← Back to search

modelcontextprotocol/python-sdk

modelcontextprotocol MIT 23,072 stars Scanned 4d ago

D
40 / 100

Versions

1.27.1latest
May 8, 2026
1.27.0
Apr 2, 2026
1.26.0
Jan 24, 2026
1.25.0
Dec 18, 2025
1.24.0
Dec 12, 2025
+ show 50 moreshow less
1.23.3
Dec 9, 2025
1.23.2
Dec 4, 2025
1.23.1
Dec 2, 2025
1.23.0
Dec 2, 2025
1.22.0
Nov 20, 2025
1.21.2
Nov 17, 2025
1.21.1
Nov 13, 2025
1.21.0
Nov 6, 2025
1.20.0
Oct 30, 2025
1.19.0
Oct 24, 2025
1.18.0
Oct 16, 2025
1.17.0
Oct 9, 2025
1.16.0
Oct 2, 2025
1.15.0
Sep 25, 2025
1.14.1
Sep 18, 2025
1.14.0
Sep 11, 2025
1.13.1
Aug 21, 2025
1.13.0
Aug 14, 2025
1.12.4
Aug 7, 2025
1.12.3
Jul 31, 2025
1.12.2
Jul 24, 2025
1.12.1
Jul 22, 2025
1.12.0
Jul 17, 2025
1.11.0
Jul 10, 2025
1.10.1
Jun 27, 2025
1.10.0
Jun 26, 2025
1.9.4
Jun 12, 2025
1.9.3
Jun 5, 2025
1.9.2
May 29, 2025
1.9.1
May 22, 2025
1.9.0
May 15, 2025
1.8.1
May 12, 2025
1.8.0
May 8, 2025
1.7.1
May 2, 2025
1.7.0
May 1, 2025
1.6.0
Mar 27, 2025
1.5.0
Mar 21, 2025
1.4.1
Mar 14, 2025
1.4.0
Mar 13, 2025
1.3.0
Feb 20, 2025
1.3.0rc1
Feb 13, 2025
1.2.1
Jan 27, 2025
1.2.0
Jan 3, 2025
1.1.3
Jan 3, 2025
1.2.0rc1
Dec 23, 2024
1.1.2
Dec 12, 2024
1.1.1
Dec 9, 2024
1.1.0
Dec 3, 2024
1.0.0
Nov 25, 2024
0.9.1
Nov 20, 2024
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 257

echo_tool
annotations: none low

Echo the input text

text str
demo_tool
annotations: none low

A demo tool with an icon.

message str
multi_icon_tool
annotations: none low

A tool demonstrating multiple icons.

action str
text_me
annotations: none low

Send a text message to a phone number via https://surgemsg.com/

text_content str
echo
annotations: none low

Echo the input text

text str
greet_user
annotations: none low

Greet a user with optional title and repetition

name str times int title str
get_weather
annotations: none low

Get current weather for a city with full structured data

city str
get_weather_summary
annotations: none low

Get a brief weather summary for a city

city str
get_weather_alerts
annotations: none low

Get active weather alerts for a region

region str
get_weather_metrics
annotations: none low

Get weather metrics for multiple cities Returns a dictionary mapping city names to their metrics

cities string
get_temperature
annotations: none low

Get just the temperature for a city When returning primitives as structured output, the result is wrapped in {"result": value}

city str unit str
get_weather_stats
annotations: none low

Get weather statistics for the past N days

city str days int
sum
annotations: none low

Add two numbers

a int b int
take_screenshot
annotations: none low

Take a screenshot of the user's screen and return it as an image. Use this tool anytime the user wants you to look at something they're doing.

remember
annotations: none low

contents string
read_profile
annotations: none low

hello_unicode
annotations: none low

A simple tool that demonstrates Unicode handling in: - Tool description (emojis, accents, CJK characters) - Parameter defaults (CJK characters) - Return values (Spanish punctuation, emojis)

name str greeting str
list_emoji_categories
annotations: none low

Returns a list of emoji categories with emoji examples.

multilingual_hello
annotations: none low

Returns hello in different scripts and writing systems.

name_shrimp
annotations: none low

List all shrimp names in the tank

tank ShrimpTank extra_names string
create_thumbnail
annotations: none low

Create a thumbnail from an image

image_path str
book_table
annotations: none low

Book a table with date availability check. This demonstrates form mode elicitation for collecting non-sensitive user input.

ctx Context date str time str party_size int
secure_payment
annotations: none low

Process a secure payment requiring URL confirmation. This demonstrates URL mode elicitation using ctx.elicit_url() for operations that require out-of-band user interaction.

ctx Context amount float
connect_service
annotations: none low

Connect to a third-party service requiring OAuth authorization. This demonstrates the "throw error" pattern using UrlElicitationRequiredError. Use this pattern when the tool cannot proceed without user authorization.

ctx Context service_name str
get_location
annotations: none low

Get location coordinates

address str
get_statistics
annotations: none low

Get various statistics

data_type str
get_user
annotations: none low

Get user profile - returns structured data

user_id str
get_config
annotations: none low

This returns unstructured output - no schema generated

list_cities
annotations: none low

Get a list of cities

add
annotations: none low

Add two numbers

a int b int
process_data
annotations: none low

Process some data

data str
hello
annotations: none low

Say hello to someone.

name str
greet
annotations: none low

Greet someone by name.

name str
add_two
annotations: none low

Tool to add two to the input

n int
api_status
annotations: none low

Get API status

send_message
annotations: none low

Send a chat message

message str
advanced_tool
annotations: none low

Return CallToolResult directly for full control including _meta field.

validated_tool
annotations: none low

Return CallToolResult with structured output validation.

empty_result_tool
annotations: none low

For empty results, return CallToolResult with empty content.

generate_poem
annotations: none low

Generate a poem using LLM sampling.

ctx Context topic str
domain_info
annotations: none low

Get domain-specific information

long_running_task
annotations: none low

Execute a task with progress updates.

ctx Context steps int task_name str
query_db
annotations: none low

Tool that uses initialized resources.

ctx string
register_user
annotations: none low

ctx Context
link_account
annotations: none low

ctx Context provider str
which_arm
annotations: none low

Report which era the built-in router dispatched this request to.

ctx Context
add_note
annotations: none low

Add a sticky note and register a `note:///{id}` resource for it.

ctx string text str
remove_note
annotations: none low

Remove one sticky note and unregister its resource.

ctx string note_id str
remove_all
annotations: none low

Remove every note after a confirmed form-mode elicitation (handshake-era only).

ctx string
countdown
annotations: none low

Emit one progress + one log notification per step; observes cancellation.

ctx Context steps int
whoami
annotations: none low

deploy
annotations: none low

ctx Context env str
calc
annotations: none low

a float b float op string
refund_order
annotations: none low

cents string reason str restock string order_id str
get_time
annotations: none low

ctx Context
show_roots
annotations: none low

ctx Context
greet_pydantic
annotations: none low

`who` arrives as a validated PersonModel instance.

who PersonModel
greet_typeddict
annotations: none low

`who` arrives as a plain dict; TypedDict drives the schema and editor hints.

who PersonTD
greet_dataclass
annotations: none low

`who` arrives as a PersonDC instance (pydantic coerces the wire dict).

who PersonDC
greet_dict
annotations: none low

`who` is a free-form object — any dict passes; the handler must check it.

who string
long_operation
annotations: none low

Emit progress, close this call's SSE stream, emit more progress, then return. Everything sent after `close_sse_stream()` lands in the event store and is replayed when the client reconnects with `Last-Event-ID`.

ctx Context
lookup
annotations: none low

ctx string key str
summarize
annotations: none low

ctx Context text str
divide
annotations: none low

Divide a by b. Division by zero is an execution error the LLM should see.

a float b float
restricted
annotations: none low

A tool that always rejects the caller at the protocol level.

edit_note
annotations: none low

Replace a note's text and tell subscribers that URI changed.

ctx Context name str text str
enable_search
annotations: none low

Register the `search` tool at runtime and tell subscribers the list changed.

ctx Context
meet
annotations: none low

Signal arrival as `tag`, block until every tag in `party` has also arrived, then return.

