← Back to search

MetaMask Embedded Wallets (Web3Auth) MCP

Web3Auth streamable_http Scanned 28d ago

Helps AI coding agents integrate MetaMask Embedded Wallets (Web3Auth) SDKs.

B
79.3 / 100

Versions

2.0.0latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

search_docs
annotations: none low

Search MetaMask Embedded Wallets documentation (Algolia) and example projects. Returns doc page links with snippets and matching examples.

query string
get_doc
annotations: none low

Fetch the full content of a MetaMask Embedded Wallets documentation page by URL. Sources: Algolia, llms.txt, GitHub MDX.

url string
get_example
annotations: none low

Fetch complete source code of a Web3Auth integration example from GitHub.

name string auth_method string
get_sdk_reference
annotations: none low

Fetch SDK source code (types, interfaces, hooks) from open-source Web3Auth repos.

module string
search_community
annotations: none low

Search or fetch posts from the MetaMask Embedded Wallets community forum (builder.metamask.io).

query string topic_id number

Permissions 3

filesystem low
Server uses filesystem capabilities via: pathlib
env_vars low
Server uses env_vars capabilities via: process.env
network medium
Server uses network capabilities via: fetch()

Scan Findings 66

medium
Vulnerable dependency: mcp-handler@1.0.7 (GHSA-w2fm-25vw-vh7f) dependency_analyzer · 95%
low
Tool 'search_docs' has no annotations annotation_checker · 100%
low
Tool 'get_doc' has no annotations annotation_checker · 100%
low
Tool 'get_example' has no annotations annotation_checker · 100%
low
Tool 'get_sdk_reference' has no annotations annotation_checker · 100%
low
Tool 'search_community' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.2 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-267c-6grr-h53f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-26hh-7cqf-hhc6) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-2xp9-vwfh-vxw4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-492v-c6pp-mqqv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-h27x-g6w4-24gq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-jcc7-9wpm-mj36) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-mq59-m269-xvcx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-p293-qw3h-jr36) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.1.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: search_docs manifest_parser · 70%
info
Tool: get_doc manifest_parser · 70%
info
Tool: get_example manifest_parser · 70%
info
Tool: get_sdk_reference manifest_parser · 70%
info
Tool: search_community manifest_parser · 70%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 270 components sbom_generator · 100%
high
Generic API Key Assignment found in Web3Auth-web3auth-mcp-58eec17/src/fetcher/algolia-fetcher.ts secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%