← Back to search

@modelcontextprotocol/sdk

modelcontextprotocol NOASSERTION 12,468 stars Scanned 2d ago

Model Context Protocol implementation for TypeScript

npm ↗ MCP Registry ↗
D
54.4 / 100

Versions

@depup/modelcontextprotocol__sdk
1.30.0-depup.0latest
Jul 28, 2026
1.29.0-depup.64
Jul 21, 2026
1.29.0-depup.0
Mar 30, 2026
1.28.0-depup.0
Mar 25, 2026
@modelcontextprotocol/server
2.0.0latest
Jul 27, 2026
2.0.0-beta.5
Jul 21, 2026
2.0.0-beta.4
Jul 13, 2026
2.0.0-beta.3
Jul 9, 2026
2.0.0-beta.2
Jul 2, 2026
+ show 5 moreshow less
2.0.0-beta.1
Jun 30, 2026
2.0.0-alpha.4
Jun 30, 2026
2.0.0-alpha.3
Jun 25, 2026
2.0.0-alpha.2
Apr 1, 2026
2.0.0-alpha.1
Apr 1, 2026
@modelcontextprotocol/client
2.0.0latest
Jul 27, 2026
2.0.0-beta.5
Jul 21, 2026
2.0.0-beta.4
Jul 13, 2026
2.0.0-beta.3
Jul 9, 2026
2.0.0-beta.2
Jul 2, 2026
+ show 5 moreshow less
2.0.0-beta.1
Jun 30, 2026
2.0.0-alpha.4
Jun 30, 2026
2.0.0-alpha.3
Jun 25, 2026
2.0.0-alpha.2
Apr 1, 2026
2.0.0-alpha.1
Apr 1, 2026
@modelcontextprotocol/node
2.0.0latest
Jul 27, 2026
2.0.0-beta.5
Jul 21, 2026
2.0.0-beta.4
Jul 13, 2026
2.0.0-beta.3
Jul 9, 2026
2.0.0-beta.2
Jul 2, 2026
+ show 5 moreshow less
2.0.0-beta.1
Jun 30, 2026
2.0.0-alpha.4
Jun 30, 2026
2.0.0-alpha.3
Jun 25, 2026
2.0.0-alpha.2
Apr 1, 2026
2.0.0-alpha.1
Apr 1, 2026
@modelcontextprotocol/express
2.0.0latest
Jul 27, 2026
2.0.0-beta.5
Jul 21, 2026
2.0.0-beta.4
Jul 13, 2026
2.0.0-beta.3
Jul 9, 2026
2.0.0-beta.2
Jul 2, 2026
+ show 5 moreshow less
2.0.0-beta.1
Jun 30, 2026
2.0.0-alpha.4
Jun 30, 2026
2.0.0-alpha.3
Jun 25, 2026
2.0.0-alpha.2
Apr 1, 2026
2.0.0-alpha.1
Apr 1, 2026
@modelcontextprotocol/hono
2.0.0latest
Jul 27, 2026
2.0.0-beta.5
Jul 21, 2026
2.0.0-beta.4
Jul 13, 2026
2.0.0-beta.3
Jul 9, 2026
2.0.0-beta.2
Jul 2, 2026
+ show 5 moreshow less
2.0.0-beta.1
Jun 30, 2026
2.0.0-alpha.4
Jun 30, 2026
2.0.0-alpha.3
Jun 25, 2026
2.0.0-alpha.2
Apr 1, 2026
2.0.0-alpha.1
Apr 1, 2026
@modelcontextprotocol/fastify
2.0.0latest
Jul 27, 2026
2.0.0-beta.5
Jul 21, 2026
2.0.0-beta.4
Jul 13, 2026
2.0.0-beta.3
Jul 9, 2026
2.0.0-beta.2
Jul 2, 2026
+ show 5 moreshow less
2.0.0-beta.1
Jun 30, 2026
2.0.0-alpha.4
Jun 30, 2026
2.0.0-alpha.3
Jun 25, 2026
2.0.0-alpha.2
Apr 1, 2026
2.0.0-alpha.1
Apr 1, 2026
@modelcontextprotocol/sdk
1.30.0latest
Jul 27, 2026
1.29.0
Mar 30, 2026
1.28.0
Mar 25, 2026
1.27.1
Feb 24, 2026
1.27.0
Feb 16, 2026
+ show 74 moreshow less
1.26.0
Feb 4, 2026
1.25.3
Jan 20, 2026
1.25.2
Jan 7, 2026
1.25.1
Dec 16, 2025
1.25.0
Dec 15, 2025
1.23.1
Dec 4, 2025
1.24.3
Dec 4, 2025
1.24.2
Dec 3, 2025
1.24.1
Dec 2, 2025
1.24.0
Dec 2, 2025
1.23.0
Nov 25, 2025
1.23.0-beta.0
Nov 20, 2025
1.22.0
Nov 13, 2025
1.21.2
Nov 13, 2025
1.21.1
Nov 7, 2025
1.21.0
Nov 3, 2025
1.20.2
Oct 24, 2025
1.20.1
Oct 16, 2025
1.20.0
Oct 9, 2025
1.19.1