ctx Context tag str party string
test_simple_text
annotations: none low

Tests simple text content response

test_image_content
annotations: none low

Tests image content response

test_audio_content
annotations: none low

Tests audio content response

test_embedded_resource
annotations: none low

Tests embedded resource content response

test_multiple_content_types
annotations: none low

Tests response with multiple content types (text, image, resource)

test_tool_with_logging
annotations: none low

Tests tool that emits log messages during execution

ctx Context
test_tool_with_progress
annotations: none low

Tests tool that reports progress notifications

ctx Context
test_sampling
annotations: none low

Tests server-initiated sampling (LLM completion request)

ctx Context prompt str
test_elicitation
annotations: none low

Tests server-initiated elicitation (user input request)

ctx Context message str
test_elicitation_sep1034_defaults
annotations: none low

Tests elicitation with default values for all primitive types (SEP-1034)

ctx Context
test_elicitation_sep1330_enums
annotations: none low

Tests elicitation with enum schema variations per SEP-1330

ctx Context
test_error_handling
annotations: none low

Tests error response handling

test_x_mcp_header
annotations: none low

Tests SEP-2243 Mcp-Param-* server-side validation. Arms the http-custom-header-server-validation conformance scenario, which skips when no tool with an `x-mcp-header` annotation is found.

region string
test_missing_capability
annotations: none low

Tests that a handler-raised MISSING_REQUIRED_CLIENT_CAPABILITY surfaces as a top-level JSON-RPC error. Requires the client to declare the ``sampling`` capability. When absent, raises `MCPError` (which the tool dispatch re-raises rather than wrapping in ``CallToolResult.isError``) so the conformance harness observes a protocol-level error response with ``data.requiredCapabilities``.

ctx Context
test_input_required_result_elicitation
annotations: none low

Tests InputRequiredResult with a single elicitation request

ctx Context
test_input_required_result_sampling
annotations: none low

Tests InputRequiredResult with a single sampling request

ctx Context
test_input_required_result_list_roots
annotations: none low

Tests InputRequiredResult with a single roots/list request

ctx Context
test_input_required_result_request_state
annotations: none low

Tests requestState round-tripping in the InputRequiredResult flow

ctx Context
test_input_required_result_multiple_inputs
annotations: none low

Tests InputRequiredResult carrying elicitation, sampling and roots requests together

ctx Context
test_input_required_result_multi_round
annotations: none low

Tests a three-round InputRequiredResult flow with evolving requestState

ctx Context
test_input_required_result_tampered_state
annotations: none low

Tests that the server rejects a tampered requestState echo. The handler stays plaintext; tamper rejection happens in the SDK's request-state boundary.

ctx Context
test_input_required_result_capabilities
annotations: none low

Tests that inputRequests only include methods the client declared support for

ctx Context
json_schema_2020_12_tool
annotations: none low

Tests JSON Schema 2020-12 keyword preservation in tools/list (inputSchema installed below).

test_reconnection
annotations: none low

Tests SSE polling by closing stream mid-call (SEP-1699)

ctx Context
test_trigger_tool_change
annotations: none low

Mutates the tool list and announces it to subscriptions/listen streams (SEP-2575)

ctx Context
test_trigger_prompt_change
annotations: none low

Mutates the prompt list and announces it to subscriptions/listen streams (SEP-2575)

ctx Context
check_context
annotations: none low

Return the contextvar value visible to the handler.

ask
annotations: none low

ctx Context
count_roots
annotations: none low

ctx Context
multi
annotations: none low

ctx Context
needs_input
annotations: none low

ctx Context
issue
annotations: none low

Issue a voucher.

park
annotations: none low

tag str
fan_out
annotations: none low

ctx Context
test_sampling_tool
annotations: none low

ctx Context message str
test_tool
annotations: none low

ctx Context message str
test_tool_with_log
annotations: none low

Send a log notification to the client.

ctx Context level string logger str message str
test_tool_with_log_dict
annotations: none low

Send a log notification with a dict payload.

ctx Context level string logger str
test_list_roots
annotations: none low

context Context message str
show
annotations: none low

Show the lifespan context.

ctx Context
sign_up
annotations: none low

Collect the new customer's details.

ctx Context
choose_seating
annotations: none low

Ask where the party wants to sit.

ctx Context
forecast
annotations: none low

Today's forecast for one city. Crashes: the upstream table is missing the key.

city str
forecast_weekly
annotations: none low

The week ahead for one city. Never called: it is the duplicate that gets dropped.

city str
ask_model
annotations: none low

A tool still built on server-initiated sampling.

ctx Context prompt str
old_log
annotations: none low

A tool still built on protocol logging.

ctx Context
report
annotations: none low

chart
annotations: none low

refund
annotations: none low

ctx Context amount int
sleep_tool
annotations: none low

trigger
annotations: none low

dummy_tool_func
annotations: none low

basic_tool
annotations: none low

A basic tool without icons.

check_lifespan
annotations: none low

Tool that checks lifespan context.

ctx Context
wizard
annotations: none low

ctx Context
announce
annotations: none low

Emit one info-level log carrying the caller's label, then return it.

ctx Context label str
count
annotations: none low

Emit n log notifications related to this call, plus one unrelated resource update.

n int ctx Context
burst
annotations: none low

ctx Context
hold
annotations: none low

Signal start, wait for the test, signal completion.

ctx Context
interrupt
annotations: none low

Emit, close this call's SSE stream, then emit again after the test releases the gate.

ctx Context
touch_tools
annotations: none low

ctx Context
place
annotations: none low

mode string count string point Point
explode
annotations: none low

flux
annotations: none low

primes
annotations: none low

mismatched
annotations: none low

missing
annotations: none low

read_files
annotations: none low

doomed
annotations: none low

A tool removed at runtime; never called.

grow
annotations: none low

ctx Context
bad
annotations: none low

narrate
annotations: none low

ctx Context
crunch
annotations: none low

ctx Context
mill
annotations: none low

ctx Context
book_flight
annotations: none low

ctx Context
show_config
annotations: none low

ctx Context
chatter
annotations: none low

ctx Context
buy
annotations: none low

Buy an item.

item str
redeem
annotations: none low

Exchange a receipt token for the goods.

token str
declared
annotations: none low

Report the extension identifiers the client advertised.

ctx Context
request_api_key
annotations: none low

ctx Context
oauth_flow
annotations: none low

ctx Context
payment_flow
annotations: none low

ctx Context
setup_credentials
annotations: none low

ctx Context
check_url_response
annotations: none low

ctx Context
ask_name
annotations: none low

ctx Context
trigger_elicitation
annotations: none low

ctx Context
test_decline
annotations: none low

ctx Context
test_cancel
annotations: none low

ctx Context
use_deprecated_elicit
annotations: none low

ctx Context
direct_elicit_url
annotations: none low

ctx Context
ask_user
annotations: none low

ctx Context prompt str
optional_tool
annotations: none low

ctx Context
invalid_optional_tool
annotations: none low

ctx Context
defaults_tool
annotations: none low

ctx Context
select_favorite_color
annotations: none low

ctx Context
select_color_legacy
annotations: none low

ctx Context
select_favorite_colors
annotations: none low

ctx Context
pick
annotations: none low

ctx Context
tool
annotations: none low

ctx Context
_tool
annotations: none low

ctx Context
star_repo
annotations: none low

repo str login string confirm string
run
annotations: none low

schema str shouted string
use_token
annotations: none low

token string
delete_folder
annotations: none low

path str confirm string
act
annotations: none low

login string confirm string
both
annotations: none low

name string confirm string
long_haul
annotations: none low

leg string last string
plan_restock
annotations: none low

restock string
chain
annotations: none low

c string
manual
annotations: none low

listy
annotations: none low

login string
sneaky
annotations: none low

login string
capital
annotations: none low

answer string
workspace
annotations: none low

roots string
combo
annotations: none low

login string roots string answer string
plain
annotations: none low

quote
annotations: none low

price string title str
tool_with_title
annotations: none low

message str
tool_with_annotations
annotations: none low

message str
tool_with_both
annotations: none low

message str
multi_auth
annotations: none low

ctx Context
failing_tool
annotations: none low

ctx Context
upload_file
annotations: none low

Upload a file.

filename str
analyze_text
annotations: none low

Analyze text content.

text str
tool1
annotations: none low

First tool.

x int
tool2
annotations: none low

Second tool.

y str
tool3
annotations: none low

Third tool without metadata.

z bool
combined_tool
annotations: none low

Tool with both metadata and annotations.

data str
get_person
annotations: none low

tree
annotations: none low

outer
annotations: none low

ctx Context
spend
annotations: none low

parse
annotations: none low

gated
annotations: none low

summarise
annotations: none low

ctx Context title str
refuse
annotations: none low

inner
annotations: none low

probe
annotations: none low

ctx Context
touch
annotations: none low

ctx Context
ping
annotations: none low

hello_world
annotations: none low

name str
direct
annotations: none low

unstructured
annotations: none low

structured
annotations: none low

tool_with_resource
annotations: none low

ctx Context
needs_sampling
annotations: none low

boom
annotations: none low

delete_file
annotations: none low

path str
order_book
annotations: none low

Order a book from the shop.

stock string title str backorder string
reserve_book
annotations: none low

Reserve a copy of a book.

stock string title str
recommend_book
annotations: none low

Recommend a book in the given genre.

