info pyproject.toml metadata manifest_parser · 100%
info Tool: check_lifespan manifest_parser · 90%
info Tool: connect_service manifest_parser · 90%
info Tool: multi_auth manifest_parser · 90%
info Tool: failing_tool manifest_parser · 90%
info Tool: tool_with_title manifest_parser · 90%
info Tool: tool_with_annotations manifest_parser · 90%
info Tool: tool_with_both manifest_parser · 90%
info Tool: hello_world manifest_parser · 90%
info Tool: sum manifest_parser · 90%
info Tool: tool_with_resource manifest_parser · 90%
info Tool: upload_file manifest_parser · 90%
info Tool: analyze_text manifest_parser · 90%
info Tool: tool1 manifest_parser · 90%
info Tool: tool2 manifest_parser · 90%
info Tool: tool3 manifest_parser · 90%
info Tool: combined_tool manifest_parser · 90%
info Tool: ask_user manifest_parser · 90%
info Tool: optional_tool manifest_parser · 90%
info Tool: invalid_optional_tool manifest_parser · 90%
info Tool: valid_multiselect_tool manifest_parser · 90%
info Tool: optional_multiselect_tool manifest_parser · 90%
info Tool: defaults_tool manifest_parser · 90%
info Tool: select_favorite_color manifest_parser · 90%
info Tool: select_favorite_colors manifest_parser · 90%
info Tool: select_color_legacy manifest_parser · 90%
info Tool: tool manifest_parser · 90%
info Tool: request_api_key manifest_parser · 90%
info Tool: oauth_flow manifest_parser · 90%
info Tool: payment_flow manifest_parser · 90%
info Tool: setup_credentials manifest_parser · 90%
info Tool: check_url_response manifest_parser · 90%
info Tool: ask_name manifest_parser · 90%
info Tool: trigger_elicitation manifest_parser · 90%
info Tool: test_decline manifest_parser · 90%
info Tool: test_cancel manifest_parser · 90%
info Tool: use_deprecated_elicit manifest_parser · 90%
info Tool: direct_elicit_url manifest_parser · 90%
info Tool: delete_file manifest_parser · 90%
info Tool: query_db manifest_parser · 90%
info Tool: dummy_tool_func manifest_parser · 90%
info Tool: trigger manifest_parser · 90%
info Tool: sleep_tool manifest_parser · 90%
info Tool: multi_icon_tool manifest_parser · 90%
info Tool: basic_tool manifest_parser · 90%
info Tool: test_sampling_tool manifest_parser · 90%
info Tool: test_list_roots manifest_parser · 90%
info Tool: test_tool manifest_parser · 90%
info Tool: test_tool_with_log manifest_parser · 90%
info Tool: test_tool_with_log_dict manifest_parser · 90%
info Tool: greet manifest_parser · 90%
info Tool: check_context manifest_parser · 90%
info Tool: get_weather manifest_parser · 90%
info Tool: get_location manifest_parser · 90%
info Tool: get_statistics manifest_parser · 90%
info Tool: get_user manifest_parser · 90%
info Tool: get_config manifest_parser · 90%
info Tool: list_cities manifest_parser · 90%
info Tool: api_status manifest_parser · 90%
info Tool: send_message manifest_parser · 90%
info Tool: hello manifest_parser · 90%
info Tool: domain_info manifest_parser · 90%
info Tool: add_two manifest_parser · 90%
info Tool: add manifest_parser · 90%
info Tool: generate_poem manifest_parser · 90%
info Tool: create_thumbnail manifest_parser · 90%
info Tool: book_table manifest_parser · 90%
info Tool: secure_payment manifest_parser · 90%
info Tool: long_running_task manifest_parser · 90%
info Tool: advanced_tool manifest_parser · 90%
info Tool: validated_tool manifest_parser · 90%
info Tool: empty_result_tool manifest_parser · 90%
info Tool: process_data manifest_parser · 90%
info Tool: test_simple_text manifest_parser · 90%
info Tool: test_image_content manifest_parser · 90%
info Tool: test_audio_content manifest_parser · 90%
info Tool: test_embedded_resource manifest_parser · 90%
info Tool: test_multiple_content_types manifest_parser · 90%
info Tool: test_tool_with_logging manifest_parser · 90%
info Tool: test_tool_with_progress manifest_parser · 90%
info Tool: test_sampling manifest_parser · 90%
info Tool: test_elicitation manifest_parser · 90%
info Tool: test_elicitation_sep1034_defaults manifest_parser · 90%
info Tool: test_elicitation_sep1330_enums manifest_parser · 90%
info Tool: test_error_handling manifest_parser · 90%
info Tool: test_reconnection manifest_parser · 90%
info Tool: get_time manifest_parser · 90%
