← Back to search

io.github.VictoriaMetrics/mcp-victoriametrics

VictoriaMetrics Scanned 1d ago

MCP Server for VictoriaMetrics. Provides integration with VictoriaMetrics API and documentation

MCP Registry ↗
? Not scanned yet

Versions

1.120.1latest
first seen Jun 5, 2026
1.20.2
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 1

network medium
Server uses network capabilities via: fetch()

Scan Findings 48

medium
Vulnerable dependency: vite@5.4.9 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 92 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.2 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: nanoid@5.1.6 (GHSA-28wg-ghj8-5hjv) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.6 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.9 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.9 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.9 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.9 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.9 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.9 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.9 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.9 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.9 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.9 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.9 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/klauspost/compress@1.18.5 (GO-2026-5841) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.52.0 (GHSA-5cv4-jp36-h3mw) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.52.0 (GO-2026-4918) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.52.0 (GO-2026-5025) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.52.0 (GO-2026-5026) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.52.0 (GO-2026-5027) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.52.0 (GO-2026-5028) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.52.0 (GO-2026-5029) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.52.0 (GO-2026-5030) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.52.0 (GO-2026-5942) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.43.0 (GO-2026-5024) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/text@0.35.0 (GO-2026-5970) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (16) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
info
SBOM generated: 442 components sbom_generator · 100%
critical
RSA Private Key found in VictoriaMetrics-mcp-victoriametrics-28a8c23/cmd/mcp-victoriametrics/resources/vm/content/victoriametrics/vmbackup.md secret_scanner · 95%
critical
RSA Private Key found in VictoriaMetrics-mcp-victoriametrics-28a8c23/cmd/mcp-victoriametrics/resources/vm/content/victoriametrics/vmbackupmanager.md secret_scanner · 95%
critical
RSA Private Key found in VictoriaMetrics-mcp-victoriametrics-28a8c23/cmd/mcp-victoriametrics/resources/vm/content/operator/resources/vmcluster.md secret_scanner · 95%
high
Hardcoded Password found in VictoriaMetrics-mcp-victoriametrics-28a8c23/cmd/mcp-victoriametrics/resources/vm/content/victoriametrics/data-ingestion/Vector.md secret_scanner · 65%
high
Hardcoded Password found in VictoriaMetrics-mcp-victoriametrics-28a8c23/cmd/mcp-victoriametrics/resources/vm/content/victoriametrics/data-ingestion/Alloy.md secret_scanner · 65%
high
Hardcoded Password found in VictoriaMetrics-mcp-victoriametrics-28a8c23/cmd/mcp-victoriametrics/resources/vm/content/victoriametrics/data-ingestion/Telegraf.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%