genre str suggestion string
weather_report
annotations: none low

A human-readable weather report for a city.

city str
get_forecast
annotations: none low

Daily forecast for a city.

city str days int
get_station
annotations: none low

Look up a weather station by name.

name str
get_temperatures
annotations: none low

Current temperature for each city, in degrees Celsius.

cities string
pay_deposit
annotations: none low

Take the deposit that confirms a booking.

ctx Context booking_id str
confirm_deposit
annotations: none low

Record a payment reported by the payment provider.

ctx Context booking_id str
enable_recommendations
annotations: none low

Switch on the recommendation tool.

ctx Context
search_books
annotations: none low

Search the catalog by title or author.

ctx Context query str
describe_catalog
annotations: none low

Describe how the catalog is organised.

ctx Context
issue_card
annotations: none low

Issue a new library card.

ctx Context
client_features
annotations: none low

Which optional features the connected client declared.

ctx Context
list_notes
annotations: none low

List every note in the notebook.

add_book
annotations: none low

Add a book to the catalog.

book Book
get_author
annotations: none low

Look up the author of a book in the catalog.

title str
forecast_today
annotations: none low

Today's forecast for one city.

city str
forecast_hourly
annotations: none low

The next few hours for one city.

city str hours int
logo_from_bytes
annotations: none low

The brand logo as a PNG.

logo
annotations: none low

The brand logo as a PNG.

brand_guidelines
annotations: none low

The brand guidelines as a Markdown document.

palette
annotations: none low

The brand colour palette as hex codes.

chime
annotations: none low

The notification chime as a WAV.

lookup_book
annotations: none low

Look up a book by its exact title.

title str
save_template
annotations: none low

Save an instruction as a prompt the user can pick from the menu.

ctx Context name str instruction str
search
annotations: none low

Search the library catalog.

query str
refresh_report
annotations: none low

Refresh the report data.

refresh_dashboard
annotations: none low

Refresh the dashboard data.

import_catalog
annotations: none low

Import book records from a list of catalog URLs.

ctx Context urls string
import_feed
annotations: none low

Import every record a catalog feed yields.

ctx Context feed_url str
restock
annotations: none low

Put copies of a book back on the shelf.

ctx Context title str copies int
reserve
annotations: none low

Reserve copies of a book, asking the user how many.

title str quantity string
count_books
annotations: none low

Count the books in a genre.

ctx string genre str
database_status
annotations: none low

Report whether the database connection is up.

ctx string
blurb
annotations: none low

Draft a blurb for a book.

draft string title str
catalog_folder
annotations: none low

Pick the folder the catalog export should go to.

roots string
add_task
annotations: none low

Create a task.

title str
complete_task
annotations: none low

ctx Context task str board str
enable_reports
annotations: none low

ctx Context

Permissions 5

network medium
Server uses network capabilities via: http, socket, urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: subprocess
database medium
Server uses database capabilities via: asyncpg
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 843

medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
info
Tool: get_weather manifest_parser · 90%
info
Tool: get_weather_summary manifest_parser · 90%
info
Tool: get_weather_metrics manifest_parser · 90%
info
Tool: get_weather_alerts manifest_parser · 90%
info
Tool: get_temperature manifest_parser · 90%
info
Tool: get_weather_stats manifest_parser · 90%
info
Tool: sum manifest_parser · 90%
info
Tool: take_screenshot manifest_parser · 90%
info
Tool: remember manifest_parser · 90%
info
Tool: read_profile manifest_parser · 90%
info
Tool: hello_unicode manifest_parser · 90%
info
Tool: list_emoji_categories manifest_parser · 90%
info
Tool: multilingual_hello manifest_parser · 90%
info
Tool: name_shrimp manifest_parser · 90%
info
Tool: create_thumbnail manifest_parser · 90%
info
Tool: book_table manifest_parser · 90%
info
Tool: secure_payment manifest_parser · 90%
info
Tool: connect_service manifest_parser · 90%
info
Tool: get_location manifest_parser · 90%
info
Tool: get_statistics manifest_parser · 90%
info
Tool: get_user manifest_parser · 90%
info
Tool: get_config manifest_parser · 90%
info
Tool: list_cities manifest_parser · 90%
info
Tool: add manifest_parser · 90%
info
Tool: process_data manifest_parser · 90%
info
Tool: hello manifest_parser · 90%
info
Tool: greet manifest_parser · 90%
info
Tool: add_two manifest_parser · 90%
info
Tool: api_status manifest_parser · 90%
info
Tool: send_message manifest_parser · 90%
info
Tool: advanced_tool manifest_parser · 90%
info
Tool: validated_tool manifest_parser · 90%
info
Tool: empty_result_tool manifest_parser · 90%
info
Tool: generate_poem manifest_parser · 90%
info
Tool: domain_info manifest_parser · 90%
info
Tool: long_running_task manifest_parser · 90%
info
Tool: query_db manifest_parser · 90%
info
Tool: register_user manifest_parser · 90%
info
Tool: link_account manifest_parser · 90%
info
Tool: which_arm manifest_parser · 90%
info
Tool: add_note manifest_parser · 90%
info
Tool: remove_note manifest_parser · 90%
info
Tool: remove_all manifest_parser · 90%
info
Tool: countdown manifest_parser · 90%
info
Tool: whoami manifest_parser · 90%
info
Tool: deploy manifest_parser · 90%
info
Tool: calc manifest_parser · 90%
info
Tool: refund_order manifest_parser · 90%
info
Tool: get_time manifest_parser · 90%
info
Tool: show_roots manifest_parser · 90%
info
Tool: greet_pydantic manifest_parser · 90%
info
Tool: greet_typeddict manifest_parser · 90%
info
Tool: greet_dataclass manifest_parser · 90%
info
Tool: greet_dict manifest_parser · 90%
info
Tool: long_operation manifest_parser · 90%
info
Tool: lookup manifest_parser · 90%
info
Tool: summarize manifest_parser · 90%
info
Tool: divide manifest_parser · 90%
info
Tool: restricted manifest_parser · 90%
info
Tool: edit_note manifest_parser · 90%
info
Tool: enable_search manifest_parser · 90%
info
Tool: meet manifest_parser · 90%
info
Tool: test_simple_text manifest_parser · 90%
info
Tool: test_image_content manifest_parser · 90%
info
Tool: test_audio_content manifest_parser · 90%
info
Tool: test_embedded_resource manifest_parser · 90%
info
Tool: test_multiple_content_types manifest_parser · 90%
info
Tool: test_tool_with_logging manifest_parser · 90%
info
Tool: test_tool_with_progress manifest_parser · 90%
info
Tool: test_sampling manifest_parser · 90%
info
Tool: test_elicitation manifest_parser · 90%
info
Tool: test_elicitation_sep1034_defaults manifest_parser · 90%
info
Tool: test_elicitation_sep1330_enums manifest_parser · 90%
info
Tool: test_error_handling manifest_parser · 90%
info
Tool: test_x_mcp_header manifest_parser · 90%
info
Tool: test_missing_capability manifest_parser · 90%
info
Tool: test_input_required_result_elicitation manifest_parser · 90%
info
Tool: test_input_required_result_sampling manifest_parser · 90%
info
Tool: test_input_required_result_list_roots manifest_parser · 90%
info
Tool: test_input_required_result_request_state manifest_parser · 90%
info
Tool: test_sampling_tool manifest_parser · 90%
info
Tool: test_input_required_result_multiple_inputs manifest_parser · 90%
info
Tool: test_input_required_result_multi_round manifest_parser · 90%
info
Tool: test_input_required_result_tampered_state manifest_parser · 90%
info
Tool: test_input_required_result_capabilities manifest_parser · 90%
info
Tool: json_schema_2020_12_tool manifest_parser · 90%
info
Tool: test_reconnection manifest_parser · 90%
info
Tool: test_trigger_tool_change manifest_parser · 90%
info
Tool: test_trigger_prompt_change manifest_parser · 90%
info
Tool: check_context manifest_parser · 90%
info
Tool: ask manifest_parser · 90%
info
Tool: count_roots manifest_parser · 90%
info
Tool: multi manifest_parser · 90%
info
Tool: needs_input manifest_parser · 90%
info
Tool: issue manifest_parser · 90%
info
Tool: park manifest_parser · 90%
info
Tool: fan_out manifest_parser · 90%
info
Tool: test_tool manifest_parser · 90%
info
Tool: test_tool_with_log manifest_parser · 90%
info
Tool: test_tool_with_log_dict manifest_parser · 90%
info
Tool: test_list_roots manifest_parser · 90%
info
Tool: show manifest_parser · 90%
info
Tool: sign_up manifest_parser · 90%
info
Tool: choose_seating manifest_parser · 90%
info
Tool: forecast manifest_parser · 90%
info
Tool: forecast_weekly manifest_parser · 90%
info
Tool: ask_model manifest_parser · 90%
info
Tool: old_log manifest_parser · 90%
info
Tool: report manifest_parser · 90%
info
Tool: chart manifest_parser · 90%
info
Tool: refund manifest_parser · 90%
info
Tool: sleep_tool manifest_parser · 90%
info
Tool: trigger manifest_parser · 90%
info
Tool: dummy_tool_func manifest_parser · 90%
info
Tool: basic_tool manifest_parser · 90%
info
Tool: check_lifespan manifest_parser · 90%
info
Tool: wizard manifest_parser · 90%
info
Tool: announce manifest_parser · 90%
info
Tool: count manifest_parser · 90%
info
Tool: burst manifest_parser · 90%
info
Tool: hold manifest_parser · 90%
info
Tool: interrupt manifest_parser · 90%
info
Tool: touch_tools manifest_parser · 90%
info
Tool: place manifest_parser · 90%
info
Tool: explode manifest_parser · 90%
info
Tool: flux manifest_parser · 90%
info
Tool: primes manifest_parser · 90%
info
Tool: mismatched manifest_parser · 90%
info
Tool: missing manifest_parser · 90%
info
Tool: read_files manifest_parser · 90%
info
Tool: doomed manifest_parser · 90%
info
Tool: grow manifest_parser · 90%
info
Tool: bad manifest_parser · 90%
info
Tool: narrate manifest_parser · 90%
info
Tool: crunch manifest_parser · 90%
info
Tool: mill manifest_parser · 90%
info
Tool: book_flight manifest_parser · 90%
info
Tool: show_config manifest_parser · 90%
info
Tool: chatter manifest_parser · 90%
info
Tool: buy manifest_parser · 90%
info
Tool: redeem manifest_parser · 90%
info
Tool: declared manifest_parser · 90%
info
Tool: request_api_key manifest_parser · 90%
info
Tool: oauth_flow manifest_parser · 90%
info
Tool: payment_flow manifest_parser · 90%
info
Tool: setup_credentials manifest_parser · 90%
info
Tool: check_url_response manifest_parser · 90%
info
Tool: ask_name manifest_parser · 90%
info
Tool: trigger_elicitation manifest_parser · 90%
info
Tool: test_decline manifest_parser · 90%
info
Tool: test_cancel manifest_parser · 90%
info
Tool: use_deprecated_elicit manifest_parser · 90%
info
Tool: direct_elicit_url manifest_parser · 90%
info
Tool: ask_user manifest_parser · 90%
info
Tool: optional_tool manifest_parser · 90%
info
Tool: invalid_optional_tool manifest_parser · 90%
info
Tool: defaults_tool manifest_parser · 90%
info
Tool: select_favorite_color manifest_parser · 90%
info
Tool: select_color_legacy manifest_parser · 90%
info
Tool: select_favorite_colors manifest_parser · 90%
info
Tool: pick manifest_parser · 90%
info
Tool: tool manifest_parser · 90%
info
Tool: _tool manifest_parser · 90%
info
Tool: star_repo manifest_parser · 90%
info
Tool: run manifest_parser · 90%
info
Tool: use_token manifest_parser · 90%
info
Tool: delete_folder manifest_parser · 90%
info
Tool: act manifest_parser · 90%
info
Tool: both manifest_parser · 90%
info
Tool: long_haul manifest_parser · 90%
info
Tool: plan_restock manifest_parser · 90%
info
Tool: chain manifest_parser · 90%
info
Tool: manual manifest_parser · 90%
info
Tool: listy manifest_parser · 90%
info
Tool: sneaky manifest_parser · 90%
info
Tool: capital manifest_parser · 90%
info
Tool: workspace manifest_parser · 90%
info
Tool: combo manifest_parser · 90%
info
Tool: plain manifest_parser · 90%
info
Tool: quote manifest_parser · 90%
info
Tool: tool_with_title manifest_parser · 90%
info
Tool: tool_with_annotations manifest_parser · 90%
info
Tool: tool_with_both manifest_parser · 90%
info
Tool: multi_auth manifest_parser · 90%
info
Tool: failing_tool manifest_parser · 90%
info
Tool: upload_file manifest_parser · 90%
info
Tool: analyze_text manifest_parser · 90%
info
Tool: tool1 manifest_parser · 90%
info
Tool: tool2 manifest_parser · 90%
info
Tool: tool3 manifest_parser · 90%
info
Tool: combined_tool manifest_parser · 90%
info
Tool: get_person manifest_parser · 90%
info
Tool: tree manifest_parser · 90%
info
Tool: outer manifest_parser · 90%
info
Tool: spend manifest_parser · 90%
info
Tool: parse manifest_parser · 90%
info
Tool: gated manifest_parser · 90%
info
Tool: summarise manifest_parser · 90%
info
Tool: refuse manifest_parser · 90%
info
Tool: inner manifest_parser · 90%
info
Tool: probe manifest_parser · 90%
info
Tool: touch manifest_parser · 90%
info
Tool: ping manifest_parser · 90%
info
Tool: hello_world manifest_parser · 90%
info
Tool: direct manifest_parser · 90%
info
Tool: unstructured manifest_parser · 90%
info
Tool: structured manifest_parser · 90%
info
Tool: tool_with_resource manifest_parser · 90%
info
Tool: needs_sampling manifest_parser · 90%
info
