← Back to search Server uses network capabilities via: fetch(), http, https, httpx, ws Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync() Server uses database capabilities via: asyncpg, pg, redis Server uses env_vars capabilities via: os.environ, process.env
io.github.butterbase-ai/mcp
Butterbase MCP server — manage your backend: schemas, auth, functions, storage, RAG, deploys.
D
40 / 100
Versions
1.0.0latestfirst seen Jun 5, 2026
Tools 4
my-blog annotations: verified low
region string organization_id string
readOnlyHint false openWorldHint true idempotentHint false destructiveHint false
send-welcome-email annotations: none low
GMAIL_SEND_EMAIL annotations: none low
Send an email
Free annotations: none low
Permissions 5
network medium filesystem low shell high database medium env_vars low Scan Findings 277
info
Tool 'my-blog' annotations are consistent
low
Tool 'send-welcome-email' has no annotations
low
Tool 'GMAIL_SEND_EMAIL' has no annotations
low
Tool 'Free' has no annotations
high
Hardcoded OAuth client secret in butterbase-ai-butterbase-0b9effc/tests/e2e/28-clone-replay-config.test.ts
high
Hardcoded OAuth client secret in butterbase-ai-butterbase-0b9effc/tests/e2e/helpers/kitchen-sink.ts
high
Hardcoded OAuth client ID in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/oauth-client-service.test.ts
high
Hardcoded OAuth client secret in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/__tests__/clone-replay-integrations.test.ts
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 145 direct dependencies
medium
Suspicious package name: react-dom
medium
Suspicious package name: react-markdown
medium
Suspicious package name: react-router
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-82fw-gwwq-j7x9)
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-qx2v-qp2m-jg93)
medium
Vulnerable dependency: postcss@8.4.38 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-356w-63v5-8wf4)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-4r4m-qw57-chr8)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-64vr-g452-qvp3)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-859w-5945-r5v3)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-93m4-6634-74q7)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-9cwx-2883-4wfx)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-c27g-q93r-2cwf)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-g4jq-h2w9-997c)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-jqfw-vq24-v9c3)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-vg6x-rcgg-rjx6)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-x574-m823-4x7w)
medium
Vulnerable dependency: vite@5.3.1 (GHSA-xcj6-pq6g-qj4x)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-2j2x-hqr9-3h42)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-2w69-qvjg-hvjx)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-337j-9hxr-rhxg)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-3cgp-3xvw-98x8)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-49rj-9fvp-4h2h)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-8v8x-cx79-35w7)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-8x6r-g9mw-2r78)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-9jcx-v3wj-wh4m)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-chx6-hx7r-mcp5)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-cpj6-fhp6-mr6j)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-h5cw-625j-3rxh)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-rxv8-25v2-qmq8)
medium
Vulnerable dependency: react-router@7.0.0 (GHSA-wrjc-x8rr-h8h6)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-7fh5-64p2-3v2j)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-qx2v-qp2m-jg93)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-356w-63v5-8wf4)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-4r4m-qw57-chr8)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-64vr-g452-qvp3)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-859w-5945-r5v3)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-93m4-6634-74q7)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-9cwx-2883-4wfx)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-c27g-q93r-2cwf)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-g4jq-h2w9-997c)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-jqfw-vq24-v9c3)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-vg6x-rcgg-rjx6)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-x574-m823-4x7w)
medium
Vulnerable dependency: vite@5.4.0 (GHSA-xcj6-pq6g-qj4x)
medium
