← Back to search

io.github.Writbase/writbase

Writbase streamable_http Scanned 14d ago

MCP-native task management for AI agent fleets with scoped permissions and provenance.

MCP Registry ↗
D
40 / 100

Versions

0.1.3latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

manage_agent_keys
annotations: none low

List, create, update, deactivate, or rotate agent keys. Manager only.

name string limit number cursor string key_id string is_active boolean project_id string department_id string special_prompt string
manage_agent_permissions
annotations: none low

Grant, revoke, or list permissions for an agent key. Manager only.

key_id string can_read boolean can_assign boolean can_create boolean can_update boolean project_id string can_archive boolean can_comment boolean department_id string
get_provenance
annotations: none low

View event log / audit trail for a project.

limit number cursor string
manage_projects
annotations: none low

Create, rename, or archive projects. Manager only.

name string project_id string
manage_departments
annotations: none low

Create, rename, or archive departments. Manager only.

name string department_id string
subscribe
annotations: none low

Register or manage webhook subscriptions for task event notifications.

url string subscription_id string
discover_agents
annotations: none low

List agents and their capabilities in a project. Manager only.

skill string

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: os
shell high
Server uses shell capabilities via: child_process, execSync()
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 57

low
Tool 'manage_agent_keys' has no annotations annotation_checker · 100%
low
Tool 'manage_agent_permissions' has no annotations annotation_checker · 100%
low
Tool 'get_provenance' has no annotations annotation_checker · 100%
low
Tool 'manage_projects' has no annotations annotation_checker · 100%
low
Tool 'manage_departments' has no annotations annotation_checker · 100%
low
Tool 'subscribe' has no annotations annotation_checker · 100%
low
Tool 'discover_agents' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: next@16.1.6 (GHSA-267c-6grr-h53f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-26hh-7cqf-hhc6) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-492v-c6pp-mqqv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-h27x-g6w4-24gq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-jcc7-9wpm-mj36) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-mq59-m269-xvcx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.1.6 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in Writbase-writbase-598bef6/src/lib/services/__tests__/agent-keys.test.ts:16 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: manage_agent_keys manifest_parser · 70%
info
Tool: manage_agent_permissions manifest_parser · 70%
info
Tool: get_provenance manifest_parser · 70%
info
Tool: manage_projects manifest_parser · 70%
info
Tool: manage_departments manifest_parser · 70%
info
Tool: subscribe manifest_parser · 70%
info
Tool: discover_agents manifest_parser · 70%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (11) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 876 components sbom_generator · 100%
critical
Database URL with Password found in Writbase-writbase-598bef6/docs/deployment.md secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%