Tool: boom manifest_parser · 90%
info
Tool: delete_file manifest_parser · 90%
info
Tool: order_book manifest_parser · 90%
info
Tool: reserve_book manifest_parser · 90%
info
Tool: recommend_book manifest_parser · 90%
info
Tool: weather_report manifest_parser · 90%
info
Tool: get_forecast manifest_parser · 90%
info
Tool: get_station manifest_parser · 90%
info
Tool: get_temperatures manifest_parser · 90%
info
Tool: pay_deposit manifest_parser · 90%
info
Tool: confirm_deposit manifest_parser · 90%
info
Tool: enable_recommendations manifest_parser · 90%
info
Tool: search_books manifest_parser · 90%
info
Tool: describe_catalog manifest_parser · 90%
info
Tool: issue_card manifest_parser · 90%
info
Tool: client_features manifest_parser · 90%
info
Tool: list_notes manifest_parser · 90%
info
Tool: add_book manifest_parser · 90%
info
Tool: get_author manifest_parser · 90%
info
Tool: forecast_today manifest_parser · 90%
info
Tool: forecast_hourly manifest_parser · 90%
info
Tool: logo_from_bytes manifest_parser · 90%
info
Tool: logo manifest_parser · 90%
info
Tool: brand_guidelines manifest_parser · 90%
info
Tool: palette manifest_parser · 90%
info
Tool: chime manifest_parser · 90%
info
Tool: lookup_book manifest_parser · 90%
info
Tool: save_template manifest_parser · 90%
info
Tool: search manifest_parser · 90%
info
Tool: refresh_report manifest_parser · 90%
info
Tool: refresh_dashboard manifest_parser · 90%
info
Tool: import_catalog manifest_parser · 90%
info
Tool: import_feed manifest_parser · 90%
info
Tool: restock manifest_parser · 90%
info
Tool: reserve manifest_parser · 90%
info
Tool: count_books manifest_parser · 90%
info
Tool: database_status manifest_parser · 90%
info
Tool: blurb manifest_parser · 90%
info
Tool: catalog_folder manifest_parser · 90%
info
Tool: add_task manifest_parser · 90%
info
Tool: complete_task manifest_parser · 90%
info
Tool: enable_reports manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (16) manifest_parser · 80%
medium
Hardcoded OAuth client ID in modelcontextprotocol-python-sdk-4d6f87e/examples/snippets/clients/identity_assertion_client.py oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in modelcontextprotocol-python-sdk-4d6f87e/examples/snippets/servers/identity_assertion_server.py oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in modelcontextprotocol-python-sdk-4d6f87e/tests/interaction/auth/test_identity_assertion.py oauth_scope_analyzer · 80%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 4 components sbom_generator · 100%
critical
Database URL with Password found in modelcontextprotocol-python-sdk-4d6f87e/examples/mcpserver/memory.py secret_scanner · 85%
low
Tool 'echo_tool' has no annotations annotation_checker · 100%
low
Tool 'demo_tool' has no annotations annotation_checker · 100%
low
Tool 'multi_icon_tool' has no annotations annotation_checker · 100%
low
Tool 'text_me' has no annotations annotation_checker · 100%
low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'greet_user' has no annotations annotation_checker · 100%
low
Tool 'get_weather' has no annotations annotation_checker · 100%
low
Tool 'get_weather_summary' has no annotations annotation_checker · 100%
low
Tool 'get_weather_metrics' has no annotations annotation_checker · 100%
low
Tool 'get_weather_alerts' has no annotations annotation_checker · 100%
low
Tool 'get_temperature' has no annotations annotation_checker · 100%
low
Tool 'get_weather_stats' has no annotations annotation_checker · 100%
low
Tool 'sum' has no annotations annotation_checker · 100%
low
Tool 'take_screenshot' has no annotations annotation_checker · 100%
low
Tool 'remember' has no annotations annotation_checker · 100%
low
Tool 'read_profile' has no annotations annotation_checker · 100%
low
Tool 'hello_unicode' has no annotations annotation_checker · 100%
low
Tool 'list_emoji_categories' has no annotations annotation_checker · 100%
low
Tool 'multilingual_hello' has no annotations annotation_checker · 100%
low
Tool 'name_shrimp' has no annotations annotation_checker · 100%
low
Tool 'create_thumbnail' has no annotations annotation_checker · 100%
low
Tool 'book_table' has no annotations annotation_checker · 100%
low
Tool 'secure_payment' has no annotations annotation_checker · 100%
low
Tool 'connect_service' has no annotations annotation_checker · 100%
low
Tool 'get_location' has no annotations annotation_checker · 100%
low
Tool 'get_statistics' has no annotations annotation_checker · 100%
low
Tool 'get_user' has no annotations annotation_checker · 100%
low
Tool 'get_config' has no annotations annotation_checker · 100%
low
Tool 'list_cities' has no annotations annotation_checker · 100%
low
Tool 'add' has no annotations annotation_checker · 100%
low
Tool 'process_data' has no annotations annotation_checker · 100%
low
Tool 'hello' has no annotations annotation_checker · 100%
low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'add_two' has no annotations annotation_checker · 100%
low
Tool 'api_status' has no annotations annotation_checker · 100%
low
Tool 'send_message' has no annotations annotation_checker · 100%
low
Tool 'advanced_tool' has no annotations annotation_checker · 100%
low
Tool 'validated_tool' has no annotations annotation_checker · 100%
low
Tool 'empty_result_tool' has no annotations annotation_checker · 100%
low
Tool 'generate_poem' has no annotations annotation_checker · 100%
low
Tool 'domain_info' has no annotations annotation_checker · 100%
low
Tool 'long_running_task' has no annotations annotation_checker · 100%
low
Tool 'query_db' has no annotations annotation_checker · 100%
low
Tool 'register_user' has no annotations annotation_checker · 100%
low
Tool 'link_account' has no annotations annotation_checker · 100%
low
Tool 'which_arm' has no annotations annotation_checker · 100%
low
Tool 'add_note' has no annotations annotation_checker · 100%
low
Tool 'remove_note' has no annotations annotation_checker · 100%
low
Tool 'remove_all' has no annotations annotation_checker · 100%
low
Tool 'countdown' has no annotations annotation_checker · 100%
low
Tool 'whoami' has no annotations annotation_checker · 100%
low
Tool 'deploy' has no annotations annotation_checker · 100%
low
Tool 'calc' has no annotations annotation_checker · 100%
low
Tool 'refund_order' has no annotations annotation_checker · 100%
low
Tool 'get_time' has no annotations annotation_checker · 100%
low
Tool 'show_roots' has no annotations annotation_checker · 100%
low
Tool 'greet_pydantic' has no annotations annotation_checker · 100%
low
Tool 'greet_typeddict' has no annotations annotation_checker · 100%
low
Tool 'greet_dataclass' has no annotations annotation_checker · 100%
low
Tool 'greet_dict' has no annotations annotation_checker · 100%
low
Tool 'long_operation' has no annotations annotation_checker · 100%
low
Tool 'lookup' has no annotations annotation_checker · 100%
low
Tool 'summarize' has no annotations annotation_checker · 100%
low
Tool 'divide' has no annotations annotation_checker · 100%
low
Tool 'restricted' has no annotations annotation_checker · 100%
low
Tool 'edit_note' has no annotations annotation_checker · 100%
low
Tool 'enable_search' has no annotations annotation_checker · 100%
low
Tool 'meet' has no annotations annotation_checker · 100%
low
Tool 'test_simple_text' has no annotations annotation_checker · 100%
low
Tool 'test_image_content' has no annotations annotation_checker · 100%
low
Tool 'test_audio_content' has no annotations annotation_checker · 100%
low
Tool 'test_embedded_resource' has no annotations annotation_checker · 100%
low
Tool 'test_multiple_content_types' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_logging' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_progress' has no annotations annotation_checker · 100%
low
Tool 'test_sampling' has no annotations annotation_checker · 100%
low
Tool 'test_elicitation' has no annotations annotation_checker · 100%
low
Tool 'test_elicitation_sep1034_defaults' has no annotations annotation_checker · 100%
low
Tool 'test_elicitation_sep1330_enums' has no annotations annotation_checker · 100%
low
Tool 'test_error_handling' has no annotations annotation_checker · 100%
low
Tool 'test_x_mcp_header' has no annotations annotation_checker · 100%
low
Tool 'test_missing_capability' has no annotations annotation_checker · 100%
low
Tool 'test_input_required_result_elicitation' has no annotations annotation_checker · 100%
low
Tool 'test_input_required_result_sampling' has no annotations annotation_checker · 100%
low
Tool 'test_tool' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_log' has no annotations annotation_checker · 100%
low
Tool 'test_input_required_result_list_roots' has no annotations annotation_checker · 100%
low
Tool 'test_input_required_result_request_state' has no annotations annotation_checker · 100%
low
Tool 'test_input_required_result_multiple_inputs' has no annotations annotation_checker · 100%
low
Tool 'test_input_required_result_multi_round' has no annotations annotation_checker · 100%
low
Tool 'test_input_required_result_tampered_state' has no annotations annotation_checker · 100%
low
Tool 'test_input_required_result_capabilities' has no annotations annotation_checker · 100%
low
Tool 'json_schema_2020_12_tool' has no annotations annotation_checker · 100%
low
Tool 'test_reconnection' has no annotations annotation_checker · 100%
low
Tool 'test_trigger_tool_change' has no annotations annotation_checker · 100%
low
Tool 'test_trigger_prompt_change' has no annotations annotation_checker · 100%
low
Tool 'check_context' has no annotations annotation_checker · 100%
low
Tool 'ask' has no annotations annotation_checker · 100%
low
Tool 'count_roots' has no annotations annotation_checker · 100%
