← Back to search

metronorth-mcp

GitHub Actions Scanned 6d ago

MCP server for Metro-North schedules, stations, service alerts, and real-time departures

npm
? Not scanned yet

Versions

2.3.0latest
Jul 2, 2026
2.2.0
Jul 2, 2026
2.1.4
Jul 2, 2026
2.1.3
Jun 27, 2026
2.1.2
Jun 27, 2026
+ show 3 moreshow less
2.1.1
Jun 27, 2026
2.1.0
May 31, 2026
2.0.0
May 31, 2026

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
database medium
Server uses database capabilities via: better-sqlite3
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 24

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: adm-zip@0.5.16 (GHSA-xcpc-8h2w-3j85) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.1 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.1 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.1 (GHSA-f4gw-2p7v-4548) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.1 (GHSA-gcfj-64vw-6mp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.1 (GHSA-hcpx-6fm6-wx23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.1 (GHSA-jqh4-m9w3-8hp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.1 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.1 (GHSA-mwf2-3pr3-8698) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.1 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.16.1 (GHSA-xj6q-8x83-jv6g) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@8.6.5 (GHSA-j3f2-48v5-ccww) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (8) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 378 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%