info Tool: get_weather_summary manifest_parser · 90%
info Tool: get_weather_metrics manifest_parser · 90%
info Tool: get_weather_alerts manifest_parser · 90%
info Tool: get_temperature manifest_parser · 90%
info Tool: get_weather_stats manifest_parser · 90%
info Tool: hello_unicode manifest_parser · 90%
info Tool: list_emoji_categories manifest_parser · 90%
info Tool: multilingual_hello manifest_parser · 90%
info Tool: remember manifest_parser · 90%
info Tool: read_profile manifest_parser · 90%
info Tool: echo manifest_parser · 90%
info Tool: text_me manifest_parser · 90%
info Tool: take_screenshot manifest_parser · 90%
info Tool: greet_user manifest_parser · 90%
info Tool: echo_tool manifest_parser · 90%
info Tool: demo_tool manifest_parser · 90%
info Tool: name_shrimp manifest_parser · 90%
info Tool: my_tool manifest_parser · 60%
info Tool: tool_with_context manifest_parser · 60%
info Tool: async_tool manifest_parser · 60%
info Transport: streamable-http manifest_parser · 80%
info Required env vars (8) manifest_parser · 80%
low Tool 'check_lifespan' has no annotations annotation_checker · 100%
low Tool 'multi_auth' has no annotations annotation_checker · 100%
low Tool 'failing_tool' has no annotations annotation_checker · 100%
low Tool 'tool_with_title' has no annotations annotation_checker · 100%
low Tool 'tool_with_annotations' has no annotations annotation_checker · 100%
low Tool 'tool_with_both' has no annotations annotation_checker · 100%
low Tool 'hello_world' has no annotations annotation_checker · 100%
low Tool 'tool_with_resource' has no annotations annotation_checker · 100%
low Tool 'upload_file' has no annotations annotation_checker · 100%
low Tool 'analyze_text' has no annotations annotation_checker · 100%
low Tool 'tool1' has no annotations annotation_checker · 100%
low Tool 'tool2' has no annotations annotation_checker · 100%
low Tool 'tool3' has no annotations annotation_checker · 100%
low Tool 'combined_tool' has no annotations annotation_checker · 100%
low Tool 'ask_user' has no annotations annotation_checker · 100%
low Tool 'optional_tool' has no annotations annotation_checker · 100%
low Tool 'invalid_optional_tool' has no annotations annotation_checker · 100%
low Tool 'valid_multiselect_tool' has no annotations annotation_checker · 100%
low Tool 'optional_multiselect_tool' has no annotations annotation_checker · 100%
low Tool 'defaults_tool' has no annotations annotation_checker · 100%
low Tool 'select_favorite_color' has no annotations annotation_checker · 100%
low Tool 'select_favorite_colors' has no annotations annotation_checker · 100%
low Tool 'select_color_legacy' has no annotations annotation_checker · 100%
low Tool 'tool' has no annotations annotation_checker · 100%
low Tool 'request_api_key' has no annotations annotation_checker · 100%
low Tool 'oauth_flow' has no annotations annotation_checker · 100%
low Tool 'payment_flow' has no annotations annotation_checker · 100%
low Tool 'setup_credentials' has no annotations annotation_checker · 100%
low Tool 'check_url_response' has no annotations annotation_checker · 100%
low Tool 'ask_name' has no annotations annotation_checker · 100%
low Tool 'trigger_elicitation' has no annotations annotation_checker · 100%
low Tool 'test_decline' has no annotations annotation_checker · 100%
low Tool 'test_cancel' has no annotations annotation_checker · 100%
low Tool 'use_deprecated_elicit' has no annotations annotation_checker · 100%
low Tool 'direct_elicit_url' has no annotations annotation_checker · 100%
low Tool 'delete_file' has no annotations annotation_checker · 100%
low Tool 'greet' has no annotations annotation_checker · 100%
low Tool 'query_db' has no annotations annotation_checker · 100%
low Tool 'dummy_tool_func' has no annotations annotation_checker · 100%
low Tool 'trigger' has no annotations annotation_checker · 100%
low Tool 'sleep_tool' has no annotations annotation_checker · 100%
low Tool 'basic_tool' has no annotations annotation_checker · 100%
low Tool 'test_sampling_tool' has no annotations annotation_checker · 100%
low Tool 'test_list_roots' has no annotations annotation_checker · 100%
low Tool 'test_tool' has no annotations annotation_checker · 100%