low
Tool 'multi' has no annotations annotation_checker · 100%
low
Tool 'needs_input' has no annotations annotation_checker · 100%
low
Tool 'issue' has no annotations annotation_checker · 100%
low
Tool 'park' has no annotations annotation_checker · 100%
low
Tool 'fan_out' has no annotations annotation_checker · 100%
low
Tool 'test_sampling_tool' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_log_dict' has no annotations annotation_checker · 100%
low
Tool 'test_list_roots' has no annotations annotation_checker · 100%
low
Tool 'show' has no annotations annotation_checker · 100%
low
Tool 'sign_up' has no annotations annotation_checker · 100%
low
Tool 'choose_seating' has no annotations annotation_checker · 100%
low
Tool 'forecast' has no annotations annotation_checker · 100%
low
Tool 'forecast_weekly' has no annotations annotation_checker · 100%
low
Tool 'ask_model' has no annotations annotation_checker · 100%
low
Tool 'old_log' has no annotations annotation_checker · 100%
low
Tool 'report' has no annotations annotation_checker · 100%
low
Tool 'chart' has no annotations annotation_checker · 100%
low
Tool 'refund' has no annotations annotation_checker · 100%
low
Tool 'sleep_tool' has no annotations annotation_checker · 100%
low
Tool 'trigger' has no annotations annotation_checker · 100%
low
Tool 'dummy_tool_func' has no annotations annotation_checker · 100%
low
Tool 'basic_tool' has no annotations annotation_checker · 100%
low
Tool 'check_lifespan' has no annotations annotation_checker · 100%
low
Tool 'wizard' has no annotations annotation_checker · 100%
low
Tool 'announce' has no annotations annotation_checker · 100%
low
Tool 'count' has no annotations annotation_checker · 100%
low
Tool 'burst' has no annotations annotation_checker · 100%
low
Tool 'hold' has no annotations annotation_checker · 100%
low
Tool 'interrupt' has no annotations annotation_checker · 100%
low
Tool 'touch_tools' has no annotations annotation_checker · 100%
low
Tool 'place' has no annotations annotation_checker · 100%
low
Tool 'explode' has no annotations annotation_checker · 100%
low
Tool 'flux' has no annotations annotation_checker · 100%
low
Tool 'primes' has no annotations annotation_checker · 100%
low
Tool 'mismatched' has no annotations annotation_checker · 100%
low
Tool 'missing' has no annotations annotation_checker · 100%
low
Tool 'read_files' has no annotations annotation_checker · 100%
low
Tool 'doomed' has no annotations annotation_checker · 100%
low
Tool 'grow' has no annotations annotation_checker · 100%
low
Tool 'bad' has no annotations annotation_checker · 100%
low
Tool 'narrate' has no annotations annotation_checker · 100%
low
Tool 'crunch' has no annotations annotation_checker · 100%
low
Tool 'mill' has no annotations annotation_checker · 100%
low
Tool 'book_flight' has no annotations annotation_checker · 100%
low
Tool 'show_config' has no annotations annotation_checker · 100%
low
Tool 'chatter' has no annotations annotation_checker · 100%
low
Tool 'buy' has no annotations annotation_checker · 100%
low
Tool 'redeem' has no annotations annotation_checker · 100%
low
Tool 'declared' has no annotations annotation_checker · 100%
low
Tool 'request_api_key' has no annotations annotation_checker · 100%
low
Tool 'oauth_flow' has no annotations annotation_checker · 100%
low
Tool 'payment_flow' has no annotations annotation_checker · 100%
low
Tool 'setup_credentials' has no annotations annotation_checker · 100%
low
Tool 'check_url_response' has no annotations annotation_checker · 100%
low
Tool 'ask_name' has no annotations annotation_checker · 100%
low
Tool 'trigger_elicitation' has no annotations annotation_checker · 100%
low
Tool 'test_decline' has no annotations annotation_checker · 100%
low
Tool 'test_cancel' has no annotations annotation_checker · 100%
low
Tool 'use_deprecated_elicit' has no annotations annotation_checker · 100%
low
Tool 'direct_elicit_url' has no annotations annotation_checker · 100%
low
Tool 'ask_user' has no annotations annotation_checker · 100%
low
Tool 'optional_tool' has no annotations annotation_checker · 100%
low
Tool 'invalid_optional_tool' has no annotations annotation_checker · 100%
low
Tool 'defaults_tool' has no annotations annotation_checker · 100%
low
Tool 'select_favorite_color' has no annotations annotation_checker · 100%
low
Tool 'select_color_legacy' has no annotations annotation_checker · 100%
low
Tool 'select_favorite_colors' has no annotations annotation_checker · 100%
low
Tool 'pick' has no annotations annotation_checker · 100%
low
Tool 'tool' has no annotations annotation_checker · 100%
low
Tool '_tool' has no annotations annotation_checker · 100%
low
Tool 'star_repo' has no annotations annotation_checker · 100%
low
Tool 'run' has no annotations annotation_checker · 100%
low
Tool 'use_token' has no annotations annotation_checker · 100%
low
Tool 'delete_folder' has no annotations annotation_checker · 100%
low
Tool 'act' has no annotations annotation_checker · 100%
low
Tool 'both' has no annotations annotation_checker · 100%
low
Tool 'long_haul' has no annotations annotation_checker · 100%
low
Tool 'plan_restock' has no annotations annotation_checker · 100%
low
Tool 'chain' has no annotations annotation_checker · 100%
low
Tool 'manual' has no annotations annotation_checker · 100%
low
Tool 'listy' has no annotations annotation_checker · 100%
low
Tool 'sneaky' has no annotations annotation_checker · 100%
low
Tool 'capital' has no annotations annotation_checker · 100%
low
Tool 'workspace' has no annotations annotation_checker · 100%
low
Tool 'combo' has no annotations annotation_checker · 100%
low
Tool 'plain' has no annotations annotation_checker · 100%
low
Tool 'quote' has no annotations annotation_checker · 100%
low
Tool 'tool_with_title' has no annotations annotation_checker · 100%
low
Tool 'tool_with_annotations' has no annotations annotation_checker · 100%
low
Tool 'tool_with_both' has no annotations annotation_checker · 100%
low
Tool 'multi_auth' has no annotations annotation_checker · 100%
low
Tool 'failing_tool' has no annotations annotation_checker · 100%
low
Tool 'upload_file' has no annotations annotation_checker · 100%
low
Tool 'analyze_text' has no annotations annotation_checker · 100%
low
Tool 'tool1' has no annotations annotation_checker · 100%
low
Tool 'tool2' has no annotations annotation_checker · 100%
low
Tool 'tool3' has no annotations annotation_checker · 100%
low
Tool 'combined_tool' has no annotations annotation_checker · 100%
low
Tool 'get_person' has no annotations annotation_checker · 100%
low
Tool 'tree' has no annotations annotation_checker · 100%
low
Tool 'outer' has no annotations annotation_checker · 100%
low
Tool 'spend' has no annotations annotation_checker · 100%
low
Tool 'parse' has no annotations annotation_checker · 100%
low
Tool 'gated' has no annotations annotation_checker · 100%
low
Tool 'summarise' has no annotations annotation_checker · 100%
low
Tool 'confirm_deposit' has no annotations annotation_checker · 100%
low
Tool 'refuse' has no annotations annotation_checker · 100%
low
Tool 'inner' has no annotations annotation_checker · 100%
low
Tool 'probe' has no annotations annotation_checker · 100%
low
Tool 'touch' has no annotations annotation_checker · 100%
low
Tool 'ping' has no annotations annotation_checker · 100%
low
Tool 'hello_world' has no annotations annotation_checker · 100%
low
Tool 'direct' has no annotations annotation_checker · 100%
low
Tool 'unstructured' has no annotations annotation_checker · 100%
low
Tool 'structured' has no annotations annotation_checker · 100%
low
Tool 'tool_with_resource' has no annotations annotation_checker · 100%
low
Tool 'needs_sampling' has no annotations annotation_checker · 100%
low
Tool 'boom' has no annotations annotation_checker · 100%
low
Tool 'delete_file' has no annotations annotation_checker · 100%
low
Tool 'order_book' has no annotations annotation_checker · 100%
low
Tool 'reserve_book' has no annotations annotation_checker · 100%
low
Tool 'recommend_book' has no annotations annotation_checker · 100%
low
Tool 'weather_report' has no annotations annotation_checker · 100%
low
Tool 'get_forecast' has no annotations annotation_checker · 100%
low
Tool 'get_station' has no annotations annotation_checker · 100%
low
Tool 'get_temperatures' has no annotations annotation_checker · 100%
low
Tool 'pay_deposit' has no annotations annotation_checker · 100%
low
Tool 'enable_recommendations' has no annotations annotation_checker · 100%
low
Tool 'search_books' has no annotations annotation_checker · 100%
low
Tool 'describe_catalog' has no annotations annotation_checker · 100%
low
Tool 'issue_card' has no annotations annotation_checker · 100%
low
Tool 'client_features' has no annotations annotation_checker · 100%
low
Tool 'list_notes' has no annotations annotation_checker · 100%
low
Tool 'add_book' has no annotations annotation_checker · 100%
low
Tool 'get_author' has no annotations annotation_checker · 100%
low
Tool 'forecast_today' has no annotations annotation_checker · 100%
low
Tool 'forecast_hourly' has no annotations annotation_checker · 100%
low
Tool 'logo_from_bytes' has no annotations annotation_checker · 100%
low
Tool 'logo' has no annotations annotation_checker · 100%
low
Tool 'brand_guidelines' has no annotations annotation_checker · 100%
low
Tool 'palette' has no annotations annotation_checker · 100%
low
Tool 'chime' has no annotations annotation_checker · 100%
low
Tool 'lookup_book' has no annotations annotation_checker · 100%
low
Tool 'save_template' has no annotations annotation_checker · 100%
low
Tool 'search' has no annotations annotation_checker · 100%
low