Vulnerable dependency: postcss@8.5.15 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.5.15 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: vite@8.0.12 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@8.0.12 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vite@8.0.1 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@8.0.1 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@8.0.1 (GHSA-p9ff-h696-f583)
medium
Vulnerable dependency: vite@8.0.1 (GHSA-v2wj-q39q-566r)
medium
Vulnerable dependency: vite@8.0.1 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-345p-7cg4-v4c7)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-8r9q-7v3j-jr4g)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-w48q-cv73-mx4w)
medium
Vulnerable dependency: adm-zip@0.5.17 (GHSA-7q85-xj36-vmfc)
medium
Vulnerable dependency: adm-zip@0.5.17 (GHSA-vwc7-r8mq-g2x9)
medium
Vulnerable dependency: adm-zip@0.5.17 (GHSA-xcpc-8h2w-3j85)
medium
Vulnerable dependency: vitest@3.1.1 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@3.1.1 (GHSA-82fw-gwwq-j7x9)
medium
Vulnerable dependency: adm-zip@0.5.16 (GHSA-7q85-xj36-vmfc)
medium
Vulnerable dependency: adm-zip@0.5.16 (GHSA-vwc7-r8mq-g2x9)
medium
Vulnerable dependency: adm-zip@0.5.16 (GHSA-xcpc-8h2w-3j85)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-82fw-gwwq-j7x9)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-26w7-cxv4-gfx2)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-2pvr-wf23-7pc7)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-376h-93r7-7g6f)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-4g3v-8h47-v7g6)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-5ff5-9fcw-vg88)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-7pw4-f3q4-r2p2)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-8hv8-536x-4wqp)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-cq8c-xv66-36gw)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-f48w-9m4c-m7f5)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-fvmw-cj7j-j39q)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-g735-7g2w-hh3f)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-ggxq-hp9w-j794)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-hr2q-hp5q-x767)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-j687-52p2-xcff)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-jrpj-wcv7-9fh9)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-w2vj-39qv-7vh7)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-whqg-ppgf-wp8c)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-wrwg-2hg8-v723)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-x3h8-62x9-952g)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-xf8x-j4p2-f749)
medium
Vulnerable dependency: astro@5.7.10 (GHSA-xr5h-phrj-8vxv)
medium
Vulnerable dependency: sharp@0.33.0 (GHSA-f88m-g3jw-g9cj)
medium
Vulnerable dependency: sharp@0.33.0 (GHSA-rgj7-g3m4-5g8c)
medium
Vulnerable dependency: wrangler@3.80.0 (GHSA-36p8-mvp6-cv38)
medium
Vulnerable dependency: csv-parse@5.6.0 (GHSA-8cw4-87c7-c6xx)
medium
Vulnerable dependency: fastify@5.3.3 (GHSA-247c-9743-5963)
medium
Vulnerable dependency: fastify@5.3.3 (GHSA-444r-cwp2-x5xf)
medium
Vulnerable dependency: fastify@5.3.3 (GHSA-jx2c-rxcm-jvmq)
medium
Vulnerable dependency: fastify@5.3.3 (GHSA-mrq3-vjjr-p77c)
medium
Vulnerable dependency: fastify@5.3.3 (GHSA-w2qp-rph6-63g4)
medium
Vulnerable dependency: nanoid@5.1.5 (GHSA-28wg-ghj8-5hjv)
medium
Vulnerable dependency: nanoid@5.1.5 (GHSA-2v37-7h3g-55p8)
medium
Vulnerable dependency: nanoid@5.1.5 (GHSA-xwg4-73v4-xw9w)
medium
Vulnerable dependency: xlsx@0.18.5 (GHSA-4r6h-8v6p-xvw6)
medium
Vulnerable dependency: xlsx@0.18.5 (GHSA-5pgg-2g8v-p4x9)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-23hp-3jrh-7fpw)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-34x7-hfp2-rc4v)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-83g3-92jg-28cx)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-8qq5-rm4j-mr97)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-8x88-c5mf-7j5w)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-9ppj-qmqm-q256)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-gvwx-54wh-qm9j)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-qffp-2rhf-9h96)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-r292-9mhp-454m)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-r6q2-hw4h-h46w)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-vmf3-w455-68vh)
medium
Vulnerable dependency: tar@7.4.3 (GHSA-w8wr-v893-vjvp)
medium
Vulnerable dependency: next@14.2.35 (GHSA-2xp9-vwfh-vxw4)
medium
Vulnerable dependency: next@14.2.35 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@14.2.35 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@14.2.35 (GHSA-3x4c-7xq6-9pq8)
medium
