← Back to search

io.github.CodeAlive-AI/codealive-mcp

CodeAlive-AI Scanned 1d ago

Semantic code search and analysis from CodeAlive for AI assistants and agents.

MCP Registry ↗
? Not scanned yet

Versions

0.3.0latest
first seen Jun 5, 2026
2.0.5
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 3

network medium
Server uses network capabilities via: http, httpx, urllib
filesystem low
Server uses filesystem capabilities via: os, pathlib
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 16

info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Hardcoded OAuth client ID in CodeAlive-AI-codealive-mcp-16cc4c8/src/tests/test_review_catalog.py auth_checker · 85%
high
Hardcoded OAuth client secret in CodeAlive-AI-codealive-mcp-16cc4c8/src/tests/test_review_catalog.py auth_checker · 95%
high
Hardcoded OAuth client ID in CodeAlive-AI-codealive-mcp-16cc4c8/src/tests/test_oauth.py auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (26) manifest_parser · 80%
medium
Hardcoded OAuth client ID in CodeAlive-AI-codealive-mcp-16cc4c8/src/tests/test_review_catalog.py oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in CodeAlive-AI-codealive-mcp-16cc4c8/src/tests/test_oauth.py oauth_scope_analyzer · 80%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
high
Authorization Bearer Token found in CodeAlive-AI-codealive-mcp-16cc4c8/.github/workflows/release.yml secret_scanner · 70%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%