← Back to search

@commercetools/nimbus-mcp

GitHub Actions Scanned 9d ago

MCP server for the Nimbus design system

npm ↗
C
69.2 / 100

Versions

0.0.0-canary-20260731130546latest
Jul 31, 2026
0.0.0-canary-20260730192628
Jul 30, 2026
3.4.0
Jul 28, 2026
0.0.0-canary-20260728192512
Jul 28, 2026
0.0.0-canary-20260728184036
Jul 28, 2026
+ show 165 moreshow less
0.0.0-canary-20260728182658
Jul 28, 2026
0.0.0-canary-20260728181934
Jul 28, 2026
0.0.0-canary-20260728173827
Jul 28, 2026
0.0.0-canary-20260728173440
Jul 28, 2026
0.0.0-canary-20260728171957
Jul 28, 2026
0.0.0-canary-20260728170021
Jul 28, 2026
0.0.0-canary-20260728164842
Jul 28, 2026
3.3.0
Jul 27, 2026
0.0.0-canary-20260727195733
Jul 27, 2026
0.0.0-canary-20260727193350
Jul 27, 2026
0.0.0-canary-20260727163200
Jul 27, 2026
0.0.0-canary-20260727161311
Jul 27, 2026
0.0.0-canary-20260727155224
Jul 27, 2026
0.0.0-canary-20260727150038
Jul 27, 2026
0.0.0-canary-20260723185310
Jul 23, 2026
0.0.0-canary-20260723184005
Jul 23, 2026
0.0.0-canary-20260723173726
Jul 23, 2026
0.0.0-canary-20260723165925
Jul 23, 2026
0.0.0-canary-20260723160830
Jul 23, 2026
0.0.0-canary-20260723112923
Jul 23, 2026
0.0.0-canary-20260722205934
Jul 22, 2026
0.0.0-canary-20260722201604
Jul 22, 2026
0.0.0-canary-20260722194600
Jul 22, 2026
0.0.0-canary-20260722164700
Jul 22, 2026
0.0.0-canary-20260722140123
Jul 22, 2026
0.0.0-canary-20260722134612
Jul 22, 2026
0.0.0-canary-20260722121904
Jul 22, 2026
0.0.0-canary-20260722075906
Jul 22, 2026
0.0.0-canary-20260722055300
Jul 22, 2026
0.0.0-canary-20260721200819
Jul 21, 2026
0.0.0-canary-20260721122156
Jul 21, 2026
0.0.0-canary-20260720223537
Jul 20, 2026
0.0.0-canary-20260720140516
Jul 20, 2026
0.0.0-canary-20260720070532
Jul 20, 2026
0.0.0-canary-20260720061319
Jul 20, 2026
0.0.0-canary-20260717121856
Jul 17, 2026
0.0.0-canary-nimbus-4-0-20260717073521
Jul 17, 2026
0.0.0-canary-nimbus-4-0-20260717065321
Jul 17, 2026
0.0.0-canary-nimbus-4-0-20260717062323
Jul 17, 2026
0.0.0-canary-nimbus-4-0-20260717052632
Jul 17, 2026
0.0.0-canary-nimbus-4-0-20260716193231
Jul 16, 2026
0.0.0-canary-nimbus-4-0-20260716192558
Jul 16, 2026
0.0.0-canary-nimbus-4-0-20260716192040
Jul 16, 2026
0.0.0-canary-20260716054640
Jul 16, 2026
0.0.0-canary-20260715130416
Jul 15, 2026
0.0.0-canary-20260715113054
Jul 15, 2026
0.0.0-canary-20260715100137
Jul 15, 2026
0.0.0-canary-20260715094043
Jul 15, 2026
0.0.0-canary-20260714155749
Jul 14, 2026
0.0.0-canary-20260714151321
Jul 14, 2026
0.0.0-canary-20260714143607
Jul 14, 2026
0.0.0-canary-20260714112702
Jul 14, 2026
0.0.0-canary-20260713065456
Jul 13, 2026
0.0.0-canary-20260709172949
Jul 9, 2026
0.0.0-canary-20260709074453
Jul 9, 2026
0.0.0-canary-20260709072832
Jul 9, 2026
0.0.0-canary-20260708114756
Jul 8, 2026
0.0.0-canary-20260708071846
Jul 8, 2026
0.0.0-canary-20260707053043
Jul 7, 2026
0.0.0-canary-20260706080254
Jul 6, 2026
0.0.0-canary-20260706072935
Jul 6, 2026
0.0.0-canary-20260703102053
Jul 3, 2026
0.0.0-canary-20260703100823
Jul 3, 2026
0.0.0-canary-20260702091536
Jul 2, 2026
0.0.0-canary-20260701071546
Jul 1, 2026
0.0.0-canary-20260701060133
Jul 1, 2026
0.0.0-canary-20260630125219
Jun 30, 2026
0.0.0-canary-20260630100315
Jun 30, 2026
0.0.0-canary-20260629072841
Jun 29, 2026
0.0.0-canary-20260629063052
Jun 29, 2026
0.0.0-canary-20260629060829
Jun 29, 2026
0.0.0-canary-20260629054310
Jun 29, 2026
0.0.0-canary-20260626100417
Jun 26, 2026
0.0.0-canary-20260626091719
Jun 26, 2026
0.0.0-canary-20260626055135
Jun 26, 2026
0.0.0-canary-20260625063447
Jun 25, 2026
0.0.0-canary-20260625061614
