← Back to search

@bamboocss/mcp

gajus Scanned 10d ago

MCP server for Bamboo CSS AI assistants

npm
C
66.2 / 100

Versions

1.12.3latest
May 22, 2026
1.12.2
May 22, 2026
1.12.1
May 22, 2026
1.12.0
May 22, 2026
1.11.4
May 20, 2026
+ show 3 moreshow less
1.11.3
May 20, 2026
1.11.2
May 20, 2026
1.11.1
May 20, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 10

get_color_palette
annotations: none low

Get the color palette with all color values

get_mixins
annotations: none low

Get the named style bundles the theme declares, applied through the `mixin` style property

get_keyframes
annotations: none low

Get keyframe animations defined in the theme

get_tokens
annotations: none low

Get all design tokens with their values, CSS variables, and usage examples

get_semantic_tokens
annotations: none low

Get semantic tokens with their conditional values (responsive, color modes)

get_recipes
annotations: none low

Get component recipes with their variants, default values, and usage examples

get_patterns
annotations: none low

Get layout patterns with their properties and usage examples

get_conditions
annotations: none low

Get all conditions (breakpoints, pseudo-classes, color modes) and their CSS values

get_config
annotations: none low

Get the resolved Bamboo CSS configuration including paths, JSX settings, and output options

get_usage_report
annotations: none low

Get a usage report of design tokens and recipes across the codebase. Shows which tokens/recipes are used, unused, or missing. Useful for auditing, cleanup, and identifying dead code.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 149

medium
Suspicious package name: react-icons dependency_analyzer · 60%
medium
Suspicious package name: lodash.merge dependency_analyzer · 60%
low
Tool 'get_tokens' has no annotations annotation_checker · 100%
low
Tool 'get_semantic_tokens' has no annotations annotation_checker · 100%
low
Tool 'get_recipes' has no annotations annotation_checker · 100%
low
Tool 'get_patterns' has no annotations annotation_checker · 100%
low
Tool 'get_conditions' has no annotations annotation_checker · 100%
low
Tool 'get_keyframes' has no annotations annotation_checker · 100%
low
Tool 'get_mixins' has no annotations annotation_checker · 100%
low
Tool 'get_color_palette' has no annotations annotation_checker · 100%
low
Tool 'get_config' has no annotations annotation_checker · 100%
low
Tool 'get_usage_report' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 254 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: happy-dom@20.0.11 (GHSA-6q6h-j7hj-3r64) dependency_analyzer · 95%
medium
Vulnerable dependency: happy-dom@20.0.11 (GHSA-w4gp-fjgq-3q4g) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.15 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: nanoid@5.1.6 (GHSA-28wg-ghj8-5hjv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-267c-6grr-h53f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-26hh-7cqf-hhc6) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-492v-c6pp-mqqv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-h25m-26qc-wcjf) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-mwv6-3258-q52c) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-w37m-7fhw-fmv9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.2.6 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.2.6 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.2.6 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.2.6 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.2.6 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-2pvr-wf23-7pc7) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-4g3v-8h47-v7g6) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-7pw4-f3q4-r2p2) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-8hv8-536x-4wqp) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-f48w-9m4c-m7f5) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-j687-52p2-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-jrpj-wcv7-9fh9) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-xr5h-phrj-8vxv) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-48hr-524c-v5w3) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-534h-c3cw-v3h9) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-934w-87qh-qr26) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-9473-5f9j-94wq) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-9pgf-384g-p7mv) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-c9cv-mq2m-ppp3) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-fx6j-w5w5-h468) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-g8wj-3cr3-6w7v) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-hg3f-28rg-4jxj) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-hxcr-hm88-mpq6) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-m3q2-p4fw-w38m) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-mm7m-92g8-7m47) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-rq7w-g337-39qq) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-2m3v-v2m8-q956) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-479c-33wc-g2pg) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-83fc-fqcc-2hmg) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-925w-6v3x-g4j4) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-fv66-9v8q-g76r) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-rv78-f8rc-xrxh) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-wx67-qw84-cm4g) dependency_analyzer · 95%
medium
Vulnerable dependency: waku@0.27.2 (GHSA-43fc-v873-qw85) dependency_analyzer · 95%
medium
Vulnerable dependency: waku@0.27.2 (GHSA-75w3-gmqx-993q) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik@1.17.2 (GHSA-p9x5-jp3h-96mm) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik-city@1.17.2 (GHSA-92j7-wgmg-f32m) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik-city@1.17.2 (GHSA-m6jq-g7gq-5w3c) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik-city@1.17.2 (GHSA-r666-8gjf-4v5f) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik-city@1.17.2 (GHSA-whhv-gg5v-864r) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik-city@1.17.2 (GHSA-xqg6-98cw-gxhq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-2mjp-6q6p-2qxm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-35p6-xmwp-9g52) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-4992-7rv2-5pvq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-f269-vfmq-vjvj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-g8m3-5g58-fq7m) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-g9mf-h72j-4rw9) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
info
Transport: stdio manifest_parser · 90%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-p88m-4jfj-68fv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-pr7r-676h-xcf6) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-v9p9-hfj2-hcw8) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-vrm6-8vpv-qv8q) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-vxpw-j846-p89q) dependency_analyzer · 95%
medium
Vulnerable dependency: preact@10.27.2 (GHSA-36hm-qxxp-pg3m) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-29g2-3rmr-qm68) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-2crg-3p73-43xp) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-3f6h-2hrp-w5wx) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-866w-xmhq-wj7x) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-88qp-p4qg-rqm6) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-fpg4-jhqr-589c) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-hgv7-v322-mmgr) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-j2f3-wq62-6q46) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-j62c-4x62-9r35) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-vrhm-gvg7-fpcf) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-wqjv-9729-c5q2) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-crpf-4hrx-3jrp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-f7gr-6p89-r883) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-h7h7-mm68-gmrc) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-m56q-vw4c-c2cp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-phwv-c562-gvmh) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-pr6f-5x2q-rwfp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-rcqx-6q8c-2c42) dependency_analyzer · 95%
medium
Vulnerable dependency: storybook@10.1.2 (GHSA-8452-54wp-rmv6) dependency_analyzer · 95%
medium
Vulnerable dependency: storybook@10.1.2 (GHSA-mjf5-7g4m-gx5w) dependency_analyzer · 95%
medium
Vulnerable dependency: @remix-run/react@2.17.2 (GHSA-8v8x-cx79-35w7) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.14 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.14 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: get_tokens manifest_parser · 85%
info
Tool: get_semantic_tokens manifest_parser · 85%
info
Tool: get_recipes manifest_parser · 85%
info
Tool: get_patterns manifest_parser · 85%
info
Tool: get_conditions manifest_parser · 85%
info
Tool: get_keyframes manifest_parser · 85%
info
Tool: get_mixins manifest_parser · 85%
info
Tool: get_color_palette manifest_parser · 85%
info
Tool: get_config manifest_parser · 85%
info
Tool: get_usage_report manifest_parser · 85%
info
Required env vars (15) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 219 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%