← Back to search

modelcontextprotocol/python-sdk

modelcontextprotocol MIT 23,072 stars Scanned 13h ago

D
52 / 100

Versions

1.0.0 latest
May 20, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 106

get_user
unchecked low

Get user profile - returns structured data

get_config
unchecked low

This returns unstructured output - no schema generated

list_cities
unchecked low

Get a list of cities

get_temperature
unchecked low

Get temperature as a simple float

api_status
unchecked low

Get API status

send_message
unchecked low

Send a chat message

hello
unchecked low

A simple hello tool

domain_info
unchecked low

Get domain-specific information

add_two
unchecked low

Tool to add two to the input

add
unchecked low

Add two numbers

generate_poem
unchecked low

Generate a poem using LLM sampling.

create_thumbnail
unchecked low

Create a thumbnail from an image

book_table
unchecked low

Book a table with date availability check. This demonstrates form mode elicitation for collecting non-sensitive user input.

secure_payment
unchecked low

Process a secure payment requiring URL confirmation. This demonstrates URL mode elicitation using ctx.elicit_url() for operations that require out-of-band user interaction.

process_data
unchecked low

Process data with logging.

long_running_task
unchecked low

Execute a task with progress updates.

advanced_tool
unchecked low

Return CallToolResult directly for full control including _meta field.

validated_tool
unchecked low

Return CallToolResult with structured output validation.

empty_result_tool
unchecked low

For empty results, return CallToolResult with empty content.

test_simple_text
unchecked low

Tests simple text content response

test_image_content
unchecked low

Tests image content response

test_audio_content
unchecked low

Tests audio content response

test_embedded_resource
unchecked low

Tests embedded resource content response

test_multiple_content_types
unchecked low

Tests response with multiple content types (text, image, resource)

test_tool_with_logging
unchecked low

Tests tool that emits log messages during execution

test_tool_with_progress
unchecked low

Tests tool that reports progress notifications

test_sampling
unchecked low

Tests server-initiated sampling (LLM completion request)

test_elicitation
unchecked low

Tests server-initiated elicitation (user input request)

test_elicitation_sep1034_defaults
unchecked low

Tests elicitation with default values for all primitive types (SEP-1034)

test_elicitation_sep1330_enums
unchecked low

Tests elicitation with enum schema variations per SEP-1330

test_error_handling
unchecked low

Tests error response handling

test_reconnection
unchecked low

Tests SSE polling by closing stream mid-call (SEP-1699)

get_time
unchecked low

Get the current server time. This tool demonstrates that system information can be protected by OAuth authentication. User must be authenticated to access it.

get_weather_summary
unchecked low

Get a brief weather summary for a city

get_weather_metrics
unchecked low

Get weather metrics for multiple cities Returns a dictionary mapping city names to their metrics

get_weather_alerts
unchecked low

Get active weather alerts for a region

get_weather_stats
unchecked low

Get weather statistics for the past N days

hello_unicode
unchecked low

A simple tool that demonstrates Unicode handling in: - Tool description (emojis, accents, CJK characters) - Parameter defaults (CJK characters) - Return values (Spanish punctuation, emojis)

list_emoji_categories
unchecked low

Returns a list of emoji categories with emoji examples.

multilingual_hello
unchecked low

Returns hello in different scripts and writing systems.

remember
unchecked low

read_profile
unchecked low

text_me
unchecked low

Send a text message to a phone number via https://surgemsg.com/

take_screenshot
unchecked low

Take a screenshot of the user's screen and return it as an image. Use this tool anytime the user wants you to look at something they're doing.

greet_user
unchecked low

Greet a user with optional title and repetition

echo_tool
unchecked low

Echo the input text

demo_tool
unchecked low

A demo tool with an icon.

name_shrimp
unchecked low

List all shrimp names in the tank

my_tool
unchecked low

tool_with_context
unchecked low

async_tool
unchecked low

check_lifespan
unchecked low

Tool that checks lifespan context.

connect_service
unchecked low

multi_auth
unchecked low

failing_tool
unchecked low

greet
unchecked low

A greeting tool

basic_tool
unchecked low

tool_with_title
unchecked low

tool_with_annotations
unchecked low

tool_with_both
unchecked low

hello_world
unchecked low

sum
unchecked low

tool_with_resource
unchecked low

echo
unchecked low

Echo a message back.