low Tool 'test_tool_with_log' has no annotations annotation_checker · 100%
low Tool 'test_tool_with_log_dict' has no annotations annotation_checker · 100%
low Tool 'check_context' has no annotations annotation_checker · 100%
low Tool 'get_location' has no annotations annotation_checker · 100%
low Tool 'get_statistics' has no annotations annotation_checker · 100%
low Tool 'get_user' has no annotations annotation_checker · 100%
low Tool 'get_config' has no annotations annotation_checker · 100%
low Tool 'list_cities' has no annotations annotation_checker · 100%
low Tool 'api_status' has no annotations annotation_checker · 100%
low Tool 'send_message' has no annotations annotation_checker · 100%
low Tool 'get_weather' has no annotations annotation_checker · 100%
low Tool 'hello' has no annotations annotation_checker · 100%
low Tool 'domain_info' has no annotations annotation_checker · 100%
low Tool 'echo' has no annotations annotation_checker · 100%
low Tool 'add_two' has no annotations annotation_checker · 100%
low Tool 'add' has no annotations annotation_checker · 100%
low Tool 'generate_poem' has no annotations annotation_checker · 100%
low Tool 'create_thumbnail' has no annotations annotation_checker · 100%
low Tool 'book_table' has no annotations annotation_checker · 100%
low Tool 'secure_payment' has no annotations annotation_checker · 100%
low Tool 'connect_service' has no annotations annotation_checker · 100%
low Tool 'long_running_task' has no annotations annotation_checker · 100%
low Tool 'advanced_tool' has no annotations annotation_checker · 100%
low Tool 'validated_tool' has no annotations annotation_checker · 100%
low Tool 'empty_result_tool' has no annotations annotation_checker · 100%
low Tool 'process_data' has no annotations annotation_checker · 100%
low Tool 'test_simple_text' has no annotations annotation_checker · 100%
low Tool 'test_image_content' has no annotations annotation_checker · 100%
low Tool 'test_audio_content' has no annotations annotation_checker · 100%
low Tool 'test_embedded_resource' has no annotations annotation_checker · 100%
low Tool 'test_multiple_content_types' has no annotations annotation_checker · 100%
low Tool 'test_tool_with_logging' has no annotations annotation_checker · 100%
low Tool 'test_tool_with_progress' has no annotations annotation_checker · 100%
low Tool 'test_sampling' has no annotations annotation_checker · 100%
low Tool 'test_elicitation' has no annotations annotation_checker · 100%
low Tool 'test_elicitation_sep1034_defaults' has no annotations annotation_checker · 100%
low Tool 'test_elicitation_sep1330_enums' has no annotations annotation_checker · 100%
low Tool 'test_error_handling' has no annotations annotation_checker · 100%
low Tool 'test_reconnection' has no annotations annotation_checker · 100%
low Tool 'get_time' has no annotations annotation_checker · 100%
low Tool 'get_weather_summary' has no annotations annotation_checker · 100%
low Tool 'get_weather_metrics' has no annotations annotation_checker · 100%
low Tool 'get_weather_alerts' has no annotations annotation_checker · 100%
low Tool 'get_temperature' has no annotations annotation_checker · 100%
low Tool 'get_weather_stats' has no annotations annotation_checker · 100%
low Tool 'hello_unicode' has no annotations annotation_checker · 100%
low Tool 'list_emoji_categories' has no annotations annotation_checker · 100%
low Tool 'multilingual_hello' has no annotations annotation_checker · 100%
low Tool 'remember' has no annotations annotation_checker · 100%
low Tool 'read_profile' has no annotations annotation_checker · 100%
low Tool 'text_me' has no annotations annotation_checker · 100%
low Tool 'take_screenshot' has no annotations annotation_checker · 100%
low Tool 'greet_user' has no annotations annotation_checker · 100%
low Tool 'echo_tool' has no annotations annotation_checker · 100%
low Tool 'demo_tool' has no annotations annotation_checker · 100%
low Tool 'multi_icon_tool' has no annotations annotation_checker · 100%
low Tool 'sum' has no annotations annotation_checker · 100%
low Tool 'name_shrimp' has no annotations annotation_checker · 100%
low Tool 'my_tool' has no annotations annotation_checker · 100%