Tool 'refresh_report' has no annotations annotation_checker · 100%
low
Tool 'refresh_dashboard' has no annotations annotation_checker · 100%
low
Tool 'import_catalog' has no annotations annotation_checker · 100%
low
Tool 'import_feed' has no annotations annotation_checker · 100%
low
Tool 'restock' has no annotations annotation_checker · 100%
low
Tool 'reserve' has no annotations annotation_checker · 100%
low
Tool 'count_books' has no annotations annotation_checker · 100%
low
Tool 'database_status' has no annotations annotation_checker · 100%
low
Tool 'blurb' has no annotations annotation_checker · 100%
low
Tool 'catalog_folder' has no annotations annotation_checker · 100%
low
Tool 'add_task' has no annotations annotation_checker · 100%
low
Tool 'complete_task' has no annotations annotation_checker · 100%
low
Tool 'enable_reports' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client ID in modelcontextprotocol-python-sdk-4d6f87e/examples/snippets/clients/identity_assertion_client.py auth_checker · 85%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/examples/snippets/clients/identity_assertion_client.py auth_checker · 95%
high
Hardcoded OAuth client ID in modelcontextprotocol-python-sdk-4d6f87e/examples/snippets/servers/identity_assertion_server.py auth_checker · 85%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/examples/snippets/servers/identity_assertion_server.py auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/examples/stories/oauth_client_credentials/server.py auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/examples/stories/identity_assertion/server.py auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/tests/client/test_auth.py auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/tests/docs_src/test_identity_assertion.py auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/tests/client/auth/extensions/test_identity_assertion.py auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/tests/client/auth/extensions/test_client_credentials.py auth_checker · 95%
high
Hardcoded OAuth client ID in modelcontextprotocol-python-sdk-4d6f87e/tests/interaction/auth/test_identity_assertion.py auth_checker · 85%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/tests/interaction/auth/test_identity_assertion.py auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/tests/interaction/auth/test_lifecycle.py auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/tests/server/auth/test_identity_assertion.py auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/docs_src/identity_assertion/tutorial001.py auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/docs_src/identity_assertion/tutorial002.py auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/src/mcp/client/auth/extensions/identity_assertion.py auth_checker · 95%
medium
Vulnerable dependency: click@8.2.0 (PYSEC-2026-2132) dependency_analyzer · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-python-sdk-4d6f87e/src/mcp/client/auth/extensions/client_credentials.py auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 65 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-1872) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-1873) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-2275) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-33c7-2mpw-hg34) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-f97h-2pfx-f59f) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-150) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-151) dependency_analyzer · 95%
medium
High-entropy string (5.96 bits/char) in modelcontextprotocol-python-sdk-4d6f87e/tests/docs/test_translations.py:64 entropy_analyzer · 54%
medium
High-entropy string (5.72 bits/char) in modelcontextprotocol-python-sdk-4d6f87e/tests/docs/test_translations.py:580 entropy_analyzer · 50%
medium
High-entropy string (5.99 bits/char) in modelcontextprotocol-python-sdk-4d6f87e/tests/docs/test_translations.py:1149 entropy_analyzer · 54%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: echo_tool manifest_parser · 90%
info
Tool: demo_tool manifest_parser · 90%
info
Tool: multi_icon_tool manifest_parser · 90%
info
Tool: text_me manifest_parser · 90%
info
Tool: echo manifest_parser · 90%
info
Tool: greet_user manifest_parser · 90%
info
Tool: check_lifespan manifest_parser · 90%
info
Tool: connect_service manifest_parser · 90%
info
Tool: multi_auth manifest_parser · 90%
info
Tool: failing_tool manifest_parser · 90%
info
Tool: tool_with_title manifest_parser · 90%
info
Tool: tool_with_annotations manifest_parser · 90%
info
Tool: tool_with_both manifest_parser · 90%
info
Tool: hello_world manifest_parser · 90%
info
Tool: sum manifest_parser · 90%
info
Tool: tool_with_resource manifest_parser · 90%
info
Tool: upload_file manifest_parser · 90%
info
Tool: analyze_text manifest_parser · 90%
info
Tool: tool1 manifest_parser · 90%
info
Tool: tool2 manifest_parser · 90%
info
Tool: tool3 manifest_parser · 90%
info
Tool: combined_tool manifest_parser · 90%
info
Tool: ask_user manifest_parser · 90%
info
Tool: optional_tool manifest_parser · 90%
info
Tool: invalid_optional_tool manifest_parser · 90%
info
Tool: valid_multiselect_tool manifest_parser · 90%
info
Tool: optional_multiselect_tool manifest_parser · 90%
info
Tool: defaults_tool manifest_parser · 90%
info
Tool: select_favorite_color manifest_parser · 90%
info
Tool: select_favorite_colors manifest_parser · 90%
info
Tool: select_color_legacy manifest_parser · 90%
info
Tool: tool manifest_parser · 90%
info
Tool: request_api_key manifest_parser · 90%
info
Tool: oauth_flow manifest_parser · 90%
info
Tool: payment_flow manifest_parser · 90%
info
Tool: setup_credentials manifest_parser · 90%
info
Tool: check_url_response manifest_parser · 90%
info
Tool: ask_name manifest_parser · 90%
info
Tool: trigger_elicitation manifest_parser · 90%
info
Tool: test_decline manifest_parser · 90%
info
Tool: test_cancel manifest_parser · 90%
info
Tool: use_deprecated_elicit manifest_parser · 90%
info
Tool: direct_elicit_url manifest_parser · 90%
info
Tool: delete_file manifest_parser · 90%
info
Tool: query_db manifest_parser · 90%
info
Tool: dummy_tool_func manifest_parser · 90%
info
Tool: trigger manifest_parser · 90%
info
Tool: sleep_tool manifest_parser · 90%
info
Tool: multi_icon_tool manifest_parser · 90%
info
Tool: basic_tool manifest_parser · 90%
info
Tool: test_sampling_tool manifest_parser · 90%
info
Tool: test_list_roots manifest_parser · 90%
info
Tool: test_tool manifest_parser · 90%
info
Tool: test_tool_with_log manifest_parser · 90%
info
Tool: test_tool_with_log_dict manifest_parser · 90%
info
Tool: greet manifest_parser · 90%
info
Tool: check_context manifest_parser · 90%
info
Tool: get_weather manifest_parser · 90%
info
Tool: get_location manifest_parser · 90%
info
Tool: get_statistics manifest_parser · 90%
info
Tool: get_user manifest_parser · 90%
info
Tool: get_config manifest_parser · 90%
info
Tool: list_cities manifest_parser · 90%
info
Tool: api_status manifest_parser · 90%
info
Tool: send_message manifest_parser · 90%
info
Tool: hello manifest_parser · 90%
info
Tool: domain_info manifest_parser · 90%
info
Tool: add_two manifest_parser · 90%
info
Tool: add manifest_parser · 90%
info
Tool: generate_poem manifest_parser · 90%
info
Tool: create_thumbnail manifest_parser · 90%
info
Tool: book_table manifest_parser · 90%
info
Tool: secure_payment manifest_parser · 90%
info
Tool: long_running_task manifest_parser · 90%
info
Tool: advanced_tool manifest_parser · 90%
info
Tool: validated_tool manifest_parser · 90%
info
Tool: empty_result_tool manifest_parser · 90%
info
Tool: process_data manifest_parser · 90%
info
Tool: test_simple_text manifest_parser · 90%
info
Tool: test_image_content manifest_parser · 90%
info
Tool: test_audio_content manifest_parser · 90%
info
Tool: test_embedded_resource manifest_parser · 90%
info
Tool: test_multiple_content_types manifest_parser · 90%
info
Tool: test_tool_with_logging manifest_parser · 90%
info
Tool: test_tool_with_progress manifest_parser · 90%
info
Tool: test_sampling manifest_parser · 90%
info
Tool: test_elicitation manifest_parser · 90%
info
Tool: test_elicitation_sep1034_defaults manifest_parser · 90%
info
Tool: test_elicitation_sep1330_enums manifest_parser · 90%
info
Tool: test_error_handling manifest_parser · 90%
info
Tool: test_reconnection manifest_parser · 90%
info
Tool: get_time manifest_parser · 90%
info
Tool: get_weather_summary manifest_parser · 90%
info
Tool: get_weather_metrics manifest_parser · 90%
info
Tool: get_weather_alerts manifest_parser · 90%
info
Tool: get_temperature manifest_parser · 90%
info
Tool: get_weather_stats manifest_parser · 90%
info
Tool: hello_unicode manifest_parser · 90%
info
Tool: list_emoji_categories manifest_parser · 90%
info
Tool: multilingual_hello manifest_parser · 90%
info
Tool: remember manifest_parser · 90%
info
Tool: read_profile manifest_parser · 90%
info
Tool: echo manifest_parser · 90%
info
Tool: text_me manifest_parser · 90%
info
Tool: take_screenshot manifest_parser · 90%
info
Tool: greet_user manifest_parser · 90%
info
Tool: echo_tool manifest_parser · 90%
info
Tool: demo_tool manifest_parser · 90%
info
Tool: name_shrimp manifest_parser · 90%
info
Tool: my_tool manifest_parser · 60%
info
Tool: tool_with_context manifest_parser · 60%
info
Tool: async_tool manifest_parser · 60%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (8) manifest_parser · 80%
low
Tool 'check_lifespan' has no annotations annotation_checker · 100%
low
Tool 'multi_auth' has no annotations annotation_checker · 100%
low
Tool 'failing_tool' has no annotations annotation_checker · 100%
low
Tool 'tool_with_title' has no annotations annotation_checker · 100%
low