upload_file
unchecked low

Upload a file.

analyze_text
unchecked low

Analyze text content.

tool1
unchecked low

First tool.

tool2
unchecked low

Second tool.

tool3
unchecked low

Third tool without metadata.

combined_tool
unchecked low

Tool with both metadata and annotations.

ask_user
unchecked low

optional_tool
unchecked low

invalid_optional_tool
unchecked low

valid_multiselect_tool
unchecked low

optional_multiselect_tool
unchecked low

defaults_tool
unchecked low

select_favorite_color
unchecked low

select_favorite_colors
unchecked low

select_color_legacy
unchecked low

tool
unchecked low

request_api_key
unchecked low

oauth_flow
unchecked low

payment_flow
unchecked low

setup_credentials
unchecked low

check_url_response
unchecked low

ask_name
unchecked low

trigger_elicitation
unchecked low

test_decline
unchecked low

test_cancel
unchecked low

use_deprecated_elicit
unchecked low

direct_elicit_url
unchecked low

delete_file
unchecked low

query_db
unchecked low

Tool that uses initialized resources

dummy_tool_func
unchecked low

sleep_tool
unchecked low

trigger
unchecked low

test_tool
unchecked low

A test tool with an icon.

multi_icon_tool
unchecked low

A tool with multiple icons.

test_sampling_tool
unchecked low

test_list_roots
unchecked low

test_tool_with_log
unchecked low

Send a log notification to the client.

test_tool_with_log_dict
unchecked low

Send a log notification with a dict payload.

check_context
unchecked low

Return the contextvar value visible to the handler.

get_weather
unchecked low

Get weather for a city - returns structured data.

get_location
unchecked low

Get location coordinates

get_statistics
unchecked low

Get various statistics

Permissions 5

network medium
Server uses network capabilities via: http, httpx, requests, socket, urllib, websocket
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: subprocess
database medium
Server uses database capabilities via: asyncpg
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 265

