← Back to search

centy-mcp

centy-io Scanned 2h ago

MCP server for centy-daemon — expose centy tools to AI clients like Claude

npm ↗
? Not scanned yet

Versions

0.14.0latest
Apr 29, 2026
0.13.0
Apr 13, 2026
0.12.4
Apr 13, 2026
0.12.3
Apr 13, 2026
0.12.2
Apr 13, 2026
+ show 6 moreshow less
0.12.1
Apr 12, 2026
0.12.0
Apr 4, 2026
0.11.1
Apr 3, 2026
0.10.5
Apr 3, 2026
0.9.2
Mar 31, 2026
0.9.1
Mar 31, 2026

Tools 0

No tools indexed yet.

Permissions 2

shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 33

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @grpc/grpc-js@1.12.2 (GHSA-5375-pq7m-f5r2) dependency_analyzer · 95%
medium
Vulnerable dependency: @grpc/grpc-js@1.12.2 (GHSA-99f4-grh7-6pcq) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.6 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.6 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.6 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GHSA-2v4p-qf9q-27wj) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GHSA-hrxh-6v49-42gf) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GHSA-qc2q-p7wx-3px3) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GHSA-vp52-pcj8-j9qc) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GO-2026-6061) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GO-2026-6348) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GO-2026-6441) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.80.0 (GO-2026-6443) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.49.0 (GHSA-5cv4-jp36-h3mw) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.49.0 (GO-2026-4918) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.49.0 (GO-2026-5025) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.49.0 (GO-2026-5026) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.49.0 (GO-2026-5027) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.49.0 (GO-2026-5028) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.49.0 (GO-2026-5029) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.49.0 (GO-2026-5030) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.49.0 (GO-2026-5942) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.40.0 (GO-2026-5024) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/text@0.33.0 (GO-2026-5970) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 226 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
high
Declared package 'centy-mcp' matches no manifest in the repo identity_guard · 70%