Oct 2, 2025
1.18.2
Sep 25, 2025
1.18.1
Sep 18, 2025
1.18.0
Sep 11, 2025
1.17.5
Sep 2, 2025
1.17.4
Aug 22, 2025
1.17.3
Aug 14, 2025
1.17.2
Aug 7, 2025
1.17.1
Jul 31, 2025
1.17.0
Jul 24, 2025
1.16.0
Jul 17, 2025
1.15.1
Jul 10, 2025
1.15.0
Jul 3, 2025
1.14.0
Jul 3, 2025
1.13.3
Jul 1, 2025
1.13.2
Jun 26, 2025
1.13.1
Jun 23, 2025
1.13.0
Jun 18, 2025
1.12.3
Jun 13, 2025
1.12.2
Jun 13, 2025
1.12.1
May 29, 2025
1.12.0
May 22, 2025
1.11.5
May 21, 2025
1.11.4
May 16, 2025
1.11.3
May 15, 2025
1.11.2
May 12, 2025
1.11.1
May 8, 2025
1.11.0
May 1, 2025
1.10.2
Apr 22, 2025
1.10.1
Apr 18, 2025
1.10.0
Apr 17, 2025
1.9.0
Apr 7, 2025
1.8.0
Mar 26, 2025
1.7.0
Mar 11, 2025
1.6.1
Feb 28, 2025
1.6.0
Feb 24, 2025
1.5.0
Feb 12, 2025
1.4.1
Jan 24, 2025
1.4.0
Jan 23, 2025
1.3.2
Jan 22, 2025
1.3.1
Jan 21, 2025
1.3.0
Jan 20, 2025
1.2.0
Jan 20, 2025
1.1.1
Jan 10, 2025
1.1.0
Jan 3, 2025
1.0.4
Dec 17, 2024
1.0.3
Dec 4, 2024
1.0.2
Dec 4, 2024
1.0.1
Nov 26, 2024
1.0.0
Nov 25, 2024
0.7.0
Nov 20, 2024
0.6.1
Nov 20, 2024
0.6.0
Nov 16, 2024
0.5.0
Nov 15, 2024
0.4.0
Nov 11, 2024
@olaservo/mcp-sdk
1.29.0-directory-read.0latest
Jun 7, 2026
1.25.2-sep834.4
Jan 18, 2026
1.25.2-sep834.3
Jan 16, 2026
1.25.2-sep834.2
Jan 16, 2026
1.25.2-sep834.1
Jan 16, 2026
+ show 1 moreshow less
1.25.2-sep834
Jan 16, 2026
@boltmcp/mcp-sdk-express
2.0.0-alpha.5latest
Apr 15, 2026
2.0.0-alpha.4
Mar 20, 2026
2.0.0-alpha.2
Mar 19, 2026
@boltmcp/mcp-sdk-node
2.0.0-alpha.5latest
Apr 15, 2026
2.0.0-alpha.4
Mar 20, 2026
2.0.0-alpha.2
Mar 19, 2026
@boltmcp/mcp-sdk-server
2.0.0-alpha.5latest
Apr 15, 2026
2.0.0-alpha.4
Mar 20, 2026
2.0.0-alpha.2
Mar 19, 2026
2.0.0-alpha.1
Mar 18, 2026
2.0.0-alpha.0
Mar 18, 2026
@hlw-midway/mcp
1.1.0latest
Mar 24, 2026
1.0.2
Mar 23, 2026
1.0.1
Mar 18, 2026
1.0.0
Mar 18, 2026
react-native-mcp-client
0.0.5latest
Mar 5, 2026
0.0.4
Apr 5, 2025
0.0.3
Apr 5, 2025
0.0.2
Apr 5, 2025
0.0.1
Apr 5, 2025
@mcp-use/modelcontextprotocol-sdk
1.24.3-mcp-use.4latest
Dec 10, 2025
1.24.3-mcp-use.3
Dec 10, 2025
1.24.3-mcp-use.2
Dec 10, 2025
1.24.3-mcp-use.1
Dec 8, 2025
@jobot/modelcontextprotocol-typescript-sdk
1.21.0latest
Nov 3, 2025
@jgoz/mcp-sdk
1.18.0latest
Sep 13, 2025
1.17.5
Sep 13, 2025
mcp-typescript-sdk
2.0.1latest
Aug 21, 2025
@camsoft/mcp-sdk
1.17.1latest
Aug 6, 2025
@pavindulakshan/modelcontextprotocol-typescript-sdk
2.0.0latest
Jul 14, 2025
1.0.0
Apr 3, 2025
@smithery/mcp-sdk
1.13.2latest
Jun 23, 2025
@civic/mcp-sdk
1.13.0latest
Jun 22, 2025
1.12.1-refresh-support
Jun 5, 2025
1.12.1
Jun 5, 2025
@kentcdodds/tmp-modelcontextprotocol_sdk
1.13.1-alpha.0latest
Jun 19, 2025
@big-whale-labs/modelcontextprotocol-sdk
1.12.0latest
Jun 11, 2025
@borodutch/modelcontextprotocol-sdk
1.12.0latest
Jun 11, 2025
composiohq-modelcontextprotocol-typescript-sdk
1.12.2latest