info
pyproject.toml metadata manifest_parser · 100%
info
Tool: check_lifespan manifest_parser · 90%
info
Tool: connect_service manifest_parser · 90%
info
Tool: multi_auth manifest_parser · 90%
info
Tool: failing_tool manifest_parser · 90%
info
Tool: tool_with_title manifest_parser · 90%
info
Tool: tool_with_annotations manifest_parser · 90%
info
Tool: tool_with_both manifest_parser · 90%
info
Tool: hello_world manifest_parser · 90%
info
Tool: sum manifest_parser · 90%
info
Tool: tool_with_resource manifest_parser · 90%
info
Tool: upload_file manifest_parser · 90%
info
Tool: analyze_text manifest_parser · 90%
info
Tool: tool1 manifest_parser · 90%
info
Tool: tool2 manifest_parser · 90%
info
Tool: tool3 manifest_parser · 90%
info
Tool: combined_tool manifest_parser · 90%
info
Tool: ask_user manifest_parser · 90%
info
Tool: optional_tool manifest_parser · 90%
info
Tool: invalid_optional_tool manifest_parser · 90%
info
Tool: valid_multiselect_tool manifest_parser · 90%
info
Tool: optional_multiselect_tool manifest_parser · 90%
info
Tool: defaults_tool manifest_parser · 90%
info
Tool: select_favorite_color manifest_parser · 90%
info
Tool: select_favorite_colors manifest_parser · 90%
info
Tool: select_color_legacy manifest_parser · 90%
info
Tool: tool manifest_parser · 90%
info
Tool: request_api_key manifest_parser · 90%
info
Tool: oauth_flow manifest_parser · 90%
info
Tool: payment_flow manifest_parser · 90%
info
Tool: setup_credentials manifest_parser · 90%
info
Tool: check_url_response manifest_parser · 90%
info
Tool: ask_name manifest_parser · 90%
info
Tool: trigger_elicitation manifest_parser · 90%
info
Tool: test_decline manifest_parser · 90%
info
Tool: test_cancel manifest_parser · 90%
info
Tool: use_deprecated_elicit manifest_parser · 90%
info
Tool: direct_elicit_url manifest_parser · 90%
info
Tool: delete_file manifest_parser · 90%
info
Tool: query_db manifest_parser · 90%
info
Tool: dummy_tool_func manifest_parser · 90%
info
Tool: trigger manifest_parser · 90%
info
Tool: sleep_tool manifest_parser · 90%
info
Tool: multi_icon_tool manifest_parser · 90%
info
Tool: basic_tool manifest_parser · 90%
info
Tool: test_sampling_tool manifest_parser · 90%
info
Tool: test_list_roots manifest_parser · 90%
info
Tool: test_tool manifest_parser · 90%
info
Tool: test_tool_with_log manifest_parser · 90%
info
Tool: test_tool_with_log_dict manifest_parser · 90%
info
Tool: greet manifest_parser · 90%
info
Tool: check_context manifest_parser · 90%
info
Tool: get_weather manifest_parser · 90%
info
Tool: get_location manifest_parser · 90%
info
Tool: get_statistics manifest_parser · 90%
info
Tool: get_user manifest_parser · 90%
info
Tool: get_config manifest_parser · 90%
info
Tool: list_cities manifest_parser · 90%
info
Tool: api_status manifest_parser · 90%
info
Tool: send_message manifest_parser · 90%
info
Tool: hello manifest_parser · 90%
info
Tool: domain_info manifest_parser · 90%
info
Tool: add_two manifest_parser · 90%
info
Tool: add manifest_parser · 90%
info
Tool: generate_poem manifest_parser · 90%
info
Tool: create_thumbnail manifest_parser · 90%
info
Tool: book_table manifest_parser · 90%
info
Tool: secure_payment manifest_parser · 90%
info
Tool: long_running_task manifest_parser · 90%
info
Tool: advanced_tool manifest_parser · 90%
info
Tool: validated_tool manifest_parser · 90%
info
Tool: empty_result_tool manifest_parser · 90%
info
Tool: process_data manifest_parser · 90%
info
Tool: test_simple_text manifest_parser · 90%
info
Tool: test_image_content manifest_parser · 90%
info
Tool: test_audio_content manifest_parser · 90%
info
Tool: test_embedded_resource manifest_parser · 90%
info
Tool: test_multiple_content_types manifest_parser · 90%
info
Tool: test_tool_with_logging manifest_parser · 90%
info
Tool: test_tool_with_progress manifest_parser · 90%
info
Tool: test_sampling manifest_parser · 90%
info
Tool: test_elicitation manifest_parser · 90%
info
Tool: test_elicitation_sep1034_defaults manifest_parser · 90%
info
Tool: test_elicitation_sep1330_enums manifest_parser · 90%
info
Tool: test_error_handling manifest_parser · 90%
info
Tool: test_reconnection manifest_parser · 90%
info
Tool: get_time manifest_parser · 90%
info
Tool: get_weather_summary manifest_parser · 90%
info
Tool: get_weather_metrics manifest_parser · 90%
info
Tool: get_weather_alerts manifest_parser · 90%
info
Tool: get_temperature manifest_parser · 90%
info
Tool: get_weather_stats manifest_parser · 90%
info
Tool: hello_unicode manifest_parser · 90%
info
Tool: list_emoji_categories manifest_parser · 90%
info
Tool: multilingual_hello manifest_parser · 90%
info
Tool: remember manifest_parser · 90%
info
Tool: read_profile manifest_parser · 90%
info
Tool: echo manifest_parser · 90%
info
Tool: text_me manifest_parser · 90%
info
Tool: take_screenshot manifest_parser · 90%
info
Tool: greet_user manifest_parser · 90%
info
Tool: echo_tool manifest_parser · 90%
info
Tool: demo_tool manifest_parser · 90%
info
Tool: name_shrimp manifest_parser · 90%
info
