← Back to search

coalesce-mcp

GitHub Actions Scanned 28d ago

MCP server for IntelliTect's Coalesce framework.

npm ↗
B
75.4 / 100

Versions

7.0.0-beta.20260707.2latest
Jul 7, 2026
7.0.0-beta.20260707.1
Jul 7, 2026
6.6.0-beta.20260519.1
May 19, 2026
6.5.1
May 12, 2026
6.5.0
May 5, 2026
+ show 21 moreshow less
6.5.0-beta.20260504.1
May 4, 2026
6.5.0-beta.20260429.1
Apr 29, 2026
6.4.0
Apr 16, 2026
6.4.0-beta.20260415.3
Apr 15, 2026
6.4.0-beta.20260415.2
Apr 15, 2026
6.3.0
Mar 23, 2026
6.2.2
Mar 5, 2026
6.2.1
Feb 19, 2026
6.2.0
Feb 13, 2026
6.1.1
Dec 3, 2025
6.1.0
Nov 19, 2025
6.0.4
Nov 14, 2025
6.0.3
Oct 29, 2025
6.0.2
Oct 24, 2025
6.0.1
Oct 14, 2025
6.0.0
Oct 6, 2025
6.0.0-rc.20250930.1
Sep 30, 2025
6.0.0-beta.20250918.1
Sep 18, 2025
6.0.0-beta.20250829.1
Aug 29, 2025
0.1.1
Aug 26, 2025
0.1.0
Aug 26, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 3

get_template_features
annotations: none low

Get the files for a specific Coalesce template feature, or list all available features if no feature is specified

schema object
read_template_file
annotations: none low

Read the contents of a file from the Coalesce project template.

schema object
read_changelog
annotations: none low

Read the Coalesce changelog. Optionally filter to only show entries

schema object

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 30

low
Tool 'get_template_features' has no annotations annotation_checker · 100%
low
Tool 'read_template_file' has no annotations annotation_checker · 100%
low
Tool 'read_changelog' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: lodash-es dependency_analyzer · 60%
medium
Vulnerable dependency: vitest@4.1.10 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-f4gw-2p7v-4548) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-gcfj-64vw-6mp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-hcpx-6fm6-wx23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-jqh4-m9w3-8hp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-mwf2-3pr3-8698) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.0 (GHSA-xj6q-8x83-jv6g) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: get_template_features manifest_parser · 75%
info
Tool: read_template_file manifest_parser · 75%
info
Tool: read_changelog manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (10) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 66 components sbom_generator · 100%
high
Generic API Key Assignment found in IntelliTect-Coalesce-2a6a924/docs/.vitepress/config.mts secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%