← Back to search Server uses network capabilities via: fetch() Server uses filesystem capabilities via: fs sync ops Server uses shell capabilities via: child_process, execSync() Server uses env_vars capabilities via: process.env
@dialpad/dialtone-mcp-server
MCP Server for Dialtone Design System
? Not scanned yet
Versions
1.5.0-next.3latestJul 22, 2026
1.5.0-next.2Jul 13, 2026
1.5.0-next.1Jun 4, 2026
1.4.0-next.2Jun 2, 2026
1.4.0May 26, 2026
+ show 9 moreshow less
1.4.0-next.1Apr 3, 2026
1.3.0Mar 31, 2026
1.3.0-next.2Mar 25, 2026
1.3.0-next.1Mar 2, 2026
1.2.1Jan 8, 2026
1.2.0Nov 13, 2025
1.1.0Nov 5, 2025
1.0.2Oct 17, 2025
1.0.1Oct 15, 2025
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 72
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 106 direct dependencies
medium
Vulnerable dependency: glob@11.0.3 (GHSA-5j98-mcp5-4vw2)
medium
Vulnerable dependency: nx@19.8.0 (GHSA-g2r8-wvmj-jf5w)
medium
Vulnerable dependency: vite@8.0.0 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@8.0.0 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@8.0.0 (GHSA-p9ff-h696-f583)
medium
Vulnerable dependency: vite@8.0.0 (GHSA-v2wj-q39q-566r)
medium
Vulnerable dependency: vite@8.0.0 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vue-template-compiler@2.7.16 (GHSA-g3ch-rx76-35fx)
medium
Vulnerable dependency: markdown-it@13.0.2 (GHSA-38c4-r59v-3vqw)
medium
Vulnerable dependency: markdown-it@13.0.2 (GHSA-6v5v-wf23-fmfq)
medium
Vulnerable dependency: lodash@4.17.21 (GHSA-f23m-r3pf-42rh)
medium
Vulnerable dependency: lodash@4.17.21 (GHSA-r5fr-rjxr-66jc)
medium
Vulnerable dependency: lodash@4.17.21 (GHSA-xxjr-mmjv-4gpg)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.18.0 (GHSA-345p-7cg4-v4c7)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.18.0 (GHSA-8r9q-7v3j-jr4g)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.18.0 (GHSA-w48q-cv73-mx4w)
medium
Vulnerable dependency: rollup@4.0.0 (GHSA-gcx4-mw62-g8wm)
medium
Vulnerable dependency: rollup@4.0.0 (GHSA-mw96-cpmx-2vgc)
medium
Vulnerable dependency: postcss@8.4.1 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8.4.1 (GHSA-7fh5-64p2-3v2j)
medium
Vulnerable dependency: postcss@8.4.1 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.4.1 (GHSA-qx2v-qp2m-jg93)
medium
Vulnerable dependency: postcss@8.4.1 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-35jp-ww65-95wh)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-3g43-6gmg-66jw)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-3p68-rc4w-qgx5)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-3w6x-2g7m-8v23)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-42h9-826w-cgv3)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-43fc-jf86-j433)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-445q-vr5w-6q77)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-5c9x-8gcm-mpgx)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-62hf-57xw-28j9)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-6chq-wfr3-2hj9)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-777c-7fjr-54vf)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-7q8q-rj6j-mhjq)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-898c-q2cr-xwhg)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-fvcv-3m26-pcqx)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-hfxv-24rg-xrqf)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-j5f8-grm9-p9fc)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-jqh4-m9w3-8hp9)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-m7pr-hjqh-92cm)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-mmx7-hfxf-jppx)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-p92q-9vqr-4j8v)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-pf86-5x62-jrwf)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-pmv8-rq9r-6j72)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-pmwg-cvhr-8vh7)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-q8qp-cvcw-x6jj)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-vf2m-468p-8v99)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-w9j2-pvgh-6h63)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-xhjh-pmcv-23jw)
medium
Vulnerable dependency: axios@1.12.2 (GHSA-xx6v-rp6x-q39c)
medium
Vulnerable dependency: postcss@8.4.39 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8.4.39 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.4.39 (GHSA-qx2v-qp2m-jg93)
medium
Vulnerable dependency: postcss@8.4.39 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: vue@2.7.16 (GHSA-5j4c-8p2g-v4jx)
medium
Vulnerable dependency: esbuild@0.24.0 (GHSA-67mh-4wv8-2f99)
info
package.json metadata
info
Transport: stdio
info
Required env vars (4)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 220 components
high
Generic API Key Assignment found in dialpad-dialtone-fc01549/apps/dialtone-documentation/docs/.vuepress/theme/client.js
high
Hardcoded Password found in dialpad-dialtone-fc01549/packages/dialtone-vue/components/input/input_constants.js
medium
No build provenance detected (SLSA L0)