Vulnerable dependency: next@14.2.35 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@14.2.35 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@14.2.35 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@14.2.35 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@14.2.35 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@14.2.35 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@14.2.35 (GHSA-9g9p-9gw9-jx7f)
medium
Vulnerable dependency: next@14.2.35 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@14.2.35 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@14.2.35 (GHSA-ggv3-7p47-pfv8)
medium
Vulnerable dependency: next@14.2.35 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@14.2.35 (GHSA-h25m-26qc-wcjf)
medium
Vulnerable dependency: next@14.2.35 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@14.2.35 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@14.2.35 (GHSA-p293-qw3h-jr36)
medium
Vulnerable dependency: next@14.2.35 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@14.2.35 (GHSA-q4gf-8mx6-v5v3)
medium
Vulnerable dependency: next@14.2.35 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@14.2.35 (GHSA-wfc6-r584-vfw7)
medium
Vulnerable dependency: dnspython@2.6 (GHSA-3rq5-2g8h-59hc)
medium
Vulnerable dependency: dnspython@2.6 (PYSEC-2026-1307)
medium
Vulnerable dependency: mcp@1.10,<2.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.10,<2.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.10,<2.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: mcp@1.10,<2.0 (GHSA-jpw9-pfvf-9f58)
medium
Vulnerable dependency: mcp@1.10,<2.0 (GHSA-vj7q-gjh5-988w)
medium
Vulnerable dependency: mcp@1.10,<2.0 (PYSEC-2026-1616)
medium
Vulnerable dependency: mcp@1.10,<2.0 (PYSEC-2026-1617)
medium
Vulnerable dependency: mcp@1.10,<2.0 (PYSEC-2026-1618)
medium
Vulnerable dependency: mcp@1.10,<2.0 (PYSEC-2026-3482)
medium
Vulnerable dependency: mcp@1.10,<2.0 (PYSEC-2026-3483)
medium
Vulnerable dependency: cryptography@42 (GHSA-537c-gmf6-5ccf)
medium
Vulnerable dependency: cryptography@42 (GHSA-6vqw-3v5j-54x4)
medium
Vulnerable dependency: cryptography@42 (GHSA-79v4-65xg-pq4g)
medium
Vulnerable dependency: cryptography@42 (GHSA-9v9h-cgj8-h64p)
medium
Vulnerable dependency: cryptography@42 (GHSA-h4gh-qq45-vh27)
medium
Vulnerable dependency: cryptography@42 (GHSA-jwv3-5hgf-82ww)
medium
Vulnerable dependency: cryptography@42 (GHSA-m959-cc7f-wv43)
medium
Vulnerable dependency: cryptography@42 (GHSA-r6ph-v2qm-q3c2)
medium
Vulnerable dependency: cryptography@42 (PYSEC-2024-225)
medium
Vulnerable dependency: cryptography@42 (PYSEC-2026-1284)
medium
Vulnerable dependency: cryptography@42 (PYSEC-2026-1285)
medium
Vulnerable dependency: cryptography@42 (PYSEC-2026-2141)
medium
Vulnerable dependency: cryptography@42 (PYSEC-2026-35)
medium
Vulnerable dependency: cryptography@42 (PYSEC-2026-3553)
medium
Vulnerable dependency: cryptography@42 (PYSEC-2026-3554)
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/deno-runtime/crypto.ts:42
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/deno-runtime/crypto.ts:43
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/deno-runtime/crypto.ts:44
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/mcp-server/src/tools/manage-repo.ts:141
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/config.ts:52
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/routes/ai-meetings.test.ts:33
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/routes/realtime.ts:167
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/plugins/auth.ts:285
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/crypto.ts:38
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/crypto.ts:39
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/crypto.test.ts:26
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/crypto.test.ts:36
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/crypto.test.ts:49
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/agent-public.test.ts:1
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/partner-pools-admin.test.ts:7
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/clone-routes.test.ts:45
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/agents-cancel-resume.test.ts:1
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/agent-runs.test.ts:1
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/clone-webhook-store.test.ts:4
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/agents.test.ts:1
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/clone-intents.test.ts:3
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/clone-preflight-route.test.ts:10
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/start-clone.test.ts:3
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/clone-webhook-sweeper.test.ts:21
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/clone-intent-redeem.test.ts:5
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/clone-intent-route.test.ts:5
