← Back to search

Azure MCP Server

microsoft MIT Scanned 4d ago

Microsoft Fabric MCP Server - Model Context Protocol implementation for Fabric, for win32 on x64

MCP Registry ↗ npm ↗
? Not scanned yet

Versions

No versions found.

Tools 0

No tools indexed yet.

Permissions 3

filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, os, path, pathlib
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 33

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: semver@7 (GHSA-c2qf-rxjj-qqgw) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.99.9 (GHSA-38r7-794h-5758) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.99.9 (GHSA-8fgc-7cc6-rx7x) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Required env vars (10) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 837 components sbom_generator · 100%
high
Hardcoded Password found in microsoft-mcp-7092020/tools/Azure.Mcp.Tools.Insights/src/Services/AggregationFilter.cs secret_scanner · 65%
critical
Database URL with Password found in microsoft-mcp-7092020/tools/Azure.Mcp.Tools.Monitor/src/Instrumentation/Resources/examples/nodejs/postgres-setup.md secret_scanner · 85%
high
Hardcoded Password found in microsoft-mcp-7092020/tools/Azure.Mcp.Tools.Compute/src/Options/ComputeOptionDescriptions.cs secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
high
Declared package '@azure/mcp' matches no manifest in the repo identity_guard · 70%
info
package.json metadata manifest_parser · 100%
info
Required env vars (10) manifest_parser · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: semver@7 (GHSA-c2qf-rxjj-qqgw) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.99.9 (GHSA-38r7-794h-5758) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.99.9 (GHSA-8fgc-7cc6-rx7x) dependency_analyzer · 95%
critical
Database URL with Password found in tools/Azure.Mcp.Tools.Monitor/src/Instrumentation/Resources/examples/nodejs/postgres-setup.md secret_scanner · 85%
high
Hardcoded Password found in tools/Azure.Mcp.Tools.Sql/src/Options/SqlOptionDefinitions.cs secret_scanner · 65%
info
SLSA Build Level 2 detected slsa_assessor · 85%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 825 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%