Tool 'tool_with_annotations' has no annotations annotation_checker · 100%
low
Tool 'tool_with_both' has no annotations annotation_checker · 100%
low
Tool 'hello_world' has no annotations annotation_checker · 100%
low
Tool 'tool_with_resource' has no annotations annotation_checker · 100%
low
Tool 'upload_file' has no annotations annotation_checker · 100%
low
Tool 'analyze_text' has no annotations annotation_checker · 100%
low
Tool 'tool1' has no annotations annotation_checker · 100%
low
Tool 'tool2' has no annotations annotation_checker · 100%
low
Tool 'tool3' has no annotations annotation_checker · 100%
low
Tool 'combined_tool' has no annotations annotation_checker · 100%
low
Tool 'ask_user' has no annotations annotation_checker · 100%
low
Tool 'optional_tool' has no annotations annotation_checker · 100%
low
Tool 'invalid_optional_tool' has no annotations annotation_checker · 100%
low
Tool 'valid_multiselect_tool' has no annotations annotation_checker · 100%
low
Tool 'optional_multiselect_tool' has no annotations annotation_checker · 100%
low
Tool 'defaults_tool' has no annotations annotation_checker · 100%
low
Tool 'select_favorite_color' has no annotations annotation_checker · 100%
low
Tool 'select_favorite_colors' has no annotations annotation_checker · 100%
low
Tool 'select_color_legacy' has no annotations annotation_checker · 100%
low
Tool 'tool' has no annotations annotation_checker · 100%
low
Tool 'request_api_key' has no annotations annotation_checker · 100%
low
Tool 'oauth_flow' has no annotations annotation_checker · 100%
low
Tool 'payment_flow' has no annotations annotation_checker · 100%
low
Tool 'setup_credentials' has no annotations annotation_checker · 100%
low
Tool 'check_url_response' has no annotations annotation_checker · 100%
low
Tool 'ask_name' has no annotations annotation_checker · 100%
low
Tool 'trigger_elicitation' has no annotations annotation_checker · 100%
low
Tool 'test_decline' has no annotations annotation_checker · 100%
low
Tool 'test_cancel' has no annotations annotation_checker · 100%
low
Tool 'use_deprecated_elicit' has no annotations annotation_checker · 100%
low
Tool 'direct_elicit_url' has no annotations annotation_checker · 100%
low
Tool 'delete_file' has no annotations annotation_checker · 100%
low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'query_db' has no annotations annotation_checker · 100%
low
Tool 'dummy_tool_func' has no annotations annotation_checker · 100%
low
Tool 'trigger' has no annotations annotation_checker · 100%
low
Tool 'sleep_tool' has no annotations annotation_checker · 100%
low
Tool 'basic_tool' has no annotations annotation_checker · 100%
low
Tool 'test_sampling_tool' has no annotations annotation_checker · 100%
low
Tool 'test_list_roots' has no annotations annotation_checker · 100%
low
Tool 'test_tool' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_log' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_log_dict' has no annotations annotation_checker · 100%
low
Tool 'check_context' has no annotations annotation_checker · 100%
low
Tool 'get_location' has no annotations annotation_checker · 100%
low
Tool 'get_statistics' has no annotations annotation_checker · 100%
low
Tool 'get_user' has no annotations annotation_checker · 100%
low
Tool 'get_config' has no annotations annotation_checker · 100%
low
Tool 'list_cities' has no annotations annotation_checker · 100%
low
Tool 'api_status' has no annotations annotation_checker · 100%
low
Tool 'send_message' has no annotations annotation_checker · 100%
low
Tool 'get_weather' has no annotations annotation_checker · 100%
low
Tool 'hello' has no annotations annotation_checker · 100%
low
Tool 'domain_info' has no annotations annotation_checker · 100%
low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'add_two' has no annotations annotation_checker · 100%
low
Tool 'add' has no annotations annotation_checker · 100%
low
Tool 'generate_poem' has no annotations annotation_checker · 100%
low
Tool 'create_thumbnail' has no annotations annotation_checker · 100%
low
Tool 'book_table' has no annotations annotation_checker · 100%
low
Tool 'secure_payment' has no annotations annotation_checker · 100%
low
Tool 'connect_service' has no annotations annotation_checker · 100%
low
Tool 'long_running_task' has no annotations annotation_checker · 100%
low
Tool 'advanced_tool' has no annotations annotation_checker · 100%
low
Tool 'validated_tool' has no annotations annotation_checker · 100%
low
Tool 'empty_result_tool' has no annotations annotation_checker · 100%
low
Tool 'process_data' has no annotations annotation_checker · 100%
low
Tool 'test_simple_text' has no annotations annotation_checker · 100%
low
Tool 'test_image_content' has no annotations annotation_checker · 100%
low
Tool 'test_audio_content' has no annotations annotation_checker · 100%
low
Tool 'test_embedded_resource' has no annotations annotation_checker · 100%
low
Tool 'test_multiple_content_types' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_logging' has no annotations annotation_checker · 100%
low
Tool 'test_tool_with_progress' has no annotations annotation_checker · 100%
low
Tool 'test_sampling' has no annotations annotation_checker · 100%
low
Tool 'test_elicitation' has no annotations annotation_checker · 100%
low
Tool 'test_elicitation_sep1034_defaults' has no annotations annotation_checker · 100%
low
Tool 'test_elicitation_sep1330_enums' has no annotations annotation_checker · 100%
low
Tool 'test_error_handling' has no annotations annotation_checker · 100%
low
Tool 'test_reconnection' has no annotations annotation_checker · 100%
low
Tool 'get_time' has no annotations annotation_checker · 100%
low
Tool 'get_weather_summary' has no annotations annotation_checker · 100%
low
Tool 'get_weather_metrics' has no annotations annotation_checker · 100%
low
Tool 'get_weather_alerts' has no annotations annotation_checker · 100%
low
Tool 'get_temperature' has no annotations annotation_checker · 100%
low
Tool 'get_weather_stats' has no annotations annotation_checker · 100%
low
Tool 'hello_unicode' has no annotations annotation_checker · 100%
low
Tool 'list_emoji_categories' has no annotations annotation_checker · 100%
low
Tool 'multilingual_hello' has no annotations annotation_checker · 100%
low
Tool 'remember' has no annotations annotation_checker · 100%
low
Tool 'read_profile' has no annotations annotation_checker · 100%
low
Tool 'text_me' has no annotations annotation_checker · 100%
low
Tool 'take_screenshot' has no annotations annotation_checker · 100%
low
Tool 'greet_user' has no annotations annotation_checker · 100%
low
Tool 'echo_tool' has no annotations annotation_checker · 100%
low
Tool 'demo_tool' has no annotations annotation_checker · 100%
low
Tool 'multi_icon_tool' has no annotations annotation_checker · 100%
low
Tool 'sum' has no annotations annotation_checker · 100%
low
Tool 'name_shrimp' has no annotations annotation_checker · 100%
low
Tool 'my_tool' has no annotations annotation_checker · 100%
low
Tool 'tool_with_context' has no annotations annotation_checker · 100%
low
Tool 'async_tool' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in tests/client/test_auth.py auth_checker · 95%
high
Hardcoded OAuth client secret in tests/client/auth/extensions/test_client_credentials.py auth_checker · 95%
high
Hardcoded OAuth client secret in src/mcp/client/auth/extensions/client_credentials.py auth_checker · 95%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Excessive dependency count: 90 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27.1,<1.0.0 (GHSA-h8pj-cxx2-jfg2) dependency_analyzer · 95%
medium
Vulnerable dependency: httpx@0.27.1,<1.0.0 (PYSEC-2022-183) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-2c2j-9gv5-cj73) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-74m5-2c7w-9w3x) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-f96h-pmfr-66vw) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (PYSEC-2023-48) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-2c2j-9gv5-cj73) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-74m5-2c7w-9w3x) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-f96h-pmfr-66vw) dependency_analyzer · 95%
medium
Vulnerable dependency: starlette@0.27; python_version < '3.14' (PYSEC-2023-48) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-59g5-xgcq-4qw3) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-mj87-hwqh-73pj) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-pp6c-gr5w-3c5g) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-wp53-j4wj-2cfg) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (GHSA-33c7-2mpw-hg34) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (GHSA-f97h-2pfx-f59f) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (PYSEC-2020-150) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (PYSEC-2020-151) dependency_analyzer · 95%
medium
Vulnerable dependency: pywin32@311; sys_platform == 'win32' (GHSA-hwfp-hg2m-9vr2) dependency_analyzer · 95%
medium
Vulnerable dependency: pywin32@311; sys_platform == 'win32' (PYSEC-2021-112) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-33c7-2mpw-hg34) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-f97h-2pfx-f59f) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-150) dependency_analyzer · 95%
medium
Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-151) dependency_analyzer · 95%
critical
Database URL with Password found in examples/mcpserver/memory.py secret_scanner · 85%
info
SLSA Build Level 2 detected slsa_assessor · 85%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 4 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%
info
pyproject.toml metadata manifest_parser · 100%