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/internal-agent-tools.test.ts:2
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/agent-events-list.test.ts:1
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/partner-proxy-forwarder.test.ts:9
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/partner-proxy-pool.test.ts:14
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/__tests__/partner-proxy-route.test.ts:12
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/auth/crypto.ts:38
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/auth/crypto.ts:39
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/auth/crypto.test.ts:16
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/auth/crypto.test.ts:26
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/auth/crypto.test.ts:37
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/dashboard-agent/operator-credential.ts:64
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/dashboard-agent/operator-credential.ts:71
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/dashboard-agent/operator-credential.ts:77
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/move-app/kv-dump-format.ts:27
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/__tests__/deployment.wfp.test.ts:5
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/__tests__/deployment.wfp.test.ts:28
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/__tests__/deployment.wfp.test.ts:162
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/__tests__/edge-ssr-deployment.test.ts:5
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/__tests__/edge-ssr-deployment.test.ts:27
medium
Hex string literal (>50 chars) in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/__tests__/durable-objects.service.test.ts:1
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/agent-tools/builtin-dispatcher.ts:266
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/dashboard-agent/__tests__/repo-sync.test.ts:111
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/dashboard-agent/__tests__/repo-sync.test.ts:114
medium
Buffer.from base64 in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/dashboard-agent/__tests__/operator-credential.test.ts:95
info
package.json metadata
info
pyproject.toml metadata
info
Tool: my-blog
info
Tool: send-welcome-email
info
Tool: GMAIL_SEND_EMAIL
info
Tool: Free
info
Transport: streamable-http
info
Required env vars (247)
medium
Hardcoded OAuth client ID in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/oauth-client-service.test.ts
high
Deprecated implicit grant flow in butterbase-ai-butterbase-0b9effc/services/control-api/src/routes/__tests__/oauth.test.ts
high
High-risk OAuth scope: admin
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 2267 components
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/CONTRIBUTING.md
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/SETUP.md
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/.env.production.example
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/README.md
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/docker-compose.local.yml
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/scripts/seed-dev-user.ts
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/scripts/seed-operator-credential.ts
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/scripts/backfill-migrations.ts
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/scripts/verify-account-deletion-cascade.ts
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/db/control-plane/migrate.ts
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/services/agent-runtime/README.md
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/services/deno-runtime/worker-executor.ts
critical
RSA Private Key found in butterbase-ai-butterbase-0b9effc/services/mcp-server/src/docs/user-documentation.ts
high
Hardcoded Password found in butterbase-ai-butterbase-0b9effc/services/mcp-server/src/docs/user-documentation.ts
critical
RSA Private Key found in butterbase-ai-butterbase-0b9effc/services/docs/src/content/docs/api-reference/auth-api.md
high
Hardcoded Password found in butterbase-ai-butterbase-0b9effc/services/docs/src/content/docs/sdks-and-tools/typescript-sdk.md
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/services/control-api/src/config.ts
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/provisioner.ts
critical
Database URL with Password found in butterbase-ai-butterbase-0b9effc/services/control-api/src/services/neon-task-worker.ts
high
Hardcoded Password found in butterbase-ai-butterbase-0b9effc/packages/sdk/README.md
high
Generic API Key Assignment found in butterbase-ai-butterbase-0b9effc/packages/shared/src/error-types.ts
medium
No build provenance detected (SLSA L0)