← Back to search

io.github.gabrielmahia/soko-mcp

gabrielmahia Scanned 12d ago

📊 soko-mcp — Kenya Commodity Price Intelligence MCP Server

B
82.3 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

commodity_price_query
annotations: none low

market string commodity string
regional_price_comparison
annotations: none low

commodity string farmer_location string
price_trend_analysis
annotations: none low

market string commodity string months_ahead string
sell_hold_decision
annotations: none low

market string commodity string quantity_bags string months_can_store string storage_cost_per_month_kes string
market_overview
annotations: none low

market string commodities string

Permissions 1

filesystem low
Server uses filesystem capabilities via: pathlib

Scan Findings 30

low
Tool 'commodity_price_query' has no annotations annotation_checker · 100%
low
Tool 'regional_price_comparison' has no annotations annotation_checker · 100%
low
Tool 'price_trend_analysis' has no annotations annotation_checker · 100%
low
Tool 'sell_hold_decision' has no annotations annotation_checker · 100%
low
Tool 'market_overview' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastmcp@2.0.0 (GHSA-5h2m-4q8j-pqpj) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (GHSA-c2jp-c369-7pvx) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (GHSA-mxxr-jv3v-6pgc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (GHSA-rcfx-77hg-w2wv) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (GHSA-rj5c-58rq-j5g5) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (PYSEC-2026-1364) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (PYSEC-2026-1365) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (PYSEC-2026-2474) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (PYSEC-2026-2475) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.0.0 (PYSEC-2026-338) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: commodity_price_query manifest_parser · 90%
info
Tool: regional_price_comparison manifest_parser · 90%
info
Tool: price_trend_analysis manifest_parser · 90%
info
Tool: sell_hold_decision manifest_parser · 90%
info
Tool: market_overview manifest_parser · 90%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 70%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%