← Back to search Server uses network capabilities via: fetch(), https Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync() Server uses env_vars capabilities via: process.env
@dinanathdash/envault-mcp-server
MCP server for Envault CLI operations
? Not scanned yet
Versions
1.12.0latestApr 21, 2026
1.11.0Apr 21, 2026
1.10.0Apr 21, 2026
1.9.0Apr 12, 2026
1.8.0Apr 5, 2026
+ show 11 moreshow less
1.7.0Apr 5, 2026
1.6.0Apr 5, 2026
1.5.0Apr 5, 2026
1.4.0Apr 5, 2026
1.3.0Apr 5, 2026
1.2.0Apr 4, 2026
1.1.1Apr 4, 2026
1.1.0Apr 4, 2026
1.0.4Apr 3, 2026
1.0.3Apr 3, 2026
1.0.2Apr 3, 2026
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 69
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 112 direct dependencies
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: mermaid@10.9.6 (GHSA-2v8p-3f2j-5mp7)
medium
Vulnerable dependency: mermaid@10.9.6 (GHSA-6x64-9x62-f2gx)
medium
Vulnerable dependency: mermaid@10.9.6 (GHSA-c4c3-pg64-4m4v)
medium
Vulnerable dependency: next@16.1.6 (GHSA-267c-6grr-h53f)
medium
Vulnerable dependency: next@16.1.6 (GHSA-26hh-7cqf-hhc6)
medium
Vulnerable dependency: next@16.1.6 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@16.1.6 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@16.1.6 (GHSA-3x4c-7xq6-9pq8)
medium
Vulnerable dependency: next@16.1.6 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@16.1.6 (GHSA-492v-c6pp-mqqv)
medium
Vulnerable dependency: next@16.1.6 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@16.1.6 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@16.1.6 (GHSA-6gpp-xcg3-4w24)
medium
Vulnerable dependency: next@16.1.6 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@16.1.6 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@16.1.6 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@16.1.6 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@16.1.6 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@16.1.6 (GHSA-ggv3-7p47-pfv8)
medium
Vulnerable dependency: next@16.1.6 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@16.1.6 (GHSA-h27x-g6w4-24gq)
medium
Vulnerable dependency: next@16.1.6 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@16.1.6 (GHSA-jcc7-9wpm-mj36)
medium
Vulnerable dependency: next@16.1.6 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@16.1.6 (GHSA-mg66-mrh9-m8jx)
medium
Vulnerable dependency: next@16.1.6 (GHSA-mq59-m269-xvcx)
medium
Vulnerable dependency: next@16.1.6 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@16.1.6 (GHSA-q4gf-8mx6-v5v3)
medium
Vulnerable dependency: next@16.1.6 (GHSA-q8wf-6r8g-63ch)
medium
Vulnerable dependency: next@16.1.6 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@16.1.6 (GHSA-wfc6-r584-vfw7)
medium
Vulnerable dependency: postcss@8.5.13 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.5.13 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: uuid@13.0.0 (GHSA-w5hq-g745-h8pq)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.3 (GHSA-345p-7cg4-v4c7)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.3 (GHSA-8r9q-7v3j-jr4g)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.3 (GHSA-w48q-cv73-mx4w)
medium
Vulnerable dependency: golang.org/x/mod@0.34.0 (GO-2026-6179)
medium
Vulnerable dependency: golang.org/x/mod@0.34.0 (GO-2026-6180)
medium
Vulnerable dependency: golang.org/x/sys@0.42.0 (GO-2026-5024)
medium
Vulnerable dependency: golang.org/x/text@0.35.0 (GO-2026-5970)
medium
Buffer.from base64 in DinanathDash-Envault-4450183/scripts/diagnose-malformed-secrets.ts:27
medium
Buffer.from base64 in DinanathDash-Envault-4450183/scripts/diagnose-malformed-secrets.ts:48
medium
Buffer.from base64 in DinanathDash-Envault-4450183/scripts/diagnose-malformed-secrets.ts:60
medium
Buffer.from base64 in DinanathDash-Envault-4450183/supabase/functions/rotate-keys/index.ts:46
medium
Buffer.from base64 in DinanathDash-Envault-4450183/src/lib/utils/encryption.ts:149
medium
Buffer.from base64 in DinanathDash-Envault-4450183/src/lib/utils/encryption.ts:277
medium
Buffer.from base64 in DinanathDash-Envault-4450183/src/app/api/avatar/route.ts:82
medium
Buffer.from base64 in DinanathDash-Envault-4450183/src/app/api/auth/webauthn/authenticate/verify/route.ts:53
medium
Buffer.from base64 in DinanathDash-Envault-4450183/src/app/api/cli/projects/[projectId]/active-key/route.ts:68
medium
Hex string literal (>50 chars) in DinanathDash-Envault-4450183/cli-go/cmd/root_test.go:214
medium
Hex string literal (>50 chars) in DinanathDash-Envault-4450183/cli-go/cmd/root_test.go:254
info
package.json metadata
info
Transport: stdio
info
Required env vars (49)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 1156 components
high
Authorization Bearer Token found in DinanathDash-Envault-4450183/supabase/migrations/20260208_fix_cron_key_rotation.sql
critical
Database URL with Password found in DinanathDash-Envault-4450183/content/docs/internal/installation.mdx
critical
RSA Private Key found in DinanathDash-Envault-4450183/content/docs/internal/configuration/environment-variables.mdx
high
Hardcoded Password found in DinanathDash-Envault-4450183/src/app/api/agent/chat/route.ts
medium
No build provenance detected (SLSA L0)