' has no annotations annotation_checker · 100%
low
Tool 'explain_instrumentation_score' has no annotations annotation_checker · 100%
low
Tool 'list_metrics' has no annotations annotation_checker · 100%
low
Tool 'search_logs' has no annotations annotation_checker · 100%
low
Tool 'correlate' has no annotations annotation_checker · 100%
low
Tool 'explain_slowdown' has no annotations annotation_checker · 100%
low
Tool 'discover_services' has no annotations annotation_checker · 100%
low
Tool 'discover_trace_fields' has no annotations annotation_checker · 100%
low
Tool 'discover_log_fields' has no annotations annotation_checker · 100%
low
Tool 'validate_collector_config' has no annotations annotation_checker · 100%
low
Tool 'suggest_collector_config' has no annotations annotation_checker · 100%
low
Tool 'explain_collector_config' has no annotations annotation_checker · 100%
low
Tool 'search_traces' has no annotations annotation_checker · 100%
low
Tool 'search_spans' has no annotations annotation_checker · 100%
low
Tool 'get_trace' has no annotations annotation_checker · 100%
low
Tool 'summarize_trace' has no annotations annotation_checker · 100%
low
Tool 'backend_health' has no annotations annotation_checker · 100%
low
Tool 'backend_capabilities' has no annotations annotation_checker · 100%
low
Tool 'list_capabilities' has no annotations annotation_checker · 100%
low
Tool 'collector_get_versions' has no annotations annotation_checker · 100%
low
Tool 'collector_list_components' has no annotations annotation_checker · 100%
low
Tool 'collector_component_schema' has no annotations annotation_checker · 100%
low
Tool 'collector_component_readme' has no annotations annotation_checker · 100%
low
Tool 'collector_validate_component_config' has no annotations annotation_checker · 100%
low
Tool 'collector_refresh_catalog' has no annotations annotation_checker · 100%
low
Tool 'get_llm_usage' has no annotations annotation_checker · 100%
low
Tool 'list_llm_models' has no annotations annotation_checker · 100%
low
Tool 'get_llm_model_stats' has no annotations annotation_checker · 100%
low
Tool 'get_llm_expensive_traces' has no annotations annotation_checker · 100%
low
Tool 'get_llm_slow_traces' has no annotations annotation_checker · 100%
low
Tool 'list_llm_tools' has no annotations annotation_checker · 100%
low
Tool 'list_services' has no annotations annotation_checker · 100%
low
Tool 'list_operations' has no annotations annotation_checker · 100%
low
Tool 'service_map' has no annotations annotation_checker · 100%
low
Tool 'find_anomalies' has no annotations annotation_checker · 100%
low
Tool 'find_root_cause' has no annotations annotation_checker · 100%
low
Tool 'find_errors' has no annotations annotation_checker · 100%
low
Tool 'check_slos' has no annotations annotation_checker · 100%
low
Tool 'semconv_list_namespaces' has no annotations annotation_checker · 100%
low
Tool 'semconv_get_namespace' has no annotations annotation_checker · 100%
low
Tool 'semconv_refresh_cache' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 355 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: hono@4.12.32 (GHSA-54fx-42gc-7vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.32 (GHSA-79qm-7rj5-m7r9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.32 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.32 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.10 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.10 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.10 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.10 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.10 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.10 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.10 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.10 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.10 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: autotel-terminal@workspace:* (MAL-2026-5186) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.70.1 (GHSA-29g2-3rmr-qm68) dependency_analyzer · 95%
medium
Buffer.from base64 in jagreehal-autotel-dec41e5/packages/autotel-langfuse/src/media.ts:223 entropy_analyzer · 75%
medium
Buffer.from base64 in jagreehal-autotel-dec41e5/packages/autotel-mcp-instrumentation/src/security.test.ts:351 entropy_analyzer · 75%
medium
Buffer.from base64 in jagreehal-autotel-dec41e5/packages/autotel-mcp-instrumentation/src/security.test.ts:359 entropy_analyzer · 75%
medium
Buffer.from base64 in jagreehal-autotel-dec41e5/packages/autotel-terminal/src/otlp-http-json.ts:81 entropy_analyzer · 75%
medium
Buffer.from base64 in jagreehal-autotel-dec41e5/packages/autotel-devtools/src/server/otlp.ts:90 entropy_analyzer · 75%
medium
Buffer.from base64 in jagreehal-autotel-dec41e5/packages/autotel-mcp/src/backends/collector/receiver.ts:73 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: score_span_instrumentation manifest_parser · 85%
info
Tool: explain_instrumentation_score manifest_parser · 85%
info
Tool: list_metrics manifest_parser · 85%
info
Tool: search_logs manifest_parser · 85%
info
Tool: correlate manifest_parser · 85%
info
Tool: explain_slowdown manifest_parser · 85%
info
Tool: discover_services manifest_parser · 85%
info
Tool: discover_trace_fields manifest_parser · 85%
info
Tool: discover_log_fields manifest_parser · 85%
info
Tool: validate_collector_config manifest_parser · 85%
info
Tool: suggest_collector_config manifest_parser · 85%
info
Tool: explain_collector_config manifest_parser · 85%
info
Tool: search_traces manifest_parser · 85%
info
Tool: search_spans manifest_parser · 85%
info
Tool: get_trace manifest_parser · 85%
info
Tool: summarize_trace manifest_parser · 85%
info
Tool: backend_health manifest_parser · 85%
info
Tool: backend_capabilities manifest_parser · 85%
info
Tool: list_capabilities manifest_parser · 85%
info
Tool: collector_get_versions manifest_parser · 85%
info
Tool: collector_list_components manifest_parser · 85%
info
Tool: collector_component_schema manifest_parser · 85%
info
Tool: collector_component_readme manifest_parser · 85%
info
Tool: collector_validate_component_config manifest_parser · 85%
info
Tool: collector_refresh_catalog manifest_parser · 85%
info
Tool: get_llm_usage manifest_parser · 85%
info
Tool: list_llm_models manifest_parser · 85%
info
Tool: get_llm_model_stats manifest_parser · 85%
info
Tool: get_llm_expensive_traces manifest_parser · 85%
info
Tool: get_llm_slow_traces manifest_parser · 85%
info
Tool: list_llm_tools manifest_parser · 85%
info
Tool: list_services manifest_parser · 85%
info
Tool: list_operations manifest_parser · 85%
info
Tool: service_map manifest_parser · 85%
info
Tool: find_anomalies manifest_parser · 85%
info
Tool: find_root_cause manifest_parser · 85%
info
Tool: find_errors manifest_parser · 85%
info
Tool: check_slos manifest_parser · 85%
info
Tool: semconv_list_namespaces manifest_parser · 85%
info
Tool: semconv_get_namespace manifest_parser · 85%
info
Tool: semconv_refresh_cache manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (222) manifest_parser · 80%
high
High-risk OAuth scope: https://www.googleapis.com/auth/cloud-platform oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 263 components sbom_generator · 100%
critical
Database URL with Password found in jagreehal-autotel-dec41e5/docker/langfuse.yml secret_scanner · 85%
high
Hardcoded Password found in jagreehal-autotel-dec41e5/packages/autotel-edge/src/api/redact.ts secret_scanner · 65%
high
Generic API Key Assignment found in jagreehal-autotel-dec41e5/packages/autotel/src/event.ts secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%