← Back to search Server uses network capabilities via: fetch() Server uses filesystem capabilities via: fs, fs sync ops, os, path, pathlib Server uses shell capabilities via: child_process, execSync(), spawn(), subprocess Server uses env_vars capabilities via: process.env
mcp-swagger-server
A Model Context Protocol (MCP) server for Swagger/OpenAPI documentation that transforms OpenAPI specifications into MCP format, enabling AI assistants to interact with REST APIs through standardized protocol.
? Not scanned yet
Versions
1.7.0latestMar 6, 2026
1.6.0Aug 26, 2025
1.5.0Aug 18, 2025
1.4.0Jul 17, 2025
1.3.0Jul 10, 2025
+ show 15 moreshow less
1.2.2Jul 6, 2025
1.2.1Jul 6, 2025
1.2.0Jul 6, 2025
1.1.1Jul 6, 2025
1.1.0Jul 6, 2025
1.0.9Jul 2, 2025
1.0.8Jun 29, 2025
1.0.7Jun 29, 2025
1.0.6Jun 25, 2025
1.0.5Jun 24, 2025
1.0.4Jun 24, 2025
1.0.3Jun 24, 2025
1.0.2Jun 23, 2025
1.0.1Jun 23, 2025
1.0.0Jun 22, 2025
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 118
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 70 direct dependencies
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-345p-7cg4-v4c7)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-8r9q-7v3j-jr4g)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-w48q-cv73-mx4w)
medium
Vulnerable dependency: @nestjs/common@10.0.0 (GHSA-cj7v-w2c7-cp7c)
medium
Vulnerable dependency: @nestjs/core@10.0.0 (GHSA-36xv-jgw5-4q75)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-35jp-ww65-95wh)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-3g43-6gmg-66jw)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-3p68-rc4w-qgx5)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-3w6x-2g7m-8v23)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-42h9-826w-cgv3)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-43fc-jf86-j433)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-445q-vr5w-6q77)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-4hjh-wcwx-xvwj)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-5c9x-8gcm-mpgx)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-62hf-57xw-28j9)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-6chq-wfr3-2hj9)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-7q8q-rj6j-mhjq)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-898c-q2cr-xwhg)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-8hc4-vh64-cxmj)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-9fr6-4gfg-395g)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-fvcv-3m26-pcqx)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-hfxv-24rg-xrqf)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-j5f8-grm9-p9fc)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-j8rh-479h-cp32)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-jr5f-v2jv-69x6)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-m7pr-hjqh-92cm)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-mmx7-hfxf-jppx)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-p92q-9vqr-4j8v)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-pf86-5x62-jrwf)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-pmv8-rq9r-6j72)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-pmwg-cvhr-8vh7)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-q8qp-cvcw-x6jj)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-vf2m-468p-8v99)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-w9j2-pvgh-6h63)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-xhjh-pmcv-23jw)
medium
Vulnerable dependency: axios@1.6.0 (GHSA-xx6v-rp6x-q39c)
medium
Vulnerable dependency: compression@1.7.4 (GHSA-vc2v-76pw-4v95)
medium
Vulnerable dependency: express@4.18.2 (GHSA-qw6h-vgh9-j6wx)
medium
Vulnerable dependency: express@4.18.2 (GHSA-rv95-896h-c2vc)
medium
Vulnerable dependency: joi@17.9.0 (GHSA-6h2x-m376-mqjq)
medium
Vulnerable dependency: joi@17.9.0 (GHSA-6w3j-5fw6-r9vr)
medium
Vulnerable dependency: joi@17.9.0 (GHSA-gg4h-3hg2-grpc)
medium
Vulnerable dependency: joi@17.9.0 (GHSA-q7cg-457f-vx79)
medium
Vulnerable dependency: joi@17.9.0 (GHSA-wr44-6hxh-3jwq)
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-2883-xcg3-v3hh)
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-52cp-r559-cp3m)
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-5p4m-2wfm-xmqj)
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-h67p-54hq-rp68)
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-mh29-5h37-fv8m)