Jun 25, 2026
0.0.0-canary-20260625055000
Jun 25, 2026
0.0.0-canary-20260624143931
Jun 24, 2026
0.0.0-canary-20260624075155
Jun 24, 2026
0.0.0-canary-20260624062713
Jun 24, 2026
0.0.0-canary-20260623051931
Jun 23, 2026
3.2.0
Jun 18, 2026
0.0.0-canary-20260618133957
Jun 18, 2026
0.0.0-canary-20260618105630
Jun 18, 2026
0.0.0-canary-20260618084503
Jun 18, 2026
0.0.0-canary-20260617053642
Jun 17, 2026
0.0.0-canary-20260616120215
Jun 16, 2026
0.0.0-canary-20260616104807
Jun 16, 2026
0.0.0-canary-nimbus-4-0-20260612212251
Jun 12, 2026
3.1.0
Jun 12, 2026
0.0.0-canary-20260612184846
Jun 12, 2026
0.0.0-canary-nimbus-4-0-20260612183725
Jun 12, 2026
0.0.0-canary-20260612183719
Jun 12, 2026
0.0.0-canary-20260612182643
Jun 12, 2026
0.0.0-canary-20260612174244
Jun 12, 2026
0.0.0-canary-20260612092950
Jun 12, 2026
0.0.0-canary-20260612064547
Jun 12, 2026
0.0.0-canary-20260611205320
Jun 11, 2026
0.0.0-canary-20260611195020
Jun 11, 2026
0.0.0-canary-20260611190200
Jun 11, 2026
0.0.0-canary-20260611072027
Jun 11, 2026
0.0.0-canary-20260611055735
Jun 11, 2026
0.0.0-canary-20260610133615
Jun 10, 2026
0.0.0-canary-20260610110112
Jun 10, 2026
0.0.0-canary-20260608151823
Jun 8, 2026
0.0.0-canary-20260605140720
Jun 5, 2026
0.0.0-canary-20260529124930
May 29, 2026
0.0.0-canary-20260528182943
May 28, 2026
0.0.0-canary-20260528082046
May 28, 2026
0.0.0-canary-20260525160401
May 25, 2026
0.0.0-canary-20260522165735
May 22, 2026
0.0.0-canary-20260522090843
May 22, 2026
0.0.0-canary-20260519144017
May 19, 2026
0.0.0-canary-20260519142300
May 19, 2026
0.0.0-canary-20260519140057
May 19, 2026
0.0.0-canary-20260519133144
May 19, 2026
0.0.0-canary-20260519102424
May 19, 2026
0.0.0-canary-20260519072344
May 19, 2026
0.0.0-canary-20260518195730
May 18, 2026
0.0.0-canary-20260516070044
May 16, 2026
0.0.0-canary-20260515194553
May 15, 2026
0.0.0-canary-20260515190913
May 15, 2026
0.0.0-canary-20260515190743
May 15, 2026
0.0.0-canary-20260513131822
May 13, 2026
0.0.0-canary-20260512075017
May 12, 2026
0.0.0-canary-20260512070238
May 12, 2026
3.0.0
May 8, 2026
0.0.0-canary-20260508160644
May 8, 2026
0.0.0-canary-20260508154019
May 8, 2026
0.0.0-canary-20260508064634
May 8, 2026
0.0.0-canary-20260508064611
May 8, 2026
0.0.0-canary-20260507075715
May 7, 2026
0.0.0-canary-20260507075429
May 7, 2026
0.0.0-canary-20260506093307
May 6, 2026
0.0.0-canary-20260506071117
May 6, 2026
0.0.0-canary-20260506063528
May 6, 2026
0.0.0-canary-20260504172618
May 4, 2026
0.0.0-canary-20260504151604
May 4, 2026
0.0.0-canary-20260504150346
May 4, 2026
0.0.0-canary-20260504111717
May 4, 2026
0.0.0-canary-20260501204906
May 1, 2026
0.0.0-canary-20260430084929
Apr 30, 2026
0.0.0-canary-20260430061856
Apr 30, 2026
0.0.0-canary-20260430055803
Apr 30, 2026
0.0.0-canary-20260430052256
Apr 30, 2026
0.0.0-canary-20260430052227
Apr 30, 2026
0.0.0-canary-20260429184757
Apr 29, 2026
0.0.0-canary-20260429135832
Apr 29, 2026
0.0.0-canary-20260429123831
Apr 29, 2026
0.0.0-canary-20260428175942
Apr 28, 2026
0.0.0-canary-20260427144631
Apr 27, 2026
0.0.0-canary-20260427082348
Apr 27, 2026
0.0.0-canary-20260424210135
Apr 24, 2026
0.0.0-canary-20260424204151
Apr 24, 2026
0.0.0-canary-20260424200030
Apr 24, 2026
0.0.0-canary-20260421185825
Apr 21, 2026
0.0.0-canary-20260418065052
Apr 18, 2026
0.0.0-canary-20260417143142
Apr 17, 2026
0.0.0-canary-20260417141402
Apr 17, 2026
2.11.0
Apr 16, 2026
2.10.0
Apr 16, 2026
0.0.0-canary-20260416153442
Apr 16, 2026
0.0.0-canary-20260416145717
Apr 16, 2026
0.1.0
Mar 2, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