Jun 6, 2025
1.6.1-0
Mar 10, 2025
1.6.1
Mar 7, 2025
mcp-sdk-local
1.12.2latest
Jun 2, 2025
1.12.1
Jun 2, 2025
@dankelleher/modelcontextprotocol-sdk
1.11.5latest
May 22, 2025
1.11.4
May 22, 2025
@nipunibpaaris/modelcontextprotocol-typescript-sdk
1.11.0latest
May 18, 2025
mcphub-sdk
1.11.3latest
May 16, 2025
1.11.2
May 11, 2025
1.11.1
May 8, 2025
1.11.0
May 6, 2025
@blocklet/mcp
1.10.2latest
Apr 23, 2025
1.10.0
Apr 11, 2025
1.8.1
Apr 6, 2025
1.8.0
Apr 1, 2025
@mcp-registry/mcp-ts-sdk
1.0.2latest
Apr 20, 2025
1.0.1
Apr 20, 2025
1.0.0
Apr 20, 2025
mcp-test-sdk
1.10.3latest
Apr 18, 2025
1.10.2
Apr 18, 2025
1.10.1
Apr 18, 2025
1.10.0
Apr 13, 2025
@cj2a7t/mcp-sdk
1.10.1latest
Apr 17, 2025
@acceleron/mcp-typescript-sdk
1.9.1-pre1latest
Apr 16, 2025
@dawnai/mcp-sdk
1.8.0latest
Apr 5, 2025
@cool-midway/mcp
1.8.0latest
Mar 26, 2025
modelcontextprotocol-cjs
1.8.0latest
Mar 22, 2025
1.7.0
Mar 22, 2025
hyper-mcp-typescript-sdk
1.7.0latest
Mar 15, 2025
@au-re/mcp-sdk
1.4.1latest
Feb 10, 2025
@rinormaloku/mcp-sdk
1.1.2latest
Jan 18, 2025
@rajhighlight/mcp-sdk
0.0.1latest
Jan 9, 2025
1.29.0latest
Mar 30, 2026
1.28.0
Mar 25, 2026
1.27.1
Feb 24, 2026
1.27.0
Feb 16, 2026
1.26.0
Feb 4, 2026
+ show 77 moreshow less
1.25.3
Jan 20, 2026
1.25.2
Jan 7, 2026
1.25.1
Dec 16, 2025
1.25.0
Dec 15, 2025
1.23.1
Dec 4, 2025
1.24.3
Dec 4, 2025
1.24.2
Dec 3, 2025
1.24.1
Dec 2, 2025
1.24.0
Dec 2, 2025
1.23.0
Nov 25, 2025
1.23.0-beta.0
Nov 20, 2025
1.22.0
Nov 13, 2025
1.21.2
Nov 13, 2025
1.21.1
Nov 7, 2025
1.21.0
Oct 30, 2025
1.20.2
Oct 24, 2025
1.20.1
Oct 16, 2025
1.20.0
Oct 9, 2025
1.19.0
Oct 2, 2025
1.18.2
Sep 25, 2025
1.18.1
Sep 18, 2025
1.18.0
Sep 18, 2025
1.17.5
Sep 2, 2025
1.17.4
Aug 21, 2025
1.17.3
Aug 14, 2025
1.17.2
Aug 7, 2025
1.17.1
Jul 31, 2025
1.17.0
Jul 24, 2025
1.16.0
Jul 17, 2025
1.15.1
Jul 10, 2025
1.15.0
Jul 3, 2025
1.14.0
Jul 3, 2025
1.13.3
Jul 1, 2025
1.13.2
Jun 26, 2025
1.13.1
Jun 23, 2025
1.13.0
Jun 18, 2025
1.12.3
Jun 12, 2025
1.12.2
Jun 12, 2025
1.12.1
May 29, 2025
1.12.0
May 22, 2025
1.11.5
May 21, 2025
1.11.4
May 16, 2025
1.11.3
May 15, 2025
1.11.2
May 12, 2025
1.11.1
May 8, 2025
1.11.0
May 1, 2025
1.10.2
Apr 22, 2025
1.10.1
Apr 18, 2025
1.10.0
Apr 17, 2025
1.9.0
Apr 7, 2025
1.8.0
Mar 26, 2025
1.7.0
Mar 11, 2025
1.6.1
Feb 28, 2025
1.6.0
Feb 24, 2025
1.5.0
Feb 12, 2025
1.4.1
Jan 24, 2025
1.4.0
Jan 23, 2025
1.3.2
Jan 22, 2025
1.3.1
Jan 21, 2025
1.3.0
Jan 20, 2025
1.2.0
Jan 20, 2025
1.1.1
Jan 10, 2025
1.1.0
Jan 3, 2025
1.0.4
Dec 17, 2024
1.0.3
Dec 4, 2024
1.0.1
Nov 26, 2024
1.0.0
Nov 25, 2024
0.7.0
Nov 20, 2024
0.6.1
Nov 20, 2024
0.6.0
Nov 16, 2024
0.5.0
Nov 15, 2024
0.4.0
Nov 11, 2024
0.3.2
Nov 7, 2024
0.3.1
Nov 7, 2024
0.3.0
Nov 7, 2024
0.2.0
Nov 6, 2024
0.1.0
Oct 23, 2024
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 37