medium
Vulnerable dependency: multer@2.0.2 (GHSA-3p4h-7m6x-2hcm)
medium
Vulnerable dependency: multer@2.0.2 (GHSA-535w-7cp7-47q4)
medium
Vulnerable dependency: multer@2.0.2 (GHSA-5528-5vmv-3xc2)
medium
Vulnerable dependency: multer@2.0.2 (GHSA-72gw-mp4g-v24j)
medium
Vulnerable dependency: multer@2.0.2 (GHSA-qvfw-j98x-7q72)
medium
Vulnerable dependency: multer@2.0.2 (GHSA-v52c-386h-88mc)
medium
Vulnerable dependency: multer@2.0.2 (GHSA-wc9g-mqfw-jrwm)
medium
Vulnerable dependency: multer@2.0.2 (GHSA-xf7r-hgr6-v32p)
medium
Vulnerable dependency: typeorm@0.3.17 (GHSA-2rp8-mm9q-fp49)
medium
Vulnerable dependency: typeorm@0.3.17 (GHSA-9ggv-8w38-r7pm)
medium
Vulnerable dependency: typeorm@0.3.17 (GHSA-q2pj-6v73-8rgj)
medium
Vulnerable dependency: uuid@9.0.0 (GHSA-w5hq-g745-h8pq)
medium
Vulnerable dependency: ws@8.14.0 (GHSA-3h5v-q93c-6h6q)
medium
Vulnerable dependency: ws@8.14.0 (GHSA-58qx-3vcg-4xpx)
medium
Vulnerable dependency: ws@8.14.0 (GHSA-96hv-2xvq-fx4p)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-35jp-ww65-95wh)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-3g43-6gmg-66jw)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-3p68-rc4w-qgx5)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-3w6x-2g7m-8v23)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-42h9-826w-cgv3)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-43fc-jf86-j433)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-445q-vr5w-6q77)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-4hjh-wcwx-xvwj)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-5c9x-8gcm-mpgx)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-62hf-57xw-28j9)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-6chq-wfr3-2hj9)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-777c-7fjr-54vf)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-7q8q-rj6j-mhjq)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-898c-q2cr-xwhg)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-9fr6-4gfg-395g)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-fvcv-3m26-pcqx)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-hfxv-24rg-xrqf)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-j5f8-grm9-p9fc)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-j8rh-479h-cp32)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-jqh4-m9w3-8hp9)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-m7pr-hjqh-92cm)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-mmx7-hfxf-jppx)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-p92q-9vqr-4j8v)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-pf86-5x62-jrwf)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-pmv8-rq9r-6j72)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-pmwg-cvhr-8vh7)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-q8qp-cvcw-x6jj)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-vf2m-468p-8v99)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-vh66-26gq-q6x8)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-w9j2-pvgh-6h63)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-xhjh-pmcv-23jw)
medium
Vulnerable dependency: axios@1.10.0 (GHSA-xx6v-rp6x-q39c)
medium
Vulnerable dependency: figlet@1.8.2 (GHSA-62ch-8vmq-8xm7)
medium
Vulnerable dependency: uuid@10.0.0 (GHSA-w5hq-g745-h8pq)
medium
Vulnerable dependency: @modelcontextprotocol/inspector@0.13.0 (GHSA-7f8r-222p-6f5g)
medium
Vulnerable dependency: @modelcontextprotocol/inspector@0.13.0 (GHSA-g9hg-qhmf-q45m)
medium
High-entropy string (5.72 bits/char) in zaizaizhao-mcp-swagger-server-d4ea935/packages/mcp-swagger-api/src/modules/security/decorators/permissions.decorator.ts:41
info
package.json metadata
info
Transport: streamable-http
info
Required env vars (14)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 418 components
critical
Database URL with Password found in zaizaizhao-mcp-swagger-server-d4ea935/docs/deployment-guide.md
high
Hardcoded Password found in zaizaizhao-mcp-swagger-server-d4ea935/docs/api-authentication-guide.md
critical
Database URL with Password found in zaizaizhao-mcp-swagger-server-d4ea935/packages/mcp-swagger-api/src/modules/ai-assistant/seeds/default-templates.ts
high
Generic API Key Assignment found in zaizaizhao-mcp-swagger-server-d4ea935/packages/mcp-swagger-server/docs/bearer-token-quickstart.md
medium
No build provenance detected (SLSA L0)