← Back to search

mcp-server-framework

GitHub Actions Scanned 9d ago

Production-ready MCP Server Framework with built-in logging, metrics, sessions, and multi-transport support.

npm ↗
C
68.4 / 100

Versions

1.1.2latest
Jun 22, 2026
1.1.0
May 15, 2026
1.0.6
May 5, 2026
1.0.5
Mar 31, 2026
1.0.4
Mar 31, 2026
+ show 4 moreshow less
1.0.3
Mar 26, 2026
1.0.2
Mar 23, 2026
1.0.1
Mar 22, 2026
1.0.0
Mar 20, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 8

health
annotations: none low

Check server health

input object
greet
annotations: none low

Greet a user

input object
deploy
annotations: none low

input object target string
my_tool
annotations: none low

list_items
annotations: none low

process-batch
annotations: none low

Process items with progress

input object items array
calculator
annotations: none low

An interactive calculator app

input object expression string
long_computation
annotations: none low

Perform a long computation

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 34

low
Tool 'health' has no annotations annotation_checker · 100%
low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'deploy' has no annotations annotation_checker · 100%
low
Tool 'my_tool' has no annotations annotation_checker · 100%
low
Tool 'list_items' has no annotations annotation_checker · 100%
low
Tool 'process-batch' has no annotations annotation_checker · 100%
low
Tool 'calculator' has no annotations annotation_checker · 100%
low
Tool 'long_computation' has no annotations annotation_checker · 100%
info
Tool 'calculator' annotations are consistent annotation_checker · 80%
info
Tool 'greet' annotations are consistent annotation_checker · 80%
info
Tool 'list_items' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: express-rate-limit@8.2.1 (GHSA-46wh-pxpv-q5gq) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.3.1 (GHSA-v3rj-xjv7-4jmq) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.7.1 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: health manifest_parser · 75%
info
Tool: greet manifest_parser · 75%
info
Tool: deploy manifest_parser · 75%
info
Tool: my_tool manifest_parser · 75%
info
Tool: list_items manifest_parser · 75%
info
Tool: process-batch manifest_parser · 75%
info
Tool: calculator manifest_parser · 75%
info
Tool: long_computation manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (2) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 370 components sbom_generator · 100%
high
Hardcoded Password found in MP-Tool-MCP-Server-Framework-d2bd7a9/src/utils/scrubbing/secret-scrubber.ts secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%