test-tool
annotations: none low

A test tool

greet
annotations: none low

Greet someone

contact
annotations: none low

user
annotations: none low

process
annotations: none low

union-test
annotations: none low

preprocess-test
annotations: none low

transform-test
annotations: none low

pipe-test
annotations: none low

complex-transform
annotations: none low

initial-tool
annotations: none low

Initial tool

tool-1
annotations: none low

Tool 1

tool-2
annotations: none low

Tool 2

get-alerts
annotations: none low

Get weather alerts for a state

get-forecast
annotations: none low

Get weather forecast for a location

multi-greet
annotations: none low

A tool that sends different greetings with delays between them

get-protocol-info
annotations: none low

Returns protocol version configuration

collect-user-info
annotations: none low

A tool that collects user information through form elicitation

start-notification-stream
annotations: none low

Starts sending periodic notifications for testing resumability

list-files
annotations: none low

Returns a list of files as ResourceLinks without embedding their content

long-task
annotations: none low

A long-running task that sends progress updates. Server will disconnect mid-task to demonstrate polling.

get_weather
annotations: none low

Get weather information for a city

calculate-bmi
annotations: none low

Calculate Body Mass Index

fetch-data
annotations: none low

Fetch data from a URL

idempotentHint true destructiveHint true
delete-file
annotations: verified low

Delete a file from the project

idempotentHint true destructiveHint true
process-files
annotations: none low

Process files with progress updates

summarize
annotations: none low

Summarize text using the client LLM

collect-feedback
annotations: none low

Collect user feedback via a form

list-workspace-files
annotations: none low

List files across all workspace roots

whoami
annotations: none low

Returns the authenticated subject.

