← Back to search

@foldkit/devtools-mcp

GitHub Actions Scanned 8d ago

MCP server exposing Foldkit DevTools to AI agents (Claude Code, Cursor, etc.)

npm ↗
C
69.8 / 100

Versions

0.14.0latest
Jul 27, 2026
0.13.4
Jul 24, 2026
0.13.3
Jul 20, 2026
0.13.2
Jul 14, 2026
0.13.1
Jul 3, 2026
+ show 22 moreshow less
0.13.0
Jun 24, 2026
0.12.0
Jun 16, 2026
0.11.1
Jun 15, 2026
0.11.0
Jun 13, 2026
0.10.1
Jun 10, 2026
0.10.0
Jun 7, 2026
0.9.1
Jun 4, 2026
0.9.0
May 31, 2026
0.8.1
May 20, 2026
0.8.0
May 17, 2026
0.7.0
May 17, 2026
0.6.2
May 16, 2026
0.6.1
May 11, 2026
0.6.0
May 9, 2026
0.5.1
May 8, 2026
0.5.0
May 8, 2026
0.4.0
May 6, 2026
0.3.0
May 3, 2026
0.2.0
Apr 28, 2026
0.1.2
Apr 28, 2026
0.1.1
Apr 28, 2026
0.1.0
Apr 28, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 8

arguments-omitted
annotations: none low

title-precedence
annotations: none low

schema-output
annotations: none low

Tool with an output schema

linked
annotations: none low

A linked fixture

LowLevelProtocolAdapterServer
annotations: none low

invalid-structured-content
annotations: none low

DefectTool
annotations: none low

A test resource template

GatedTool
annotations: none low

Permissions 4

network medium
Server uses network capabilities via: axios, fetch(), http
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 58

info
SBOM generated: 243 components sbom_generator · 100%
low
Tool 'GatedTool' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 390 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: image-size@2.0.2 (GHSA-5p2g-fcmc-qvqq) dependency_analyzer · 95%
medium
Vulnerable dependency: image-size@2.0.2 (GHSA-w3rx-r6r6-pgpr) dependency_analyzer · 95%
medium
Vulnerable dependency: effect@workspace:* (GHSA-38f7-945m-qr2g) dependency_analyzer · 95%
low
Tool 'arguments-omitted' has no annotations annotation_checker · 100%
low
Tool 'title-precedence' has no annotations annotation_checker · 100%
low
Tool 'schema-output' has no annotations annotation_checker · 100%
low
Tool 'linked' has no annotations annotation_checker · 100%
low
Tool 'LowLevelProtocolAdapterServer' has no annotations annotation_checker · 100%
low
Tool 'invalid-structured-content' has no annotations annotation_checker · 100%
low
Tool 'DefectTool' has no annotations annotation_checker · 100%
medium
Vulnerable dependency: hono@4.12.28 (GHSA-54fx-42gc-7vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.28 (GHSA-79qm-7rj5-m7r9) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.28 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.28 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
medium
Vulnerable dependency: effect@workspace:^ (GHSA-38f7-945m-qr2g) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.19 (GHSA-r292-9mhp-454m) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.7.0 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.7.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.7.0 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.7.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.7.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Buffer.from base64 in foldkit-foldkit-bf08957/packages/website/scripts/og-image.ts:295 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in foldkit-foldkit-bf08957/repos/effect/packages/platform/deno/test/DenoCrypto.test.ts:16 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in foldkit-foldkit-bf08957/repos/effect/packages/platform/node/test/NodeCrypto.test.ts:57 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in foldkit-foldkit-bf08957/repos/effect/packages/platform/node/test/MultipartParser.test.ts:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in foldkit-foldkit-bf08957/repos/effect/packages/platform/node/test/MultipartParser.test.ts:46 entropy_analyzer · 70%
info
Tool: DefectTool manifest_parser · 75%
medium
High-entropy string (6.15 bits/char) in foldkit-foldkit-bf08957/repos/effect/packages/effect/src/unstable/http/MultipartParser/internal/headers.ts:19 entropy_analyzer · 57%
medium
High-entropy string (7.17 bits/char) in foldkit-foldkit-bf08957/repos/effect/packages/effect/src/unstable/httpapi/internal/httpApiScalar.ts:5 entropy_analyzer · 72%
medium
High-entropy string (6.29 bits/char) in foldkit-foldkit-bf08957/repos/effect/packages/effect/src/unstable/httpapi/internal/httpApiScalar.ts:5 entropy_analyzer · 59%
medium
High-entropy string (6.02 bits/char) in foldkit-foldkit-bf08957/repos/effect/packages/effect/src/unstable/httpapi/internal/httpApiScalar.ts:5 entropy_analyzer · 55%
medium
High-entropy string (5.79 bits/char) in foldkit-foldkit-bf08957/repos/effect/packages/effect/src/unstable/httpapi/internal/httpApiScalar.ts:5 entropy_analyzer · 51%
medium
High-entropy string (5.75 bits/char) in foldkit-foldkit-bf08957/repos/effect/packages/effect/src/unstable/httpapi/internal/httpApiScalar.ts:5 entropy_analyzer · 51%
medium
High-entropy string (5.95 bits/char) in foldkit-foldkit-bf08957/repos/effect/packages/effect/src/unstable/httpapi/internal/httpApiSwagger.ts:5 entropy_analyzer · 54%
info
package.json metadata manifest_parser · 100%
info
Tool: arguments-omitted manifest_parser · 75%
info
Tool: title-precedence manifest_parser · 75%
info
Tool: schema-output manifest_parser · 75%
info
Tool: linked manifest_parser · 75%
info
Tool: LowLevelProtocolAdapterServer manifest_parser · 75%
info
Tool: invalid-structured-content manifest_parser · 75%
info
Tool: GatedTool manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (25) manifest_parser · 80%
high
Deprecated implicit grant flow in foldkit-foldkit-bf08957/repos/effect/packages/effect/src/unstable/httpapi/internal/httpApiScalar.ts oauth_scope_analyzer · 85%
high
Deprecated implicit grant flow in foldkit-foldkit-bf08957/repos/effect/packages/effect/src/unstable/httpapi/internal/httpApiSwagger.ts oauth_scope_analyzer · 85%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
high
Hardcoded Password found in foldkit-foldkit-bf08957/repos/effect/packages/effect/src/unstable/http/HttpMiddleware.ts secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%