← Back to search

mcp-adr-analysis-server

GitHub Actions Scanned 5d ago

MCP server for analyzing Architectural Decision Records and project architecture

D
40 / 100

Versions

2.6.9latest
Jun 8, 2026
2.6.8
May 24, 2026
2.6.7
May 24, 2026
2.6.6
Apr 29, 2026
2.6.5
Apr 29, 2026
+ show 43 moreshow less
2.6.4
Apr 29, 2026
2.6.2
Apr 29, 2026
2.6.1
Apr 29, 2026
2.6.0
Apr 29, 2026
2.6.3
Apr 29, 2026
2.5.4
Apr 22, 2026
2.5.3
Apr 22, 2026
2.5.2
Apr 22, 2026
2.5.1
Apr 22, 2026
2.5.0
Apr 19, 2026
2.4.1
Mar 21, 2026
2.3.0
Mar 16, 2026
2.2.1
Feb 23, 2026
2.1.28
Jan 20, 2026
2.1.27
Jan 18, 2026
2.1.22
Dec 17, 2025
2.1.19
Nov 25, 2025
2.1.20
Nov 25, 2025
2.1.11
Sep 30, 2025
2.1.9
Sep 29, 2025
2.1.0
Sep 27, 2025
2.0.24
Sep 17, 2025
2.0.21
Sep 10, 2025
2.0.20
Sep 10, 2025
2.0.18
Sep 10, 2025
2.0.17
Sep 10, 2025
2.0.15
Sep 10, 2025
2.0.16
Sep 9, 2025
2.0.14
Sep 9, 2025
2.0.13
Jul 16, 2025
2.0.12
Jul 16, 2025
2.0.11
Jul 15, 2025
2.0.10
Jul 15, 2025
2.0.9
Jul 14, 2025
2.0.8
Jul 14, 2025
2.0.7
Jul 14, 2025
2.0.6
Jul 14, 2025
2.0.5
Jul 12, 2025
2.0.3
Jul 11, 2025
2.0.2
Jul 11, 2025
2.0.1
Jul 4, 2025
3.0.0
Jul 4, 2025
1.1.0
Jul 2, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 1

OpenShift
annotations: none low

OpenShift DeploymentConfig

Permissions 5

database medium
Server uses database capabilities via: pg, redis
env_vars low
Server uses env_vars capabilities via: process.env
network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path, pathlib, shutil
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()

Scan Findings 52

low
Tool 'OpenShift' has no annotations annotation_checker · 100%
high
Hardcoded API key in tosin2013-mcp-adr-analysis-server-9fd357a/tests/tools/content-masking-tool.test.ts auth_checker · 90%
high
Hardcoded API key in tosin2013-mcp-adr-analysis-server-9fd357a/tests/utils/tree-sitter-analyzer.test.ts auth_checker · 90%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.0 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.0 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: ansible@12.0.0 (GHSA-8ggh-xwr9-3373) dependency_analyzer · 95%
medium
Vulnerable dependency: ansible@12.0.0 (PYSEC-2026-1119) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.19.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.19.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.19.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.19.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.19.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.19.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in tosin2013-mcp-adr-analysis-server-9fd357a/tests/utils/resource-extractor.test.ts:162 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in tosin2013-mcp-adr-analysis-server-9fd357a/tests/utils/resource-extractor.test.ts:172 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: OpenShift manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (57) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Generic API Key Assignment found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/how-to-guides/mcp-client-compatibility.md secret_scanner · 75%
high
Generic API Key Assignment found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/how-to-guides/installation-guide.md secret_scanner · 75%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1733 components sbom_generator · 100%
high
Generic API Key Assignment found in tosin2013-mcp-adr-analysis-server-9fd357a/README.md secret_scanner · 75%
high
Generic API Key Assignment found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/README.md secret_scanner · 75%
high
Generic API Key Assignment found in tosin2013-mcp-adr-analysis-server-9fd357a/playbooks/vault.yml.example secret_scanner · 75%
high
Generic API Key Assignment found in tosin2013-mcp-adr-analysis-server-9fd357a/playbooks/README.md secret_scanner · 75%
high
Generic API Key Assignment found in tosin2013-mcp-adr-analysis-server-9fd357a/playbooks/VAULT_SETUP.md secret_scanner · 75%
high
Hardcoded Password found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/how-to-guides/security-analysis.md secret_scanner · 65%
high
Generic API Key Assignment found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/how-to-guides/troubleshooting.md secret_scanner · 75%
high
Generic API Key Assignment found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/how-to-guides/firecrawl-setup.md secret_scanner · 75%
high
Hardcoded Password found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/tutorials/security-focused-workflow.md secret_scanner · 65%
critical
Database URL with Password found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/reference/generation-tools.md secret_scanner · 85%
high
Hardcoded Password found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/reference/generation-tools.md secret_scanner · 65%
high
Generic API Key Assignment found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/reference/mcp-client-config.md secret_scanner · 75%
critical
AWS Secret Access Key found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/reference/security-tools.md secret_scanner · 90%
critical
Database URL with Password found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/reference/security-tools.md secret_scanner · 85%
high
Hardcoded Password found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/reference/security-tools.md secret_scanner · 65%
high
Generic API Key Assignment found in tosin2013-mcp-adr-analysis-server-9fd357a/docs/reference/environment-config.md secret_scanner · 75%
critical
AWS Access Key ID found in tosin2013-mcp-adr-analysis-server-9fd357a/.npm-cache/_cacache/content-v2/sha512/82/06/35fc6a4769192719292c0abf2b072d271c2aff9c6977daed1b00ca945ca4350ec4f88cd6d5c213ac83647a105b42f59605fcd1826144b5ee690a06d17cc6 secret_scanner · 95%
critical
AWS Access Key ID found in tosin2013-mcp-adr-analysis-server-9fd357a/.npm-cache/_cacache/content-v2/sha512/b7/85/3df3088c6764797e7a179e32a80030fa7cbf022fef63c8c7f3ec5a65aa06d7ca593d705bde0d7b806cf0f7f944fdb66541229b42fe8d10525f7d39c896ce secret_scanner · 95%
critical
AWS Access Key ID found in tosin2013-mcp-adr-analysis-server-9fd357a/.npm-cache/_cacache/content-v2/sha512/c7/9c/4fab30e96ea730f3dd6b17884ae570f6a995a64029b6f853539b45c9fb64aa09540c15d496b4035a767b9b922f6c61c05ad88cba5a2e82f1cfa0a26c605a secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%