a
annotations: none low

x number
b
annotations: none low

y number
out
annotations: none low

n number
c
annotations: none low

x number
echo
annotations: none low

x number
test
annotations: none low

ping
annotations: none low

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 608

low
Tool 'get-weather' has no annotations annotation_checker · 100%
low
Tool 'protected' has no annotations annotation_checker · 100%
low
Tool 'insatiable' has no annotations annotation_checker · 100%
low
Tool 'summarize' has no annotations annotation_checker · 100%
low
Tool 'ask' has no annotations annotation_checker · 100%
low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'signup' has no annotations annotation_checker · 100%
low
Tool 'list-roots' has no annotations annotation_checker · 100%
low
Tool 'quiet' has no annotations annotation_checker · 100%
low
Tool 'chatty' has no annotations annotation_checker · 100%
low
Tool 'e2e-entry-streaming' has no annotations annotation_checker · 100%
low
Tool 'wait' has no annotations annotation_checker · 100%
low
Tool 'run-diagnostics' has no annotations annotation_checker · 100%
low
Tool 'emit-all' has no annotations annotation_checker · 100%
low
Tool 'locate' has no annotations annotation_checker · 100%
low
Tool 'seed' has no annotations annotation_checker · 100%
low
Tool 'probe-tool' has no annotations annotation_checker · 100%
low
Tool 'signal-only-tool' has no annotations annotation_checker · 100%
low
Tool 'toggle-probe' has no annotations annotation_checker · 100%
low
Tool 'a' has no annotations annotation_checker · 100%
low
Tool 'b' has no annotations annotation_checker · 100%
low
Tool 'c' has no annotations annotation_checker · 100%
low
Tool 'post-connect-tool' has no annotations annotation_checker · 100%
low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'dynamic-probe' has no annotations annotation_checker · 100%
low
Tool 'annotated' has no annotations annotation_checker · 100%
low
Tool 'env-report' has no annotations annotation_checker · 100%
low
Tool 'test-tool' has no annotations annotation_checker · 100%
low
Tool 'contact' has no annotations annotation_checker · 100%
low
Tool 'user' has no annotations annotation_checker · 100%
low
Tool 'process' has no annotations annotation_checker · 100%
low
Tool 'union-test' has no annotations annotation_checker · 100%
low
Tool 'preprocess-test' has no annotations annotation_checker · 100%
low
Tool 'transform-test' has no annotations annotation_checker · 100%
low
Tool 'pipe-test' has no annotations annotation_checker · 100%
low
Tool 'complex-transform' has no annotations annotation_checker · 100%
low
Tool 'initial-tool' has no annotations annotation_checker · 100%
low
Tool 'tool-1' has no annotations annotation_checker · 100%
low
Tool 'tool-2' has no annotations annotation_checker · 100%
low
Tool 'test' has no annotations annotation_checker · 100%
low
Tool 't' has no annotations annotation_checker · 100%
low
Tool 'ping' has no annotations annotation_checker · 100%
low
Tool 'outer' has no annotations annotation_checker · 100%
low
Tool 'inner' has no annotations annotation_checker · 100%
info
Tool 'test' annotations are consistent annotation_checker · 80%
low
Tool 'broken' has no annotations annotation_checker · 100%
low
Tool 'open-url' has no annotations annotation_checker · 100%
low
Tool 'plan' has no annotations annotation_checker · 100%
low
Tool 'two-step' has no annotations annotation_checker · 100%
low
Tool 'hungry' has no annotations annotation_checker · 100%
low
Tool 'signin' has no annotations annotation_checker · 100%
low
Tool 'two-rounds' has no annotations annotation_checker · 100%
low
Tool 'working' has no annotations annotation_checker · 100%
low
Tool 'shed' has no annotations annotation_checker · 100%
low
Tool 'phased' has no annotations annotation_checker · 100%
low
Tool 's' has no annotations annotation_checker · 100%
low
Tool 'out' has no annotations annotation_checker · 100%
low
Tool 'arr' has no annotations annotation_checker · 100%
low
Tool 'arr-loose' has no annotations annotation_checker · 100%
low
Tool 'brainstorm_tasks' has no annotations annotation_checker · 100%
low
Tool 'sample' has no annotations annotation_checker · 100%
low
Tool 'confirm-deploy' has no annotations annotation_checker · 100%
low
Tool 'iconic' has no annotations annotation_checker · 100%
low
Tool 'whoami' has no annotations annotation_checker · 100%
low
Tool 'read-probe-header' has no annotations annotation_checker · 100%
low
Tool 'list-files' has no annotations annotation_checker · 100%
low
Tool 'write-file' has no annotations annotation_checker · 100%
low
Tool 'deploy' has no annotations annotation_checker · 100%
low
Tool 'legacy-style' has no annotations annotation_checker · 100%
low
Tool 'calculate-bmi' has no annotations annotation_checker · 100%
low
Tool 'fetch-data' has no annotations annotation_checker · 100%
low
Tool 'route' has no annotations annotation_checker · 100%
low
Tool 'uppercase' has no annotations annotation_checker · 100%
low
Tool 'request_count' has no annotations annotation_checker · 100%
info
Tool 'greet' annotations are consistent annotation_checker · 80%
info
Tool 'multi-greet' annotations are consistent annotation_checker · 80%
low
Tool 'collect-user-info' has no annotations annotation_checker · 100%
info
Tool 'start-notification-stream' annotations are consistent annotation_checker · 80%
info
Tool 'add-resource' annotations are consistent annotation_checker · 80%
info
Tool 'repl-playground-server' annotations are consistent annotation_checker · 80%
low
Tool 'farewell' has no annotations annotation_checker · 100%
low
Tool 'flip_tools' has no annotations annotation_checker · 100%
low
Tool 'increment' has no annotations annotation_checker · 100%
low
Tool 'countdown' has no annotations annotation_checker · 100%
low
Tool 'greet-zod' has no annotations annotation_checker · 100%
low
Tool 'greet-arktype' has no annotations annotation_checker · 100%
low
Tool 'greet-valibot' has no annotations annotation_checker · 100%
low
Tool 'list-forecasts' has no annotations annotation_checker · 100%
