← Back to search

io.github.cyanheads/mcp-ts-core

cyanheads Scanned 5d ago

Agent-native TypeScript framework for building MCP servers. Declarative definitions with auth, multi-backend storage, OpenTelemetry, and first-class support for Bun/Node/Cloudflare Workers.

MCP Registry ↗ npm ↗
? Not scanned yet

Versions

0.11.0latest
Jul 26, 2026
0.10.17
Jul 26, 2026
0.10.16
Jul 26, 2026
0.10.15
Jul 19, 2026
0.10.14
Jul 6, 2026
+ show 140 moreshow less
0.10.13
Jul 5, 2026
0.10.12
Jul 5, 2026
0.10.11
Jul 5, 2026
0.10.10
Jun 30, 2026
0.10.9
Jun 20, 2026
0.10.8
Jun 19, 2026
0.10.7
Jun 19, 2026
0.10.6
Jun 11, 2026
0.10.5
Jun 11, 2026
0.10.4
Jun 11, 2026
0.10.3
Jun 10, 2026
0.10.2
Jun 10, 2026
0.10.1
Jun 8, 2026
0.10.0
Jun 5, 2026
0.9.21
Jun 2, 2026
0.9.20
Jun 2, 2026
0.9.19
May 31, 2026
0.9.18
May 31, 2026
0.9.17
May 31, 2026
0.9.16
May 30, 2026
0.9.15
May 30, 2026
0.9.14
May 29, 2026
0.9.13
May 29, 2026
0.9.12
May 29, 2026
0.9.11
May 28, 2026
0.9.10
May 27, 2026
0.9.9
May 24, 2026
0.9.8
May 24, 2026
0.9.7
May 23, 2026
0.9.6
May 23, 2026
0.9.5
May 23, 2026
0.9.4
May 23, 2026
0.9.3
May 23, 2026
0.9.2
May 23, 2026
0.9.1
May 15, 2026
0.9.0
May 11, 2026
0.8.20
May 9, 2026
0.8.19
May 8, 2026
0.8.18
May 7, 2026
0.8.17
May 6, 2026
0.8.16
May 5, 2026
0.8.15
May 5, 2026
0.8.14
May 5, 2026
0.8.13
May 3, 2026
0.8.12
May 3, 2026
0.8.11
May 3, 2026
0.8.10
May 2, 2026
0.8.9
May 2, 2026
0.8.8
May 1, 2026
0.8.7
Apr 30, 2026
0.8.6
Apr 29, 2026
0.8.5
Apr 29, 2026
0.8.4
Apr 29, 2026
0.8.3
Apr 29, 2026
0.8.2
Apr 28, 2026
0.8.1
Apr 28, 2026
0.8.0
Apr 28, 2026
0.7.6
Apr 27, 2026
0.7.5
Apr 26, 2026
0.7.4
Apr 24, 2026
0.7.3
Apr 24, 2026
0.7.2
Apr 24, 2026
0.7.1
Apr 24, 2026
0.7.0
Apr 24, 2026
0.6.17
Apr 24, 2026
0.6.16
Apr 24, 2026
0.6.15
Apr 24, 2026
0.6.14
Apr 23, 2026
0.6.13
Apr 23, 2026
0.6.12
Apr 23, 2026
0.6.11
Apr 23, 2026
0.6.10
Apr 23, 2026
0.6.9
Apr 22, 2026
0.6.8
Apr 22, 2026
0.6.7
Apr 22, 2026
0.6.6
Apr 22, 2026
0.6.5
Apr 22, 2026
0.6.3
Apr 21, 2026
0.6.2
Apr 21, 2026
0.6.1
Apr 21, 2026
0.6.0
Apr 21, 2026
0.5.4
Apr 21, 2026
0.5.3
Apr 21, 2026
0.5.2
Apr 21, 2026
0.5.0
Apr 20, 2026
0.4.1
Apr 19, 2026
0.4.0
Apr 19, 2026
0.3.8
Apr 19, 2026
0.3.7
Apr 19, 2026
0.3.6
Apr 19, 2026
0.3.5
Apr 13, 2026
0.3.4
Apr 9, 2026
0.3.3
Apr 8, 2026
0.3.2
Apr 6, 2026
0.3.1
Apr 6, 2026
0.3.0
Apr 6, 2026
0.2.12
Apr 3, 2026
0.2.11
Apr 1, 2026
0.2.10
Mar 30, 2026
0.2.9
Mar 30, 2026
0.2.8
Mar 28, 2026
0.2.7
Mar 28, 2026
0.2.6
Mar 28, 2026
0.2.5
Mar 28, 2026
0.2.4
Mar 28, 2026
0.2.3
Mar 28, 2026
0.2.2
Mar 26, 2026
0.2.1
Mar 25, 2026
0.2.0
Mar 25, 2026
0.1.29
Mar 24, 2026
0.1.28
Mar 23, 2026
0.1.27
Mar 23, 2026
0.1.26
Mar 23, 2026
0.1.25
Mar 22, 2026
0.1.24
Mar 22, 2026
0.1.23
Mar 22, 2026
0.1.22
Mar 22, 2026
0.1.21
Mar 21, 2026
0.1.20
Mar 21, 2026
0.1.19
Mar 21, 2026
0.1.18
Mar 21, 2026
0.1.16
Mar 21, 2026
0.1.15
Mar 21, 2026
0.1.12
Mar 20, 2026
0.1.11
Mar 20, 2026
0.1.10
Mar 20, 2026
0.1.9
Mar 20, 2026
0.1.8
Mar 20, 2026
0.1.5
Mar 15, 2026
0.1.4
Mar 15, 2026
0.1.2
Mar 15, 2026
0.1.1
Mar 15, 2026
0.1.0
Mar 14, 2026
0.1.0-beta.25
Mar 14, 2026
0.1.0-beta.24
Mar 14, 2026
0.1.0-beta.19
Mar 14, 2026
0.1.0-beta.16
Mar 12, 2026
0.1.0-beta.15
Mar 12, 2026
0.1.0-beta.14
Mar 12, 2026
0.1.0-beta.12
Mar 12, 2026

Tools 0

No tools indexed yet.

Permissions 3

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, path
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 15

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: zod@{{ZOD_VERSION}} (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
High-entropy string (6.00 bits/char) in cyanheads-mcp-ts-core-8b14ca6/src/services/canvas/core/CanvasRegistry.ts:26 entropy_analyzer · 54%
medium
Buffer.from base64 in cyanheads-mcp-ts-core-8b14ca6/src/utils/internal/encoding.ts:70 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (15) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 67 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-mcp-ts-core-8b14ca6/skills/api-utils/references/security.md secret_scanner · 65%
high
Hardcoded Password found in cyanheads-mcp-ts-core-8b14ca6/src/utils/security/sanitization.ts secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%