← Back to search

@letsrunit/mcp-server

GitHub Actions Scanned 13d ago

MCP server for letsrunit — AI-agent browser test generation and execution

D
40 / 100

Versions

0.25.0latest
Jul 2, 2026
0.24.2
Jun 22, 2026
0.24.1
Jun 15, 2026
0.24.0
Jun 15, 2026
0.23.7
Jun 15, 2026
+ show 60 moreshow less
0.23.6
Jun 12, 2026
0.23.5
Jun 11, 2026
0.23.4
Jun 2, 2026
0.23.3
Jun 2, 2026
0.23.2
Jun 1, 2026
0.23.1
Jun 1, 2026
0.23.0
May 29, 2026
0.22.0
May 24, 2026
0.21.1
May 20, 2026
0.21.0
May 11, 2026
0.20.0
Apr 30, 2026
0.19.5
Apr 24, 2026
0.19.4
Apr 24, 2026
0.19.3
Apr 24, 2026
0.19.2
Apr 19, 2026
0.19.1
Apr 17, 2026
0.19.0
Apr 16, 2026
0.18.3
Apr 16, 2026
0.18.2
Apr 15, 2026
0.18.1
Apr 15, 2026
0.18.0
Apr 13, 2026
0.17.1
Apr 13, 2026
0.17.0
Apr 13, 2026
0.16.0
Apr 13, 2026
0.15.1
Apr 13, 2026
0.15.0
Apr 11, 2026
0.14.5
Apr 11, 2026
0.14.4
Apr 11, 2026
0.14.3
Apr 10, 2026
0.14.2
Apr 10, 2026
0.14.1
Apr 10, 2026
0.14.0
Apr 9, 2026
0.13.3
Apr 9, 2026
0.13.2
Apr 8, 2026
0.13.1
Apr 8, 2026
0.13.0
Apr 7, 2026
0.12.0
Apr 6, 2026
0.11.0
Apr 5, 2026
0.10.0
Mar 31, 2026
0.9.1
Mar 28, 2026
0.9.0
Mar 27, 2026
0.8.0
Mar 25, 2026
0.7.1
Mar 25, 2026
0.7.0
Mar 20, 2026
0.6.0
Mar 12, 2026
0.5.1
Mar 12, 2026
0.5.0
Mar 12, 2026
0.4.2
Mar 12, 2026
0.4.1
Mar 12, 2026
0.4.0
Mar 12, 2026
0.3.10
Mar 2, 2026
0.3.9
Mar 2, 2026
0.3.8
Feb 27, 2026
0.3.7
Feb 27, 2026
0.3.6
Feb 26, 2026
0.3.4
Feb 26, 2026
0.3.3
Feb 26, 2026
0.3.0
Feb 26, 2026
0.2.6
Feb 19, 2026
0.0.1
Feb 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 11

letsrunit_diff
annotations: none low

Diff the current live page against the HTML snapshot from the last passing test of a scenario.

sessionId string scenarioId string
letsrunit_reload
annotations: none low

Reload built-in and project support step definitions without restarting the MCP server.

letsrunit_debug
annotations: none low

Evaluate JavaScript on the current page via Playwright page.evaluate(). Use for debugging — not for test logic.

script string sessionId string
letsrunit_snapshot
annotations: none low

Get the current page HTML, scrubbed for LLM consumption. Use selector to scope to a DOM subtree.

dropHead boolean pickMain boolean sessionId string dropHidden boolean
letsrunit_session_start
annotations: none low

Launch a new browser session. Does not navigate anywhere — use letsrunit_run with a Given step to navigate. Set baseURL to enable relative paths like "Given I\'m on the homepage".

headless boolean language string viewportWidth number viewportHeight number
letsrunit_session_close
annotations: none low

Close a browser session and release its resources.

sessionId string
letsrunit_list_sessions
annotations: none low

List all active browser sessions.

letsrunit_list_steps
annotations: none low

List available step definitions for a session. Optionally filter by step type (Given/When/Then).

sessionId string
letsrunit_diagnostics
annotations: none low

Return runtime diagnostics for MCP support-file loading (cwd resolution, cucumber config path, support entries). Available only when LETSRUNIT_MCP_DIAGNOSTICS=enabled.

sessionId string
letsrunit_screenshot
annotations: none low

Take a screenshot of the current page. Optionally crop to a specific element (selector) or highlight elements before capturing (mask).

fullPage boolean sessionId string
letsrunit_run
annotations: none low

Execute Gherkin steps or a complete feature in the browser.

sessionId string

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs/promises
shell high
Server uses shell capabilities via: child_process, execSync(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 42

low
Tool 'letsrunit_diff' has no annotations annotation_checker · 100%
low
Tool 'letsrunit_reload' has no annotations annotation_checker · 100%
low
Tool 'letsrunit_debug' has no annotations annotation_checker · 100%
low
Tool 'letsrunit_snapshot' has no annotations annotation_checker · 100%
low
Tool 'letsrunit_session_start' has no annotations annotation_checker · 100%
low
Tool 'letsrunit_session_close' has no annotations annotation_checker · 100%
low
Tool 'letsrunit_list_sessions' has no annotations annotation_checker · 100%
low
Tool 'letsrunit_list_steps' has no annotations annotation_checker · 100%
low
Tool 'letsrunit_diagnostics' has no annotations annotation_checker · 100%
low
Tool 'letsrunit_screenshot' has no annotations annotation_checker · 100%
low
Tool 'letsrunit_run' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 92 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: vitest@4.0.17 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.8.2 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Buffer.from base64 in letsrunit-hq-letsrunit-d66381c/packages/cucumber/src/store.ts:314 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in letsrunit-hq-letsrunit-d66381c/packages/utils/tests/hash.test.ts:7 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: letsrunit_diff manifest_parser · 85%
info
Tool: letsrunit_reload manifest_parser · 85%
info
Tool: letsrunit_debug manifest_parser · 85%
info
Tool: letsrunit_snapshot manifest_parser · 85%
info
Tool: letsrunit_session_start manifest_parser · 85%
info
Tool: letsrunit_session_close manifest_parser · 85%
info
Tool: letsrunit_list_sessions manifest_parser · 85%
info
Tool: letsrunit_list_steps manifest_parser · 85%
info
Tool: letsrunit_diagnostics manifest_parser · 85%
info
Tool: letsrunit_screenshot manifest_parser · 85%
info
Tool: letsrunit_run manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (26) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 126 components sbom_generator · 100%
critical
Database URL with Password found in letsrunit-hq-letsrunit-d66381c/packages/init/src/setup/ci-workflow-plan.ts secret_scanner · 85%
high
Hardcoded Password found in letsrunit-hq-letsrunit-d66381c/packages/init/src/setup/ci-workflow-plan.ts secret_scanner · 65%
critical
Database URL with Password found in letsrunit-hq-letsrunit-d66381c/docs/ci-cd/github-actions.md secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%