low
Tool 'start-notification-stream' has no annotations annotation_checker · 100%
low
Tool 'register_user' has no annotations annotation_checker · 100%
low
Tool 'plan_trip' has no annotations annotation_checker · 100%
low
Tool 'link_account' has no annotations annotation_checker · 100%
low
Tool 'confirm_payment' has no annotations annotation_checker · 100%
low
Tool 'add_task' has no annotations annotation_checker · 100%
low
Tool 'add_tasks' has no annotations annotation_checker · 100%
low
Tool 'list_tasks' has no annotations annotation_checker · 100%
low
Tool 'complete_task' has no annotations annotation_checker · 100%
low
Tool 'work_through_tasks' has no annotations annotation_checker · 100%
low
Tool 'clear_done' has no annotations annotation_checker · 100%
low
Tool 'prioritize' has no annotations annotation_checker · 100%
info
Tool 'calc' annotations are consistent annotation_checker · 80%
low
Tool 'add_resource' has no annotations annotation_checker · 100%
low
Tool 'long-operation' has no annotations annotation_checker · 100%
low
Tool 'noop' has no annotations annotation_checker · 100%
low
Tool 'read-count' has no annotations annotation_checker · 100%
low
Tool 'request-count' has no annotations annotation_checker · 100%
low
Tool 'get-forecast' has no annotations annotation_checker · 100%
low
Tool 'apply-discount' has no annotations annotation_checker · 100%
low
Tool 'forecast' has no annotations annotation_checker · 100%
low
Tool 'add_note' has no annotations annotation_checker · 100%
low
Tool 'remove_note' has no annotations annotation_checker · 100%
low
Tool 'remove_all' has no annotations annotation_checker · 100%
low
Tool 'get-protocol-info' has no annotations annotation_checker · 100%
low
Tool 'get-alerts' has no annotations annotation_checker · 100%
low
Tool 'process-files' has no annotations annotation_checker · 100%
low
Tool 'validate-records' has no annotations annotation_checker · 100%
low
Tool 'scan-archive' has no annotations annotation_checker · 100%
low
Tool 'fetch-source' has no annotations annotation_checker · 100%
info
Tool 'search' annotations are consistent annotation_checker · 80%
info
Tool 'product-details' annotations are consistent annotation_checker · 80%
info
Tool 'clear-catalog' annotations are consistent annotation_checker · 80%
low
Tool 'product-card' has no annotations annotation_checker · 100%
low
Tool 'list-jobs' has no annotations annotation_checker · 100%
low
Tool 'run-report' has no annotations annotation_checker · 100%
low
Tool 'read-note' has no annotations annotation_checker · 100%
low
Tool 'delete-note' has no annotations annotation_checker · 100%
low
Tool 'always-protocol-error' has no annotations annotation_checker · 100%
low
Tool 'tag-release' has no annotations annotation_checker · 100%
low
Tool 'provision' has no annotations annotation_checker · 100%
low
Tool 'wipe-cache' has no annotations annotation_checker · 100%
low
Tool 'collect-feedback' has no annotations annotation_checker · 100%
low
Tool 'delete-dataset' has no annotations annotation_checker · 100%
low
Tool 'export-report' has no annotations annotation_checker · 100%
low
Tool 'link-account' has no annotations annotation_checker · 100%
low
Tool 'connect-calendar' has no annotations annotation_checker · 100%
low
Tool 'place-order' has no annotations annotation_checker · 100%
low
Tool 'link-card' has no annotations annotation_checker · 100%
low
Tool 'summarize-order' has no annotations annotation_checker · 100%
low
Tool 'search-notes' has no annotations annotation_checker · 100%
low
Tool 'archive-note' has no annotations annotation_checker · 100%
low
Tool 'lookup-order' has no annotations annotation_checker · 100%
low
Tool 'order-total' has no annotations annotation_checker · 100%
low
Tool 'export-orders' has no annotations annotation_checker · 100%
low
Tool 'search' has no annotations annotation_checker · 100%
low
Tool 'list-trips' has no annotations annotation_checker · 100%
low
Tool 'shout' has no annotations annotation_checker · 100%
low
Tool 'measure' has no annotations annotation_checker · 100%
low
Tool 'add-note' has no annotations annotation_checker · 100%
low
Tool 'purge-notes' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client ID in modelcontextprotocol-typescript-sdk-7b781ed/test/e2e/scenarios/client-auth.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/test/e2e/scenarios/client-auth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/test/integration/test/issues/test_1342OauthErrorHttp200.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/server-legacy/test/auth/router.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/server-legacy/test/auth/handlers/revoke.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/server-legacy/test/auth/handlers/token.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in modelcontextprotocol-typescript-sdk-7b781ed/packages/server-legacy/test/auth/handlers/authorize.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/server-legacy/test/auth/handlers/authorize.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in modelcontextprotocol-typescript-sdk-7b781ed/packages/server-legacy/test/auth/middleware/clientAuth.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/server-legacy/test/auth/middleware/clientAuth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/server-legacy/test/auth/providers/proxyProvider.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/client/test/client/streamableHttp.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/client/test/client/sse.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/client/test/client/authExtensions.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/client/test/client/auth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/client/test/client/crossAppAccess.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/client/src/client/authExtensions.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/packages/client/src/client/crossAppAccess.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/examples/oauth-client-credentials/client.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/examples/oauth-client-credentials/server.ts auth_checker · 95%
