← Back to search

@modelcontextprotocol/sdk

modelcontextprotocol NOASSERTION 12,468 stars Scanned 5h ago

Model Context Protocol implementation for TypeScript

npm ↗ MCP Registry ↗
C
60.7 / 100

Versions

1.0.0 latest
May 20, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 35

process
unchecked low

union-test
unchecked low

preprocess-test
unchecked low

transform-test
unchecked low

pipe-test
unchecked low

complex-transform
unchecked low

initial-tool
unchecked low

Initial tool

tool-1
unchecked low

Tool 1

tool-2
unchecked low

Tool 2

get-alerts
unchecked low

Get weather alerts for a state

get-forecast
unchecked low

Get weather forecast for a location

multi-greet
unchecked low

A tool that sends different greetings with delays between them

get-protocol-info
unchecked low

Returns protocol version configuration

collect-user-info
unchecked low

A tool that collects user information through form elicitation

start-notification-stream
unchecked low

Starts sending periodic notifications for testing resumability

list-files
unchecked low

Returns a list of files as ResourceLinks without embedding their content

long-task
unchecked low

A long-running task that sends progress updates. Server will disconnect mid-task to demonstrate polling.

get_weather
unchecked low

Get weather information for a city

calculate-bmi
unchecked low

Calculate Body Mass Index

fetch-data
unchecked low

Fetch data from a URL

idempotentHint true destructiveHint true
delete-file
unchecked low

Delete a file from the project

idempotentHint true destructiveHint true
process-files
unchecked low

Process files with progress updates

summarize
unchecked low

Summarize text using the client LLM

collect-feedback
unchecked low

Collect user feedback via a form

list-workspace-files
unchecked low

List files across all workspace roots

whoami
unchecked low

Returns the authenticated subject.

a
unchecked low

b
unchecked low

out
unchecked low

c
unchecked low

echo
unchecked low

test-tool
unchecked low

A test tool

greet
unchecked low

Greet someone

contact
unchecked low

user
unchecked low

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 100

info
package.json metadata manifest_parser · 100%
info
Tool: test-tool manifest_parser · 85%
info
Tool: greet manifest_parser · 85%
info
Tool: contact manifest_parser · 85%
info
Tool: user manifest_parser · 85%
info
Tool: process manifest_parser · 85%
info
Tool: union-test manifest_parser · 85%
info
Tool: preprocess-test manifest_parser · 85%
info
Tool: transform-test manifest_parser · 85%
info
Tool: pipe-test manifest_parser · 85%
info
Tool: complex-transform manifest_parser · 85%
info
Tool: initial-tool manifest_parser · 85%
info
Tool: tool-1 manifest_parser · 85%
info
Tool: tool-2 manifest_parser · 85%
info
Tool: get-alerts manifest_parser · 85%
info
Tool: get-forecast manifest_parser · 85%
info
Tool: multi-greet manifest_parser · 85%
info
Tool: get-protocol-info manifest_parser · 85%
info
Tool: collect-user-info manifest_parser · 85%
info
Tool: start-notification-stream manifest_parser · 85%
info
Tool: list-files manifest_parser · 85%
info
Tool: long-task manifest_parser · 85%
info
Tool: get_weather manifest_parser · 85%
info
Tool: calculate-bmi manifest_parser · 85%
info
Tool: fetch-data manifest_parser · 85%
info
Tool: delete-file manifest_parser · 85%
info
Tool: process-files manifest_parser · 85%
info
Tool: summarize manifest_parser · 85%
info
Tool: collect-feedback manifest_parser · 85%
info
Tool: list-workspace-files manifest_parser · 85%
info
Tool: whoami manifest_parser · 85%
info
Tool: a manifest_parser · 85%
info
Tool: b manifest_parser · 85%
info
Tool: out manifest_parser · 85%
info
Tool: c manifest_parser · 85%
info
Tool: echo manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (17) manifest_parser · 80%
low
Tool 'test-tool' has no annotations annotation_checker · 100%
low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'contact' has no annotations annotation_checker · 100%
low
Tool 'user' has no annotations annotation_checker · 100%
low
Tool 'process' has no annotations annotation_checker · 100%
low
Tool 'union-test' has no annotations annotation_checker · 100%
low
Tool 'preprocess-test' has no annotations annotation_checker · 100%
low
Tool 'transform-test' has no annotations annotation_checker · 100%
low
Tool 'pipe-test' has no annotations annotation_checker · 100%
low
Tool 'complex-transform' has no annotations annotation_checker · 100%
low
Tool 'initial-tool' has no annotations annotation_checker · 100%
low
Tool 'tool-1' has no annotations annotation_checker · 100%
low
Tool 'tool-2' has no annotations annotation_checker · 100%
low
Tool 'get-alerts' has no annotations annotation_checker · 100%
low
Tool 'get-forecast' has no annotations annotation_checker · 100%
low
Tool 'multi-greet' has no annotations annotation_checker · 100%
low
Tool 'get-protocol-info' has no annotations annotation_checker · 100%
info
Tool 'greet' annotations are consistent annotation_checker · 80%
info
Tool 'multi-greet' annotations are consistent annotation_checker · 80%
low
Tool 'collect-user-info' has no annotations annotation_checker · 100%
low
Tool 'start-notification-stream' has no annotations annotation_checker · 100%
low
Tool 'list-files' has no annotations annotation_checker · 100%
low
Tool 'long-task' has no annotations annotation_checker · 100%
low
Tool 'get_weather' has no annotations annotation_checker · 100%
low
Tool 'calculate-bmi' has no annotations annotation_checker · 100%
info
Tool 'list-files' annotations are consistent annotation_checker · 80%
info
Tool 'fetch-data' annotations are consistent annotation_checker · 80%
info
Tool 'delete-file' annotations are consistent annotation_checker · 80%
low
Tool 'process-files' has no annotations annotation_checker · 100%
low
Tool 'summarize' has no annotations annotation_checker · 100%
low
Tool 'collect-feedback' has no annotations annotation_checker · 100%
low
Tool 'list-workspace-files' has no annotations annotation_checker · 100%
low
Tool 'whoami' has no annotations annotation_checker · 100%
low
Tool 'a' has no annotations annotation_checker · 100%
low
Tool 'b' has no annotations annotation_checker · 100%
low
Tool 'out' has no annotations annotation_checker · 100%
low
Tool 'c' has no annotations annotation_checker · 100%
low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'fetch-data' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in test/integration/test/issues/test_1342OauthErrorHttp200.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in examples/client/src/clientGuide.examples.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/auth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/streamableHttp.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/crossAppAccess.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/sse.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/authExtensions.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/src/client/crossAppAccess.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/src/client/authExtensions.ts auth_checker · 95%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: better-auth@1.4.17 (GHSA-wxw3-q3m9-c3jr) dependency_analyzer · 95%
medium
Buffer.from base64 in packages/client/test/client/sse.test.ts:23 entropy_analyzer · 75%
info
SLSA Build Level 3 detected slsa_assessor · 85%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 66 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%