← Back to search

loopctl-mcp-server

shopkeeper2 Scanned 23d ago

MCP server for loopctl — structural trust for AI development loops

npm ↗
D
40 / 100

Versions

2.63.0latest
Jul 30, 2026
2.62.0
Jul 25, 2026
2.61.0
Jul 24, 2026
2.59.0
Jul 23, 2026
2.58.0
Jul 23, 2026
+ show 54 moreshow less
2.57.0
Jul 22, 2026
2.56.0
Jul 22, 2026
2.55.0
Jul 21, 2026
2.54.0
Jul 21, 2026
2.53.1
Jul 21, 2026
2.52.0
Jul 21, 2026
2.51.0
Jul 19, 2026
2.50.0
Jul 19, 2026
2.49.0
Jul 19, 2026
2.48.0
Jul 18, 2026
2.47.0
Jul 18, 2026
2.46.0
Jul 18, 2026
2.45.0
Jul 18, 2026
2.44.0
Jul 17, 2026
2.43.0
Jul 17, 2026
2.42.0
Jul 16, 2026
2.41.0
Jul 11, 2026
2.40.0
Jul 11, 2026
2.39.0
Jul 10, 2026
2.38.0
Jul 10, 2026
2.37.0
Jul 10, 2026
2.36.0
Jul 4, 2026
2.35.0
Jul 4, 2026
2.34.0
Jul 4, 2026
2.33.1
Jul 4, 2026
2.33.0
Jul 4, 2026
2.32.0
Jul 3, 2026
2.31.1
Jul 3, 2026
2.30.1
Jul 3, 2026
2.30.0
Jul 1, 2026
2.29.0
Jul 1, 2026
2.28.0
Jul 1, 2026
2.27.0
Jul 1, 2026
2.26.0
Jun 30, 2026
2.25.0
Jun 30, 2026
2.24.0
Jun 30, 2026
2.23.0
Jun 30, 2026
2.22.0
Jun 29, 2026
2.2.0
Apr 22, 2026
2.1.0
Apr 17, 2026
2.0.1
Apr 13, 2026
2.0.0
Apr 13, 2026
1.6.1
Apr 11, 2026
1.6.0
Apr 11, 2026
1.5.0
Apr 10, 2026
1.4.0
Apr 10, 2026
1.3.0
Apr 10, 2026
1.2.0
Apr 10, 2026
1.1.2
Apr 4, 2026
1.1.1
Apr 4, 2026
1.1.0
Apr 4, 2026
1.0.2
Apr 3, 2026
1.0.1
Apr 2, 2026
1.0.0
Apr 2, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 1

clear_local_only
annotations: none low

WIDEN the posture: remove a scope's local_only marking, re-permitting non-local

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops, fs/promises, path
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 19

low
Tool 'clear_local_only' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in mkreyman-loopctl-1e18802/mcp-server/test/client_context.test.js:134 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: clear_local_only manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (6) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 92 components sbom_generator · 100%
high
Hardcoded Password found in mkreyman-loopctl-1e18802/config/dev.exs secret_scanner · 65%
critical
Database URL with Password found in mkreyman-loopctl-1e18802/deploy/fly-db-setup.sh secret_scanner · 85%
critical
Database URL with Password found in mkreyman-loopctl-1e18802/deploy/FLY_SECRETS.md secret_scanner · 85%
critical
Database URL with Password found in mkreyman-loopctl-1e18802/.github/workflows/ci.yml secret_scanner · 85%
critical
AWS Access Key ID found in mkreyman-loopctl-1e18802/docs/user_stories/epic_40_coordination_bus_v2/us_40.a1.json secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%