high
Hardcoded OAuth client secret in modelcontextprotocol-typescript-sdk-7b781ed/examples/guides/clients/machine-auth.examples.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 250 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: vitest@catalog:devTools (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog:devTools (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@catalog:runtimeShared (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@catalog:runtimeServerOnly (GHSA-92pp-h63x-v22m) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@catalog:runtimeServerOnly (GHSA-frvp-7c67-39w9) dependency_analyzer · 95%
medium
Vulnerable dependency: @hono/node-server@catalog:runtimeServerOnly (GHSA-wc8c-qw6v-h7f6) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@catalog:runtimeShared (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@catalog:runtimeShared (GHSA-v88g-cgmw-v5xw) dependency_analyzer · 95%
medium
Vulnerable dependency: express@catalog:runtimeServerOnly (GHSA-cm5g-3pgc-8rg4) dependency_analyzer · 95%
medium
Vulnerable dependency: express@catalog:runtimeServerOnly (GHSA-gpvr-g6gh-9mc2) dependency_analyzer · 95%
medium
Vulnerable dependency: express@catalog:runtimeServerOnly (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@catalog:runtimeServerOnly (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@catalog:runtimeServerOnly (GHSA-444r-cwp2-x5xf) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@catalog:runtimeServerOnly (GHSA-jx2c-rxcm-jvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@catalog:runtimeServerOnly (GHSA-mq6c-fh97-4gwv) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@catalog:runtimeServerOnly (GHSA-mrq3-vjjr-p77c) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@catalog:runtimeServerOnly (GHSA-xw5p-hw6r-2j98) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-2234-fmw7-43wr) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-26pp-8wgv-hjvm) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-2gcr-mfcq-wcc3) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-3hrh-pfw6-9m5x) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-3mpf-rcc7-5347) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-3vhc-576x-3qv4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-458j-xx4x-4375) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-5pq2-9x2x-5p6w) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-69xw-7hcm-h432) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-6wqw-2p9w-4vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-88fw-hqm2-52qc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-92vj-g62v-jqhh) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-9r54-q6cx-xmh5) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-9vqf-7f2p-gf9v) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-f577-qrjj-4474) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-f67f-6cw9-8mq4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-f6gv-hh8j-q8vq) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-gq3j-xvxp-8hrf) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-hm8q-7f3q-5f36) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-j6c9-x7qj-28xf) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-p6xx-57qc-3wxr) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-p77w-8qqv-26rm) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-q5qw-h33p-qvwr) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-q7jf-gf43-6x6p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-qp7p-654g-cw7p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-r354-f388-2fhh) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-r5rp-j6wh-rvv4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-rpfr-3m35-5vx5) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-rv63-4mwf-qqc2) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-v8w9-8mx6-g223) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-w332-q679-j88p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-wgpf-jwqj-8h8p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-wmmm-f939-6g9c) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-wwfh-h76j-fc44) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-xpcf-pg52-r92g) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@catalog:runtimeServerOnly (GHSA-xrhx-7g5j-rcj5) dependency_analyzer · 95%
medium
Vulnerable dependency: valibot@catalog:devTools (GHSA-5qjj-4xww-7phc) dependency_analyzer · 95%
medium
Vulnerable dependency: jose@catalog:runtimeClientOnly (GHSA-hhhv-q57g-882q) dependency_analyzer · 95%
medium
Vulnerable dependency: wrangler@catalog:devTools (GHSA-8c93-4hch-xgxp) dependency_analyzer · 95%
medium
Vulnerable dependency: express-rate-limit@8.2.1 (GHSA-46wh-pxpv-q5gq) dependency_analyzer · 95%
medium
Vulnerable dependency: cross-spawn@catalog:runtimeClientOnly (GHSA-3xgq-45jj-v275) dependency_analyzer · 95%
medium
Vulnerable dependency: eventsource@catalog:runtimeClientOnly (GHSA-6h5x-7c5m-7cr7) dependency_analyzer · 95%
medium
Vulnerable dependency: better-auth@1.6.2 (GHSA-2vg6-77g8-24mp) dependency_analyzer · 95%
medium
Vulnerable dependency: better-auth@1.6.2 (GHSA-7w99-5wm4-3g79) dependency_analyzer · 95%
medium
Vulnerable dependency: better-auth@1.6.2 (GHSA-86j7-9j95-vpqj) dependency_analyzer · 95%
medium
Vulnerable dependency: better-auth@1.6.2 (GHSA-9h47-pqcx-hjr4) dependency_analyzer · 95%
medium
Vulnerable dependency: better-auth@1.6.2 (GHSA-cq3f-vc6p-68fh) dependency_analyzer · 95%
medium
Vulnerable dependency: better-auth@1.6.2 (GHSA-fmh4-wcc4-5jm3) dependency_analyzer · 95%
medium
Vulnerable dependency: better-auth@1.6.2 (GHSA-g38m-r43w-p2q7) dependency_analyzer · 95%
medium
Vulnerable dependency: better-auth@1.6.2 (GHSA-pw9m-5jxm-xr6h) dependency_analyzer · 95%
medium
Vulnerable dependency: better-auth@1.6.2 (GHSA-qq9h-g4jm-xgf3) dependency_analyzer · 95%
medium
