← Back to search

io.github.cyanheads/mcp-ts-core

cyanheads Scanned 22d ago

Agent-native TypeScript framework for building MCP servers. Declarative definitions with auth, multi-backend storage, OpenTelemetry, and first-class support for Bun/Node/Cloudflare Workers.

MCP Registry ↗ npm ↗
B
81.5 / 100

Versions

0.11.0latest
Jul 26, 2026
0.10.17
Jul 26, 2026
0.10.16
Jul 26, 2026
0.10.15
Jul 19, 2026
0.10.14
Jul 6, 2026
+ show 140 moreshow less
0.10.13
Jul 5, 2026
0.10.12
Jul 5, 2026
0.10.11
Jul 5, 2026
0.10.10
Jun 30, 2026
0.10.9
Jun 20, 2026
0.10.8
Jun 19, 2026
0.10.7
Jun 19, 2026
0.10.6
Jun 11, 2026
0.10.5
Jun 11, 2026
0.10.4
Jun 11, 2026
0.10.3
Jun 10, 2026
0.10.2
Jun 10, 2026
0.10.1
Jun 8, 2026
0.10.0
Jun 5, 2026
0.9.21
Jun 2, 2026
0.9.20
Jun 2, 2026
0.9.19
May 31, 2026
0.9.18
May 31, 2026
0.9.17
May 31, 2026
0.9.16
May 30, 2026
0.9.15
May 30, 2026
0.9.14
May 29, 2026
0.9.13
May 29, 2026
0.9.12
May 29, 2026
0.9.11
May 28, 2026
0.9.10
May 27, 2026
0.9.9
May 24, 2026
0.9.8
May 24, 2026
0.9.7
May 23, 2026
0.9.6
May 23, 2026
0.9.5
May 23, 2026
0.9.4
May 23, 2026
0.9.3
May 23, 2026
0.9.2
May 23, 2026
0.9.1
May 15, 2026
0.9.0
May 11, 2026
0.8.20
May 9, 2026
0.8.19
May 8, 2026
0.8.18
May 7, 2026
0.8.17
May 6, 2026
0.8.16
May 5, 2026
0.8.15
May 5, 2026
0.8.14
May 5, 2026
0.8.13
May 3, 2026
0.8.12
May 3, 2026
0.8.11
May 3, 2026
0.8.10
May 2, 2026
0.8.9
May 2, 2026
0.8.8
May 1, 2026
0.8.7
Apr 30, 2026
0.8.6
Apr 29, 2026
0.8.5
Apr 29, 2026
0.8.4
Apr 29, 2026
0.8.3
Apr 29, 2026
0.8.2
Apr 28, 2026
0.8.1
Apr 28, 2026
0.8.0
Apr 28, 2026
0.7.6
Apr 27, 2026
0.7.5
Apr 26, 2026
0.7.4
Apr 24, 2026
0.7.3
Apr 24, 2026
0.7.2
Apr 24, 2026
0.7.1
Apr 24, 2026
0.7.0
Apr 24, 2026
0.6.17
Apr 24, 2026
0.6.16
Apr 24, 2026
0.6.15
Apr 24, 2026
0.6.14
Apr 23, 2026
0.6.13
Apr 23, 2026
0.6.12
Apr 23, 2026
0.6.11
Apr 23, 2026
0.6.10
Apr 23, 2026
0.6.9
Apr 22, 2026
0.6.8
Apr 22, 2026
0.6.7
Apr 22, 2026
0.6.6
Apr 22, 2026
0.6.5
Apr 22, 2026
0.6.3
Apr 21, 2026
0.6.2
Apr 21, 2026
0.6.1
Apr 21, 2026
0.6.0
Apr 21, 2026
0.5.4
Apr 21, 2026
0.5.3
Apr 21, 2026
0.5.2
Apr 21, 2026
0.5.0
Apr 20, 2026
0.4.1
Apr 19, 2026
0.4.0
Apr 19, 2026
0.3.8
Apr 19, 2026
0.3.7
Apr 19, 2026
0.3.6
Apr 19, 2026
0.3.5
Apr 13, 2026
0.3.4
Apr 9, 2026
0.3.3
Apr 8, 2026
0.3.2
Apr 6, 2026
0.3.1
Apr 6, 2026
0.3.0
Apr 6, 2026
0.2.12
Apr 3, 2026
0.2.11
Apr 1, 2026
0.2.10
Mar 30, 2026
0.2.9
Mar 30, 2026
0.2.8
Mar 28, 2026
0.2.7
Mar 28, 2026
0.2.6
Mar 28, 2026
0.2.5
Mar 28, 2026
0.2.4
Mar 28, 2026
0.2.3
Mar 28, 2026
0.2.2
Mar 26, 2026
0.2.1
Mar 25, 2026
0.2.0
Mar 25, 2026
0.1.29
Mar 24, 2026
0.1.28
Mar 23, 2026
0.1.27
Mar 23, 2026
0.1.26
Mar 23, 2026
0.1.25
Mar 22, 2026
0.1.24
Mar 22, 2026
0.1.23
Mar 22, 2026
0.1.22
Mar 22, 2026
0.1.21
Mar 21, 2026
0.1.20
Mar 21, 2026
0.1.19
Mar 21, 2026
0.1.18
Mar 21, 2026
0.1.16
Mar 21, 2026
0.1.15
Mar 21, 2026
0.1.12
Mar 20, 2026
0.1.11
Mar 20, 2026
0.1.10
Mar 20, 2026
0.1.9
Mar 20, 2026
0.1.8
Mar 20, 2026
0.1.5
Mar 15, 2026
0.1.4
Mar 15, 2026
0.1.2
Mar 15, 2026
0.1.1
Mar 15, 2026
0.1.0
Mar 14, 2026
0.1.0-beta.25
Mar 14, 2026
0.1.0-beta.24
Mar 14, 2026
0.1.0-beta.19
Mar 14, 2026
0.1.0-beta.16
Mar 12, 2026
0.1.0-beta.15
Mar 12, 2026
0.1.0-beta.14
Mar 12, 2026
0.1.0-beta.12
Mar 12, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 9

