← Back to search

fastify-mcp-server

GitHub Actions Scanned 27d ago

Easily spin up Model Context Protocol (MCP) servers using Fastify

npm ↗
B
77.7 / 100

Versions

0.7.2latest
Dec 28, 2025
0.7.1
Dec 28, 2025
0.7.0
Dec 27, 2025
0.6.0
Dec 22, 2025
0.5.0
Oct 9, 2025
+ show 6 moreshow less
0.4.1
Aug 3, 2025
0.4.0
Jun 20, 2025
0.3.0
Jun 20, 2025
0.2.1
Jun 18, 2025
0.2.0
Jun 18, 2025
0.1.0
Jun 18, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

echo
annotations: none low

confirm
annotations: none low

regional
annotations: none low

wait
annotations: none low

get-datetime
annotations: none low

Get the current date and time

example-auth-tool
annotations: none low

Demo requiring a validated bearer token

Permissions 1

network medium
Server uses network capabilities via: fetch()

Scan Findings 25

low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'confirm' has no annotations annotation_checker · 100%
low
Tool 'regional' has no annotations annotation_checker · 100%
low
Tool 'wait' has no annotations annotation_checker · 100%
low
Tool 'get-datetime' has no annotations annotation_checker · 100%
low
Tool 'example-auth-tool' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastify@5.6.2 (GHSA-247c-9743-5963) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.6.2 (GHSA-444r-cwp2-x5xf) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.6.2 (GHSA-jx2c-rxcm-jvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.6.2 (GHSA-mrq3-vjjr-p77c) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.6.2 (GHSA-w2qp-rph6-63g4) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: echo manifest_parser · 85%
info
Tool: confirm manifest_parser · 85%
info
Tool: regional manifest_parser · 85%
info
Tool: wait manifest_parser · 85%
info
Tool: get-datetime manifest_parser · 85%
info
Tool: example-auth-tool manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
info
SBOM generated: 489 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%