← Back to search

DealWatch

xiaojiou176-open Scanned 23d ago

Local-first grocery price intelligence with a read-only MCP server.

MCP Registry ↗
C
64 / 100

Versions

1.0.1latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 14

compare_preview
annotations: none low

zip_code str submitted_urls string
list_watch_tasks
annotations: none low

get_watch_task_detail
annotations: none low

task_id str
list_watch_groups
annotations: none low

get_watch_group_detail
annotations: none low

group_id str
get_runtime_readiness
annotations: none low

get_builder_starter_pack
annotations: none low

get_recovery_inbox
annotations: none low

list_notifications
annotations: none low

limit int
get_notification_settings
annotations: none low

list_store_bindings
annotations: none low

get_store_onboarding_cockpit
annotations: none low

get_builder_client_config
annotations: none low

client str
list_builder_client_configs
annotations: none low

Permissions 5

network medium
Server uses network capabilities via: fetch(), http, httpx, socket, urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: subprocess
database medium
Server uses database capabilities via: sqlalchemy, sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 124

low
Tool 'compare_preview' has no annotations annotation_checker · 100%
low
Tool 'list_watch_tasks' has no annotations annotation_checker · 100%
low
Tool 'get_watch_task_detail' has no annotations annotation_checker · 100%
low
Tool 'list_watch_groups' has no annotations annotation_checker · 100%
low
Tool 'get_watch_group_detail' has no annotations annotation_checker · 100%
low
Tool 'get_runtime_readiness' has no annotations annotation_checker · 100%
low
Tool 'get_builder_starter_pack' has no annotations annotation_checker · 100%
low
Tool 'get_recovery_inbox' has no annotations annotation_checker · 100%
low
Tool 'list_notifications' has no annotations annotation_checker · 100%
low
Tool 'get_notification_settings' has no annotations annotation_checker · 100%
low
Tool 'list_store_bindings' has no annotations annotation_checker · 100%
low
Tool 'get_store_onboarding_cockpit' has no annotations annotation_checker · 100%
low
Tool 'get_builder_client_config' has no annotations annotation_checker · 100%
low
Tool 'list_builder_client_configs' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 110 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: echarts@5.6.0 (GHSA-fgmj-fm8m-jvvx) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.3 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.4.2 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6.4.2 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: anyio@4.13.0 (GHSA-5p39-cfhj-2xmp) dependency_analyzer · 95%
medium
Vulnerable dependency: anyio@4.13.0 (GHSA-82r6-8w77-94w6) dependency_analyzer · 95%
medium
Vulnerable dependency: click@8.3.1 (PYSEC-2026-2132) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-537c-gmf6-5ccf) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-g6cj-pr64-35w5) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-jwv3-5hgf-82ww) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-m2h6-j472-rp4c) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (PYSEC-2026-3552) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (PYSEC-2026-3553) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (PYSEC-2026-3554) dependency_analyzer · 95%
medium
Vulnerable dependency: idna@3.11 (GHSA-65pc-fj4g-8rjx) dependency_analyzer · 95%
medium
Vulnerable dependency: idna@3.11 (PYSEC-2026-215) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml-html-clean@0.4.4 (GHSA-4jhm-jv67-739f) dependency_analyzer · 95%
medium
Vulnerable dependency: lxml-html-clean@0.4.4 (PYSEC-2026-2614) dependency_analyzer · 95%
medium
Vulnerable dependency: mako@1.3.11 (GHSA-2h4p-vjrc-8xpq) dependency_analyzer · 95%
medium
Vulnerable dependency: mako@1.3.11 (PYSEC-2026-2617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (GHSA-hvrp-rf83-w775) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (PYSEC-2026-3481) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.26.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic-settings@2.13.1 (GHSA-4xgf-cpjx-pc3j) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (GHSA-993g-76c3-p5m4) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (GHSA-fhv5-28vv-h8m8) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (GHSA-jq35-7prp-9v3f) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (GHSA-w7vc-732c-9m39) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (GHSA-xgmm-8j9v-c9wx) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (PYSEC-2026-175) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (PYSEC-2026-177) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (PYSEC-2026-178) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (PYSEC-2026-179) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-5rvq-cxj2-64vf) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-6jv3-5f52-599m) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-pp6c-gr5w-3c5g) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-v9pg-7xvm-68hf) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-vffw-93wf-4j4q) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (PYSEC-2026-3036) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (PYSEC-2026-3037) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (PYSEC-2026-3039) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (PYSEC-2026-3040) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (PYSEC-2026-3041) dependency_analyzer · 95%
medium
Vulnerable dependency: pywin32@311 ; sys_platform == 'win32' (GHSA-hwfp-hg2m-9vr2) dependency_analyzer · 95%
medium
Vulnerable dependency: pywin32@311 ; sys_platform == 'win32' (PYSEC-2021-112) dependency_analyzer · 95%
medium
Vulnerable dependency: soupsieve@2.8.3 (GHSA-2wc2-fm75-p42x) dependency_analyzer · 95%
medium
Vulnerable dependency: soupsieve@2.8.3 (GHSA-836r-79rf-4m37) dependency_analyzer · 95%
medium
Vulnerable dependency: soupsieve@2.8.3 (GHSA-gjv8-xp57-g29c) dependency_analyzer · 95%
medium
Vulnerable dependency: soupsieve@2.8.3 (GHSA-j934-xhv5-fg8f) dependency_analyzer · 95%
medium
Vulnerable dependency: soupsieve@2.8.3 (PYSEC-2026-3071) dependency_analyzer · 95%
medium
Vulnerable dependency: soupsieve@2.8.3 (PYSEC-2026-3072) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.50.0 (GHSA-82w8-qh3p-5jfq) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.50.0 (GHSA-86qp-5c8j-p5mr) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.50.0 (GHSA-jp82-jpqv-5vv3) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.50.0 (GHSA-wqp7-x3pw-xc5r) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.50.0 (GHSA-x746-7m8f-x49c) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.50.0 (PYSEC-2026-161) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.50.0 (PYSEC-2026-2280) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.50.0 (PYSEC-2026-2281) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.50.0 (PYSEC-2026-248) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.50.0 (PYSEC-2026-249) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.6.3 (GHSA-mf9v-mfxr-j63j) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.6.3 (GHSA-qccp-gfcp-xxvc) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.6.3 (PYSEC-2026-141) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.6.3 (PYSEC-2026-142) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.4,<2.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.4,<2.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.4,<2.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.4,<2.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.4,<2.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.4,<2.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.4,<2.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.4,<2.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.4,<2.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.9.4,<2.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: compare_preview manifest_parser · 90%
info
Tool: list_watch_tasks manifest_parser · 90%
info
Tool: get_watch_task_detail manifest_parser · 90%
info
Tool: list_watch_groups manifest_parser · 90%
info
Tool: get_watch_group_detail manifest_parser · 90%
info
Tool: get_runtime_readiness manifest_parser · 90%
info
Tool: get_builder_starter_pack manifest_parser · 90%
info
Tool: get_recovery_inbox manifest_parser · 90%
info
Tool: list_notifications manifest_parser · 90%
info
Tool: get_notification_settings manifest_parser · 90%
info
Tool: list_store_bindings manifest_parser · 90%
info
Tool: get_store_onboarding_cockpit manifest_parser · 90%
info
Tool: get_builder_client_config manifest_parser · 90%
info
Tool: list_builder_client_configs manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 94 components sbom_generator · 100%
high
Hardcoded Password found in xiaojiou176-open-dealwatcher-7bb7460/.gitallowed secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%