Tool: my_tool manifest_parser · 60%
info
Tool: tool_with_context manifest_parser · 60%
info
Tool: async_tool manifest_parser · 60%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (8) manifest_parser · 80%
low
Tool 'check_lifespan' has no annotations annotation_checker · 100%
low
Tool 'multi_auth' has no annotations annotation_checker · 100%
low
Tool 'failing_tool' has no annotations annotation_checker · 100%
low
Tool 'tool_with_title' has no annotations annotation_checker · 100%
low
Tool 'tool_with_annotations' has no annotations annotation_checker · 100%
low
Tool 'tool_with_both' has no annotations annotation_checker · 100%
low
Tool 'hello_world' has no annotations annotation_checker · 100%
low
Tool 'tool_with_resource' has no annotations annotation_checker · 100%
low
Tool 'upload_file' has no annotations annotation_checker · 100%
low
Tool 'analyze_text' has no annotations annotation_checker · 100%
low
Tool 'tool1' has no annotations annotation_checker · 100%
low
Tool 'tool2' has no annotations annotation_checker · 100%
low
Tool 'tool3' has no annotations annotation_checker · 100%
low
Tool 'combined_tool' has no annotations annotation_checker · 100%
low
Tool 'ask_user' has no annotations annotation_checker · 100%
low
Tool 'optional_tool' has no annotations annotation_checker · 100%
low
Tool 'invalid_optional_tool' has no annotations annotation_checker · 100%
low
Tool 'valid_multiselect_tool' has no annotations annotation_checker · 100%
low
Tool 'optional_multiselect_tool' has no annotations annotation_checker · 100%
low
Tool 'defaults_tool' has no annotations annotation_checker · 100%
low
Tool 'select_favorite_color' has no annotations annotation_checker · 100%
low
Tool 'select_favorite_colors' has no annotations annotation_checker · 100%
low
Tool 'select_color_legacy' has no annotations annotation_checker · 100%
low
Tool 'tool' has no annotations annotation_checker · 100%
low
Tool 'request_api_key' has no annotations annotation_checker · 100%
low
Tool 'oauth_flow' has no annotations annotation_checker · 100%
low
Tool 'payment_flow' has no annotations annotation_checker · 100%
low
Tool 'setup_credentials' has no annotations annotation_checker · 100%
low
Tool 'check_url_response' has no annotations annotation_checker · 100%
low
Tool 'ask_name' has no annotations annotation_checker · 100%
low
Tool 'trigger_elicitation' has no annotations annotation_checker · 100%
low
Tool 'test_decline' has no annotations annotation_checker · 100%
low
Tool 'test_cancel' has no annotations annotation_checker · 100%
low
Tool 'use_deprecated_elicit' has no annotations annotation_checker · 100%
low
Tool 'direct_elicit_url' has no annotations annotation_checker · 100%
low
Tool 'delete_file' has no annotations annotation_checker · 100%
low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'query_db' has no annotations annotation_checker · 100%
low
Tool 'dummy_tool_func' has no annotations annotation_checker · 100%
low
Tool 'trigger' has no annotations annotation_checker · 100%
low
Tool 'sleep_tool' has no annotations annotation_checker · 100%
low
Tool 'basic_tool' has no annotations annotation_checker · 100%
low
Tool 'test_sampling_tool' has no annotations annotation_checker · 100%
low
Tool 'test_list_roots' has no annotations annotation_checker · 100%
low
Tool 'test_tool' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_log' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_log_dict' has no annotations annotation_checker · 100%
low
Tool 'check_context' has no annotations annotation_checker · 100%
low
Tool 'get_location' has no annotations annotation_checker · 100%
low
Tool 'get_statistics' has no annotations annotation_checker · 100%
low
Tool 'get_user' has no annotations annotation_checker · 100%
low
Tool 'get_config' has no annotations annotation_checker · 100%
low
Tool 'list_cities' has no annotations annotation_checker · 100%
low
Tool 'api_status' has no annotations annotation_checker · 100%
low
Tool 'send_message' has no annotations annotation_checker · 100%
low
Tool 'get_weather' has no annotations annotation_checker · 100%
low
Tool 'hello' has no annotations annotation_checker · 100%
low
Tool 'domain_info' has no annotations annotation_checker · 100%
low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'add_two' has no annotations annotation_checker · 100%
low
Tool 'add' has no annotations annotation_checker · 100%
low
Tool 'generate_poem' has no annotations annotation_checker · 100%
low
Tool 'create_thumbnail' has no annotations annotation_checker · 100%
low
Tool 'book_table' has no annotations annotation_checker · 100%
low
Tool 'secure_payment' has no annotations annotation_checker · 100%
low
Tool 'connect_service' has no annotations annotation_checker · 100%
low
Tool 'long_running_task' has no annotations annotation_checker · 100%
low
Tool 'advanced_tool' has no annotations annotation_checker · 100%
low
Tool 'validated_tool' has no annotations annotation_checker · 100%
low
Tool 'empty_result_tool' has no annotations annotation_checker · 100%
