← Back to search

io.github.kalehdoo/warehouse-mcp

kalehdoo Scanned 1d ago

Production MCP server for Postgres, Oracle, Snowflake, BigQuery, Redshift, DuckDB, MotherDuck.

MCP Registry ↗
? Not scanned yet

Versions

0.3.4latest
first seen Jun 5, 2026
0.4.2
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 23

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-6prh-2h8m-c8cw) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.0.0 (GHSA-gpvr-g6gh-9mc2) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.0.0 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.0.0 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-2883-xcg3-v3hh) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.1 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-sdk@1.10.0 (GHSA-qqj6-54q6-cxv6) dependency_analyzer · 95%
medium
Vulnerable dependency: snowflake-sdk@1.10.0 (GHSA-wmjq-jrm2-9wfr) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.5 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (35) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 773 components sbom_generator · 100%
high
Authorization Bearer Token found in kalehdoo-warehouse-mcp-4ee3454/docs/onboarding.md secret_scanner · 70%
high
Hardcoded Password found in kalehdoo-warehouse-mcp-4ee3454/docs/onboarding.md secret_scanner · 65%
high
Hardcoded Password found in kalehdoo-warehouse-mcp-4ee3454/docs/deploy-kubernetes.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%