pubmed_fetch_articles
annotations: none low

my_tool
annotations: none low

Does something useful.

id string input object items array query string output object
brapi_submit_observations
annotations: none low

fetch_articles
annotations: none low

reason enum
template_madlibs_elicitation
annotations: verified low

Combine a noun, verb, and adjective into a one-line Mad Libs story. Any parts of speech omitted from the input are requested from the user during execution.

readOnlyHint true openWorldHint false
template_data_explorer
annotations: verified low

Generate sample sales data and render an interactive table. Users can sort columns, filter rows, and select entries from the UI. Falls back to a plain text table where interactive UI is not available.

readOnlyHint true openWorldHint false
template_echo_message
annotations: verified low

Echo a message back with optional formatting and repetition.

readOnlyHint true openWorldHint false
template_cat_fact
annotations: verified low

Fetch a random cat fact from a public API. Optionally cap its character length.

readOnlyHint true openWorldHint true
template_image_test
annotations: verified low

Fetch a random cat image and return it base64-encoded with its MIME type.

readOnlyHint true openWorldHint true

Permissions 3

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, path
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 33

low
Tool 'pubmed_fetch_articles' has no annotations annotation_checker · 100%
low
Tool 'my_tool' has no annotations annotation_checker · 100%
low
Tool 'brapi_submit_observations' has no annotations annotation_checker · 100%
low
Tool 'fetch_articles' has no annotations annotation_checker · 100%
info
Tool 'template_madlibs_elicitation' annotations are consistent annotation_checker · 80%
info
Tool 'template_data_explorer' annotations are consistent annotation_checker · 80%
info
Tool 'template_echo_message' annotations are consistent annotation_checker · 80%
info
Tool 'template_cat_fact' annotations are consistent annotation_checker · 80%
info
Tool 'template_image_test' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: zod@{{ZOD_VERSION}} (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
High-entropy string (6.00 bits/char) in cyanheads-mcp-ts-core-59f4176/src/services/canvas/core/CanvasRegistry.ts:35 entropy_analyzer · 54%
medium
Buffer.from base64 in cyanheads-mcp-ts-core-59f4176/src/utils/internal/encoding.ts:70 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: pubmed_fetch_articles manifest_parser · 75%
info
Tool: my_tool manifest_parser · 75%
info
Tool: brapi_submit_observations manifest_parser · 75%
info
Tool: fetch_articles manifest_parser · 75%
info
Tool: template_madlibs_elicitation manifest_parser · 75%
info
Tool: template_data_explorer manifest_parser · 75%
info
Tool: template_echo_message manifest_parser · 75%
info
Tool: template_cat_fact manifest_parser · 75%
info
Tool: template_image_test manifest_parser · 75%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (16) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 65 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-mcp-ts-core-59f4176/src/utils/security/sanitization.ts secret_scanner · 65%
high
Hardcoded Password found in cyanheads-mcp-ts-core-59f4176/framework-skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%