low
Tool 'process_data' has no annotations annotation_checker · 100%
low
Tool 'test_simple_text' has no annotations annotation_checker · 100%
low
Tool 'test_image_content' has no annotations annotation_checker · 100%
low
Tool 'test_audio_content' has no annotations annotation_checker · 100%
low
Tool 'test_embedded_resource' has no annotations annotation_checker · 100%
low
Tool 'test_multiple_content_types' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_logging' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_progress' has no annotations annotation_checker · 100%
low
Tool 'test_sampling' has no annotations annotation_checker · 100%
low
Tool 'test_elicitation' has no annotations annotation_checker · 100%
low
Tool 'test_elicitation_sep1034_defaults' has no annotations annotation_checker · 100%
low
Tool 'test_elicitation_sep1330_enums' has no annotations annotation_checker · 100%
low
Tool 'test_error_handling' has no annotations annotation_checker · 100%
low
Tool 'test_reconnection' has no annotations annotation_checker · 100%
low
Tool 'get_time' has no annotations annotation_checker · 100%
low
Tool 'get_weather_summary' has no annotations annotation_checker · 100%
low
Tool 'get_weather_metrics' has no annotations annotation_checker · 100%
low
Tool 'get_weather_alerts' has no annotations annotation_checker · 100%
low
Tool 'get_temperature' has no annotations annotation_checker · 100%
low
Tool 'get_weather_stats' has no annotations annotation_checker · 100%
low
Tool 'hello_unicode' has no annotations annotation_checker · 100%
low
Tool 'list_emoji_categories' has no annotations annotation_checker · 100%
low
Tool 'multilingual_hello' has no annotations annotation_checker · 100%
low
Tool 'remember' has no annotations annotation_checker · 100%
low
Tool 'read_profile' has no annotations annotation_checker · 100%
low
Tool 'text_me' has no annotations annotation_checker · 100%
low
Tool 'take_screenshot' has no annotations annotation_checker · 100%
low
Tool 'greet_user' has no annotations annotation_checker · 100%
low
Tool 'echo_tool' has no annotations annotation_checker · 100%
low
Tool 'demo_tool' has no annotations annotation_checker · 100%
low
Tool 'multi_icon_tool' has no annotations annotation_checker · 100%
low
Tool 'sum' has no annotations annotation_checker · 100%
low
Tool 'name_shrimp' has no annotations annotation_checker · 100%
low
Tool 'my_tool' has no annotations annotation_checker · 100%
low
Tool 'tool_with_context' has no annotations annotation_checker · 100%
low
Tool 'async_tool' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in tests/client/test_auth.py auth_checker · 95%
high
Hardcoded OAuth client secret in tests/client/auth/extensions/test_client_credentials.py auth_checker · 95%
high
Hardcoded OAuth client secret in src/mcp/client/auth/extensions/client_credentials.py auth_checker · 95%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Excessive dependency count: 90 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27.1,<1.0.0 (GHSA-h8pj-cxx2-jfg2) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27.1,<1.0.0 (PYSEC-2022-183) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-2c2j-9gv5-cj73) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-74m5-2c7w-9w3x) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-f96h-pmfr-66vw) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (PYSEC-2023-48) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-2c2j-9gv5-cj73) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-74m5-2c7w-9w3x) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-f96h-pmfr-66vw) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (PYSEC-2023-48) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-59g5-xgcq-4qw3) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-mj87-hwqh-73pj) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-pp6c-gr5w-3c5g) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-wp53-j4wj-2cfg) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (GHSA-33c7-2mpw-hg34) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (GHSA-f97h-2pfx-f59f) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (PYSEC-2020-150) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (PYSEC-2020-151) dependency_analyzer · 95%
medium
Vulnerable dependency: pywin32@311; sys_platform == 'win32' (GHSA-hwfp-hg2m-9vr2) dependency_analyzer · 95%
medium
Vulnerable dependency: pywin32@311; sys_platform == 'win32' (PYSEC-2021-112) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-33c7-2mpw-hg34) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-f97h-2pfx-f59f) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-150) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-151) dependency_analyzer · 95%
critical
Database URL with Password found in examples/mcpserver/memory.py secret_scanner · 85%
info
SLSA Build Level 2 detected slsa_assessor · 85%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 4 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%