← Back to search

bfxr2-mcp-server

avi892nash Scanned 1d ago

MCP server for Bfxr2 v1.0.4 music and sound effect generation using existing codebase

npm ↗
? Not scanned yet

Versions

1.2.2latest
Apr 26, 2026
1.0.0
Jan 5, 2026

Tools 0

No tools indexed yet.

Permissions 1

filesystem low
Server uses filesystem capabilities via: fs sync ops

Scan Findings 40

info
Transport: stdio manifest_parser · 90%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@0.4.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Buffer.from base64 in avi892nash-bfxr2-mcp-aee6536/generate-samples.js:12 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:17 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:18 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:19 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:20 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:21 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:22 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:23 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:24 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:25 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:26 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:27 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:28 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:29 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:30 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:31 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:33 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:34 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:35 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:36 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:38 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:39 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:40 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:42 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:44 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:45 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in avi892nash-bfxr2-mcp-aee6536/test/generation.test.js:46 entropy_analyzer · 70%
medium
Buffer.from base64 in avi892nash-bfxr2-mcp-aee6536/src/server.js:53 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
info
SBOM generated: 46 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%