← Back to search

io.github.jscoobyced/jsc-typescript-ast-mcp

jscoobyced Scanned 3d ago

An MCP that provides an abstract syntax tree (AST) for TypeScript code using the ts-morph library.

MCP Registry ↗
B
81.7 / 100

Versions

1.0.0latest
first seen Jun 5, 2026
1.0.9
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 3

component_tree
annotations: none low

Get the component tree for a given entry file and maximum depth

entryFilePath string
find_reference
annotations: none low

Find references for a given class and method

filePath string className string methodName string
find_dependency
annotations: none low

Find files with a given dependency

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 31

low
Tool 'component_tree' has no annotations annotation_checker · 100%
low
Tool 'find_reference' has no annotations annotation_checker · 100%
low
Tool 'find_dependency' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: vite@8.0.4 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.4 (GHSA-587h-7wmj-h5pm) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.4 (GHSA-698v-4r3x-3vcv) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.4 (GHSA-9jrq-w75r-8gcw) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.4 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.4 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.4 (GHSA-r825-w8mm-5pxw) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.4 (GHSA-rq7h-c2jc-7f22) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.4 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.4 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.27.1 (GHSA-22jm-h49p-29qw) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.27.1 (GHSA-46jr-4wx8-v453) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.27.1 (GHSA-6prh-2h8m-c8cw) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.27.1 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.27.1 (GHSA-rvq5-wwqv-78pq) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@4.3.6 (GHSA-mrhx-c7xc-m3w5) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: component_tree manifest_parser · 85%
info
Tool: find_reference manifest_parser · 85%
info
Tool: find_dependency manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 26 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%