← Back to search

io.github.jonradoff/lastsaas

jonradoff Scanned 2h ago

Read-only admin MCP server for LastSaaS — dashboards, users, tenants, billing, logs, health.

MCP Registry ↗
B
78.1 / 100

Versions

1.0.0latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 9

get_about
annotations: none low

Get system info: software version and environment details

dashboard_stats
annotations: none low

Get admin dashboard summary: total user count, tenant count, and system health status with any active issues

get_system_health
annotations: none low

Get current system health: CPU, memory, disk usage, HTTP request stats, MongoDB connections, and Go runtime info

list_plans
annotations: none low

List all subscription plans with pricing, entitlements, credit allocations, and active subscriber counts

list_credit_bundles
annotations: none low

List all credit bundles with name, credit amount, price in cents, active status, and sort order

list_announcements
annotations: none low

List all announcements including drafts and published items with their titles, bodies, and publish dates

list_promotions
annotations: none low

List all Stripe promotion codes with coupon details, discount amounts, redemption counts, and expiration dates

list_webhooks
annotations: none low

List all outbound webhooks with URL, subscribed events, active status, and creation date

list_event_types
annotations: none low

List all distinct telemetry event types with category, total count, and last seen timestamp

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 134

low
Tool 'get_about' has no annotations annotation_checker · 100%
low
Tool 'dashboard_stats' has no annotations annotation_checker · 100%
low
Tool 'get_system_health' has no annotations annotation_checker · 100%
low
Tool 'list_plans' has no annotations annotation_checker · 100%
low
Tool 'list_credit_bundles' has no annotations annotation_checker · 100%
low
Tool 'list_announcements' has no annotations annotation_checker · 100%
low
Tool 'list_promotions' has no annotations annotation_checker · 100%
low
Tool 'list_webhooks' has no annotations annotation_checker · 100%
low
Tool 'list_event_types' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 58 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-35jp-ww65-95wh) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-3g43-6gmg-66jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-3p68-rc4w-qgx5) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-3pq3-5fj3-cg6v) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-3w6x-2g7m-8v23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-445q-vr5w-6q77) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-4hqw-qxg8-jxx2) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-542g-h47m-68v8) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-5c9x-8gcm-mpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-62hf-57xw-28j9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-6chq-wfr3-2hj9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-777c-7fjr-54vf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-898c-q2cr-xwhg) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-9fr6-4gfg-395g) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-fvcv-3m26-pcqx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-hfxv-24rg-xrqf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-j5f8-grm9-p9fc) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-j8rh-479h-cp32) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-jqh4-m9w3-8hp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-m7pr-hjqh-92cm) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-mwf2-3pr3-8698) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-p92q-9vqr-4j8v) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-pf86-5x62-jrwf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-pmwg-cvhr-8vh7) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-q8qp-cvcw-x6jj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-vf2m-468p-8v99) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-vh66-26gq-q6x8) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-w9j2-pvgh-6h63) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-xhjh-pmcv-23jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.13.5 (GHSA-xx6v-rp6x-q39c) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-39q2-94rc-95cp) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-55q2-fjhq-7xh7) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-6688-9rhm-gjv2) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-76mc-f452-cxcm) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-c2j3-45gr-mqc4) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-cj63-jhhr-wcxv) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-cjmm-f4jc-qw8r) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-cmwh-pvxp-8882) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-crv5-9vww-q3g8) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-gvmj-g25r-r7wr) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-h7mw-gpvr-xq4m) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-h8r8-wccr-v5f2) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-hpcv-96wg-7vj8) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-r47g-fvhr-h676) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-rp9w-3fw7-7cwq) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-v2wj-7wpq-c8vv) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-v9jr-rg53-9pgp) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-vxr8-fq34-vvx9) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.3.1 (GHSA-x4vx-rjvf-j5p4) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.1 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-45gg-vh54-h5m9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-5cgq-3rg8-m6cv) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-78mq-xcr3-xm33) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-89gr-r52h-f8rx) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-9m57-25v3-79x9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-f5wc-c3c7-36mc) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-jppx-rxg9-jmrx) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-q4h4-gmj2-qvw2) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-qpw4-5x99-6vjp) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-rm3j-f69w-wqmq) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-vgwf-h737-ff37) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-w879-237q-wc7r) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GHSA-x527-x647-q7gg) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5005) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5006) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5013) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5014) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5015) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5016) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5017) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5018) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5019) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5020) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5021) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5023) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5033) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-5932) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-6303) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-6354) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.46.0 (GO-2026-6355) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/buger/jsonparser@1.1.1 (GHSA-6g7g-w4f8-9c9x) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/buger/jsonparser@1.1.1 (GO-2026-4514) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/klauspost/compress@1.16.7 (GO-2026-5841) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.40.0 (GO-2026-5024) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/text@0.32.0 (GO-2026-5970) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/text@0.32.0 (GO-2026-6629) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in jonradoff-lastsaas-c692923/backend/internal/webhooks/dispatcher_integration_test.go:124 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jonradoff-lastsaas-c692923/backend/internal/webhooks/crypto_test.go:12 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jonradoff-lastsaas-c692923/backend/internal/webhooks/crypto_test.go:31 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jonradoff-lastsaas-c692923/backend/internal/webhooks/crypto_test.go:58 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jonradoff-lastsaas-c692923/backend/internal/webhooks/crypto_test.go:66 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jonradoff-lastsaas-c692923/backend/internal/webhooks/crypto_test.go:84 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jonradoff-lastsaas-c692923/backend/internal/webhooks/crypto_test.go:117 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jonradoff-lastsaas-c692923/backend/internal/webhooks/crypto_test.go:126 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jonradoff-lastsaas-c692923/backend/internal/webhooks/crypto_test.go:137 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in jonradoff-lastsaas-c692923/backend/internal/webhooks/crypto_test.go:147 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: get_about manifest_parser · 85%
info
Tool: dashboard_stats manifest_parser · 85%
info
Tool: get_system_health manifest_parser · 85%
info
Tool: list_plans manifest_parser · 85%
info
Tool: list_credit_bundles manifest_parser · 85%
info
Tool: list_announcements manifest_parser · 85%
info
Tool: list_promotions manifest_parser · 85%
info
Tool: list_webhooks manifest_parser · 85%
info
Tool: list_event_types manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (15) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 521 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%