low Tool 'tool_with_context' has no annotations annotation_checker · 100%
low Tool 'async_tool' has no annotations annotation_checker · 100%
high Hardcoded OAuth client secret in tests/client/test_auth.py auth_checker · 95%
high Hardcoded OAuth client secret in tests/client/auth/extensions/test_client_credentials.py auth_checker · 95%
high Hardcoded OAuth client secret in src/mcp/client/auth/extensions/client_credentials.py auth_checker · 95%
medium Permission: network access detected permission_analyzer · 90%
low Permission: filesystem access detected permission_analyzer · 90%
high Permission: shell access detected permission_analyzer · 95%
medium Permission: database access detected permission_analyzer · 90%
low Permission: env_vars access detected permission_analyzer · 90%
medium Excessive dependency count: 90 direct dependencies dependency_analyzer · 90%
medium Vulnerable dependency: requests@2.31.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium Vulnerable dependency: requests@2.31.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium Vulnerable dependency: requests@2.31.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium Vulnerable dependency: httpx@0.27.1,<1.0.0 (GHSA-h8pj-cxx2-jfg2) dependency_analyzer · 95%
medium Vulnerable dependency: httpx@0.27.1,<1.0.0 (PYSEC-2022-183) dependency_analyzer · 95%
medium Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-2c2j-9gv5-cj73) dependency_analyzer · 95%
medium Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-74m5-2c7w-9w3x) dependency_analyzer · 95%
medium Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (GHSA-f96h-pmfr-66vw) dependency_analyzer · 95%
medium Vulnerable dependency: starlette@0.48.0; python_version >= '3.14' (PYSEC-2023-48) dependency_analyzer · 95%
medium Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-2c2j-9gv5-cj73) dependency_analyzer · 95%
medium Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-74m5-2c7w-9w3x) dependency_analyzer · 95%
medium Vulnerable dependency: starlette@0.27; python_version < '3.14' (GHSA-f96h-pmfr-66vw) dependency_analyzer · 95%
medium Vulnerable dependency: starlette@0.27; python_version < '3.14' (PYSEC-2023-48) dependency_analyzer · 95%
medium Vulnerable dependency: python-multipart@0.0.9 (GHSA-59g5-xgcq-4qw3) dependency_analyzer · 95%
medium Vulnerable dependency: python-multipart@0.0.9 (GHSA-mj87-hwqh-73pj) dependency_analyzer · 95%
medium Vulnerable dependency: python-multipart@0.0.9 (GHSA-pp6c-gr5w-3c5g) dependency_analyzer · 95%
medium Vulnerable dependency: python-multipart@0.0.9 (GHSA-wp53-j4wj-2cfg) dependency_analyzer · 95%
medium Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (GHSA-33c7-2mpw-hg34) dependency_analyzer · 95%
medium Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (GHSA-f97h-2pfx-f59f) dependency_analyzer · 95%
medium Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (PYSEC-2020-150) dependency_analyzer · 95%
medium Vulnerable dependency: uvicorn@0.31.1; sys_platform != 'emscripten' (PYSEC-2020-151) dependency_analyzer · 95%
medium Vulnerable dependency: pywin32@311; sys_platform == 'win32' (GHSA-hwfp-hg2m-9vr2) dependency_analyzer · 95%
medium Vulnerable dependency: pywin32@311; sys_platform == 'win32' (PYSEC-2021-112) dependency_analyzer · 95%
medium Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium Vulnerable dependency: pydantic@2.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-33c7-2mpw-hg34) dependency_analyzer · 95%
medium Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (GHSA-f97h-2pfx-f59f) dependency_analyzer · 95%
medium Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-150) dependency_analyzer · 95%
medium Vulnerable dependency: uvicorn@0.23.1; sys_platform != 'emscripten' (PYSEC-2020-151) dependency_analyzer · 95%
critical Database URL with Password found in examples/mcpserver/memory.py secret_scanner · 85%
info SLSA Build Level 2 detected slsa_assessor · 85%
high High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info SBOM generated: 4 components sbom_generator · 100%
info MITRE ATLAS technique coverage summary atlas_annotator · 100%
info ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%