get_tokens
annotations: none low

Returns Nimbus design tokens.

search_docs
annotations: none low

Search all Nimbus docs (components, patterns, hooks, icons, tokens) including guidelines and accessibility views.

get_docs_page
annotations: none low

Returns the full content of a Nimbus documentation page by its route path (as returned by search_docs).

list_components
annotations: none low

Returns Nimbus components. Optionally filter by subcategory or fuzzy-search by name, description, or tags.

get_component
annotations: none low

Returns detailed information about a Nimbus component or pattern.

migrate_from_uikit
annotations: none low

Returns migration mapping data for UI Kit components to their Nimbus equivalents.

search_icons
annotations: none low

Fuzzy-search Nimbus icons by name or keyword.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 88

low
Tool 'search_icons' has no annotations annotation_checker · 100%
low
Tool 'get_tokens' has no annotations annotation_checker · 100%
low
Tool 'search_docs' has no annotations annotation_checker · 100%
low
Tool 'get_docs_page' has no annotations annotation_checker · 100%
low
Tool 'list_components' has no annotations annotation_checker · 100%
low
Tool 'get_component' has no annotations annotation_checker · 100%
low
Tool 'migrate_from_uikit' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 71 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-aria dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Suspicious package name: react-stately dependency_analyzer · 60%
medium
Suspicious package name: react-use dependency_analyzer · 60%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-live dependency_analyzer · 60%
medium
Suspicious package name: react-router dependency_analyzer · 60%
medium
Vulnerable dependency: @babel/core@catalog:tooling (GHSA-4x5r-pxfx-6jf8) dependency_analyzer · 95%
medium
Vulnerable dependency: playwright@catalog:tooling (GHSA-7mvr-c777-76hp) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-353f-5xf4-qw67) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-c27g-q93r-2cwf) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-mv48-hcvh-8jj8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog:tooling (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog:tooling (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog:tooling (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@catalog:utils (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/inspector@catalog:tooling (GHSA-7f8r-222p-6f5g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/inspector@catalog:tooling (GHSA-g9hg-qhmf-q45m) dependency_analyzer · 95%
medium
Vulnerable dependency: tsup@catalog:tooling (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog:utils (GHSA-35jh-r3h4-6jhm) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog:utils (GHSA-4xc9-xhrj-v574) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog:utils (GHSA-f23m-r3pf-42rh) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog:utils (GHSA-fvqr-27wr-82fm) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog:utils (GHSA-jf85-cpcp-j695) dependency_analyzer · 95%
medium
Vulnerable dependency: @vitest/browser@catalog:tooling (GHSA-p63j-vcc4-9vmv) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-39q2-94rc-95cp) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-55q2-fjhq-7xh7) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-63q7-h895-m982) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-76mc-f452-cxcm) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-8hgg-xxm5-3873) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-c2j3-45gr-mqc4) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-chqj-j4fh-rw7m) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-cj63-jhhr-wcxv) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-cjmm-f4jc-qw8r) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-cmwh-pvxp-8882) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-gx9m-whjm-85jf) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-h7mw-gpvr-xq4m) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-h8r8-wccr-v5f2) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-hpcv-96wg-7vj8) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-mjjq-c88q-qhr6) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-mmhx-hmjr-r674) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-p3vf-v8qc-cwcr) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-r47g-fvhr-h676) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-rp9w-3fw7-7cwq) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-vhxf-7vqr-mrjg) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-vxr8-fq34-vvx9) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@catalog:utils (GHSA-x4vx-rjvf-j5p4) dependency_analyzer · 95%
medium
Vulnerable dependency: slug@catalog:apps (GHSA-jxqq-cqm6-pfq9) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: get_tokens manifest_parser · 85%
info
Tool: search_docs manifest_parser · 85%
info
Tool: get_docs_page manifest_parser · 85%
info
Tool: list_components manifest_parser · 85%
info
Tool: get_component manifest_parser · 85%
info
Tool: migrate_from_uikit manifest_parser · 85%
info
Tool: search_icons manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (13) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 134 components sbom_generator · 100%
high
Hardcoded Password found in commercetools-nimbus-86937a7/packages/nimbus/src/components/form-field/form-field.dev.mdx secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%