← Back to search

freee-mcp

GitHub Actions Scanned 25d ago

Model Context Protocol (MCP) server for freee API integration

npm ↗
C
65.4 / 100

Versions

0.32.1latest
Jul 31, 2026
0.32.0
Jul 30, 2026
0.31.0
Jul 23, 2026
0.30.4
Jul 10, 2026
0.30.3
Jun 29, 2026
+ show 49 moreshow less
0.30.2
Jun 23, 2026
0.30.1
Jun 17, 2026
0.30.0
Jun 10, 2026
0.29.0
Jun 4, 2026
0.28.0
Jun 3, 2026
0.27.1
Jun 2, 2026
0.27.0
May 29, 2026
0.26.7
May 18, 2026
0.26.6
May 11, 2026
0.26.5
May 9, 2026
0.26.4
May 8, 2026
0.26.2
May 8, 2026
0.26.0
Apr 30, 2026
0.25.5
Apr 30, 2026
0.25.4
Apr 27, 2026
0.25.3
Apr 27, 2026
0.25.2
Apr 27, 2026
0.25.0
Apr 22, 2026
0.24.0
Apr 16, 2026
0.23.0
Apr 13, 2026
0.22.1
Apr 9, 2026
0.22.0
Apr 9, 2026
0.21.1
Apr 8, 2026
0.21.0
Apr 8, 2026
0.20.0
Apr 6, 2026
0.19.1
Apr 6, 2026
0.19.0
Apr 6, 2026
0.18.0
Apr 3, 2026
0.17.1
Mar 31, 2026
0.17.0
Mar 29, 2026
0.16.0
Mar 27, 2026
0.15.2
Mar 27, 2026
0.15.1
Mar 26, 2026
0.15.0
Mar 24, 2026
0.14.0
Mar 21, 2026
0.13.1
Mar 21, 2026
0.13.0
Mar 19, 2026
0.12.1
Mar 16, 2026
0.12.0
Mar 13, 2026
0.11.2
Mar 12, 2026
0.11.1
Mar 11, 2026
0.11.0
Mar 11, 2026
0.10.0
Mar 10, 2026
0.9.1
Mar 4, 2026
0.9.0
Mar 4, 2026
0.8.1
Mar 1, 2026
0.7.3
Feb 26, 2026
0.7.2
Feb 24, 2026
0.7.0
Feb 24, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

sign_server_info
annotations: verified low

freee-sign-mcp サーバーの情報を取得

readOnlyHint true openWorldHint false
with_body
annotations: none low

sign_authenticate
annotations: verified low

freee サイン OAuth認証を開始（初回のみ必要）

readOnlyHint true destructiveHint false
sign_auth_status
annotations: verified low

freee サインの認証状態を確認

readOnlyHint true destructiveHint true
sign_clear_auth
annotations: verified low

freee サインの認証情報をクリア

destructiveHint true

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 45

info
Tool 'sign_clear_auth' annotations are consistent annotation_checker · 80%
info
Tool 'sign_server_info' annotations are consistent annotation_checker · 80%
low
Tool 'with_body' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/vitest.config.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/mcp/tools.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/auth/oauth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/auth/tokens.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/auth/refresh-raw.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/sign/oauth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/sign/tokens.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/sign/config.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/storage/redis-token-store.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/e2e/configure.e2e.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/e2e/auth-flow.e2e.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/config/companies.test.ts auth_checker · 95%
info
Tool 'sign_authenticate' annotations are consistent annotation_checker · 80%
info
Tool 'sign_auth_status' annotations are consistent annotation_checker · 80%
info
Tool: sign_clear_auth manifest_parser · 85%
info
Tool: sign_server_info manifest_parser · 85%
info
Tool: with_body manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (48) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/server/client-auth-basic.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/server/rate-limit.integration.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/server/auth-basic.integration.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/sign/server/sign-redis-token-store.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in freee-freee-mcp-687c167/src/sign/server/sign-auth-basic.integration.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @opentelemetry/core@2.7.1 (GHSA-8988-4f7v-96qf) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
High-entropy string (5.78 bits/char) in freee-freee-mcp-687c167/scripts/generate-references.ts:592 entropy_analyzer · 51%
medium
Buffer.from base64 in freee-freee-mcp-687c167/src/e2e/client-mode.e2e.test.ts:480 entropy_analyzer · 75%
medium
Buffer.from base64 in freee-freee-mcp-687c167/src/server/client-auth-basic.ts:80 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: sign_authenticate manifest_parser · 85%
info
Tool: sign_auth_status manifest_parser · 85%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 36 components sbom_generator · 100%
high
Generic API Key Assignment found in freee-freee-mcp-687c167/scripts/generate-references.ts secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%