← Back to search

@mcp-layer/attach

GitHub Actions Scanned 9d ago

Attach to an in-process MCP server instance and return a Session.

npm ↗
C
66.7 / 100

Versions

1.1.2latest
Mar 4, 2026
1.1.1
Feb 6, 2026
1.1.0
Feb 5, 2026
1.0.0
Feb 3, 2026
0.0.0
Feb 3, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 18

note-update
annotations: none low

Mutate note:// resources and trigger resources/updated notifications.

rebalance
annotations: none low

Batch enable/disable operations to test debounced notifications.

logs
annotations: none low

Send notifications/message payloads at the requested level.

booking
annotations: none low

Trigger elicitation/create to confirm alternate dates.

roots
annotations: none low

Call roots/list on capable clients.

files
annotations: none low

List ResourceLinks for manual and note resources.

progress
annotations: none low

Emit notifications/progress updates for long-running work.

add
annotations: none low

Combine two numbers and return the sum.

summaries
annotations: none low

Proxy sampling/createMessage to summarize text.

dashboard
annotations: none low

Return a dashboard with an MCP App UI resource.

annotated
annotations: verified low

Tool used to exercise annotation/title fallback and _meta extraction.

readOnlyHint true
batch
annotations: none low

Accepts array and object inputs for CLI parsing tests.

present
annotations: none low

Return mixed content types for CLI formatting.

fail-gracefully
annotations: none low

Always returns isError true for REST error handling tests.

crash
annotations: none low

Throws an error to simulate protocol failures.

slow
annotations: none low

Delays to trigger timeout behavior in clients.

flap
annotations: none low

Fails once, then succeeds to exercise breaker recovery.

echo
annotations: none low

Repeat supplied text; uppercase when loud is true.

Permissions 3

shell high
Server uses shell capabilities via: child_process
network medium
Server uses network capabilities via: fetch(), net
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 58

low
Tool 'note-update' has no annotations annotation_checker · 100%
low
Tool 'rebalance' has no annotations annotation_checker · 100%
low
Tool 'logs' has no annotations annotation_checker · 100%
low
Tool 'booking' has no annotations annotation_checker · 100%
low
Tool 'roots' has no annotations annotation_checker · 100%
low
Tool 'files' has no annotations annotation_checker · 100%
low
Tool 'progress' has no annotations annotation_checker · 100%
low
Tool 'add' has no annotations annotation_checker · 100%
low
Tool 'summaries' has no annotations annotation_checker · 100%
low
Tool 'dashboard' has no annotations annotation_checker · 100%
info
Tool 'annotated' annotations are consistent annotation_checker · 80%
low
Tool 'batch' has no annotations annotation_checker · 100%
low
Tool 'present' has no annotations annotation_checker · 100%
low
Tool 'fail-gracefully' has no annotations annotation_checker · 100%
low
Tool 'crash' has no annotations annotation_checker · 100%
low
Tool 'slow' has no annotations annotation_checker · 100%
low
Tool 'flap' has no annotations annotation_checker · 100%
low
Tool 'echo' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 64 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: yaml@2.8.1 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.20.2 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.20.2 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.20.2 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.7.4 (GHSA-247c-9743-5963) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.7.4 (GHSA-444r-cwp2-x5xf) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.7.4 (GHSA-573f-x89g-hqp9) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8.17.0 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: mercurius@16.7.0 (GHSA-m4h2-mjfm-mp55) dependency_analyzer · 95%
medium
Buffer.from base64 in 3rd-Eden-mcp-layer-294c1dc/packages/cli/src/format.js:57 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: note-update manifest_parser · 85%
info
Tool: rebalance manifest_parser · 85%
info
Tool: logs manifest_parser · 85%
info
Tool: booking manifest_parser · 85%
info
Tool: roots manifest_parser · 85%
info
Tool: files manifest_parser · 85%
info
Tool: progress manifest_parser · 85%
info
Tool: add manifest_parser · 85%
info
Tool: summaries manifest_parser · 85%
info
Tool: dashboard manifest_parser · 85%
info
Tool: annotated manifest_parser · 85%
info
Tool: batch manifest_parser · 85%
info
Tool: present manifest_parser · 85%
info
Tool: fail-gracefully manifest_parser · 85%
info
Tool: crash manifest_parser · 85%
info
Tool: slow manifest_parser · 85%
info
Tool: flap manifest_parser · 85%
info
Tool: echo manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 46 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%