Buffer.from base64 in modelcontextprotocol-typescript-sdk-7b781ed/packages/client/test/client/sse.test.ts:23 entropy_analyzer · 75%
medium
Buffer.from base64 in modelcontextprotocol-typescript-sdk-7b781ed/examples/shared/src/clientCredentialsAuthServer.ts:90 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: whoami manifest_parser · 85%
info
Tool: read-probe-header manifest_parser · 85%
info
Tool: list-files manifest_parser · 85%
info
Tool: write-file manifest_parser · 85%
info
Tool: deploy manifest_parser · 85%
info
Tool: legacy-style manifest_parser · 85%
info
Tool: protected manifest_parser · 85%
info
Tool: insatiable manifest_parser · 85%
info
Tool: summarize manifest_parser · 85%
info
Tool: ask manifest_parser · 85%
info
Tool: greet manifest_parser · 85%
info
Tool: signup manifest_parser · 85%
info
Tool: list-roots manifest_parser · 85%
info
Tool: quiet manifest_parser · 85%
info
Tool: chatty manifest_parser · 85%
info
Tool: e2e-entry-streaming manifest_parser · 75%
info
Tool: wait manifest_parser · 85%
info
Tool: run-diagnostics manifest_parser · 85%
info
Tool: emit-all manifest_parser · 85%
info
Tool: locate manifest_parser · 85%
info
Tool: seed manifest_parser · 85%
info
Tool: probe-tool manifest_parser · 85%
info
Tool: signal-only-tool manifest_parser · 85%
info
Tool: toggle-probe manifest_parser · 85%
info
Tool: a manifest_parser · 85%
info
Tool: b manifest_parser · 85%
info
Tool: c manifest_parser · 85%
info
Tool: post-connect-tool manifest_parser · 85%
info
Tool: echo manifest_parser · 85%
info
Tool: dynamic-probe manifest_parser · 85%
info
Tool: annotated manifest_parser · 90%
info
Tool: env-report manifest_parser · 85%
info
Tool: test-tool manifest_parser · 85%
info
Tool: contact manifest_parser · 85%
info
Tool: user manifest_parser · 85%
info
Tool: process manifest_parser · 85%
info
Tool: union-test manifest_parser · 85%
info
Tool: preprocess-test manifest_parser · 85%
info
Tool: transform-test manifest_parser · 85%
info
Tool: pipe-test manifest_parser · 85%
info
Tool: complex-transform manifest_parser · 85%
info
Tool: initial-tool manifest_parser · 85%
info
Tool: tool-1 manifest_parser · 85%
info
Tool: tool-2 manifest_parser · 85%
info
Tool: test manifest_parser · 75%
info
Tool: t manifest_parser · 85%
info
Tool: ping manifest_parser · 85%
info
Tool: outer manifest_parser · 70%
info
Tool: inner manifest_parser · 70%
info
Tool: broken manifest_parser · 85%
info
Tool: open-url manifest_parser · 85%
info
Tool: plan manifest_parser · 85%
info
Tool: two-step manifest_parser · 85%
info
Tool: hungry manifest_parser · 85%
info
Tool: signin manifest_parser · 85%
info
Tool: two-rounds manifest_parser · 85%
info
Tool: working manifest_parser · 85%
info
Tool: shed manifest_parser · 85%
info
Tool: phased manifest_parser · 85%
info
Tool: s manifest_parser · 75%
info
Tool: out manifest_parser · 85%
info
Tool: arr manifest_parser · 85%
info
Tool: arr-loose manifest_parser · 85%
info
Tool: brainstorm_tasks manifest_parser · 85%
info
Tool: sample manifest_parser · 85%
info
Tool: confirm-deploy manifest_parser · 85%
info
Tool: iconic manifest_parser · 85%
info
Tool: calculate-bmi manifest_parser · 85%
info
Tool: fetch-data manifest_parser · 85%
info
Tool: route manifest_parser · 90%
info
Tool: uppercase manifest_parser · 85%
info
Tool: request_count manifest_parser · 85%
info
Tool: multi-greet manifest_parser · 85%
info
Tool: collect-user-info manifest_parser · 85%
info
Tool: start-notification-stream manifest_parser · 85%
info
Tool: add-resource manifest_parser · 85%
info
Tool: repl-playground-server manifest_parser · 75%
info
Tool: farewell manifest_parser · 85%
info
Tool: flip_tools manifest_parser · 85%
info
Tool: increment manifest_parser · 85%
info
Tool: countdown manifest_parser · 85%
info
Tool: greet-zod manifest_parser · 85%
info
Tool: greet-arktype manifest_parser · 85%
info
Tool: greet-valibot manifest_parser · 85%
info
Tool: get-weather manifest_parser · 85%
info
Tool: list-forecasts manifest_parser · 85%
info
Tool: register_user manifest_parser · 85%
info
Tool: plan_trip manifest_parser · 85%
info
Tool: link_account manifest_parser · 85%
info
Tool: confirm_payment manifest_parser · 85%
info
Tool: add_task manifest_parser · 85%
info
Tool: add_tasks manifest_parser · 85%
info
Tool: list_tasks manifest_parser · 85%
info
Tool: complete_task manifest_parser · 85%
info
Tool: work_through_tasks manifest_parser · 85%
info
Tool: clear_done manifest_parser · 85%
info
Tool: prioritize manifest_parser · 85%
info
Tool: calc manifest_parser · 85%
info
Tool: add_resource manifest_parser · 85%
info
Tool: long-operation manifest_parser · 85%
info
Tool: noop manifest_parser · 85%
info
Tool: read-count manifest_parser · 85%
info
Tool: request-count manifest_parser · 85%
info
Tool: get-forecast manifest_parser · 85%
info
Tool: apply-discount manifest_parser · 85%
info
Tool: forecast manifest_parser · 85%
info
Tool: add_note manifest_parser · 85%
info
Tool: remove_note manifest_parser · 85%
info
Tool: remove_all manifest_parser · 85%
info
Tool: get-protocol-info manifest_parser · 85%
info
Tool: get-alerts manifest_parser · 85%
info
Tool: process-files manifest_parser · 85%
info
Tool: validate-records manifest_parser · 85%
info
Tool: scan-archive manifest_parser · 85%
info
Tool: fetch-source manifest_parser · 85%
info
Tool: search manifest_parser · 85%
info
Tool: product-details manifest_parser · 85%
info
Tool: clear-catalog manifest_parser · 85%
info
Tool: product-card manifest_parser · 85%
info
Tool: list-jobs manifest_parser · 85%
info
Tool: run-report manifest_parser · 85%
info
Tool: read-note manifest_parser · 85%
info
Tool: delete-note manifest_parser · 85%
info
Tool: always-protocol-error manifest_parser · 85%
info
Tool: tag-release manifest_parser · 85%
info
Tool: provision manifest_parser · 85%
info
Tool: wipe-cache manifest_parser · 85%
info
Tool: collect-feedback manifest_parser · 85%
info
Tool: delete-dataset manifest_parser · 85%
info
Tool: export-report manifest_parser · 85%
info
Tool: link-account manifest_parser · 85%
info
Tool: connect-calendar manifest_parser · 85%
info
Tool: place-order manifest_parser · 85%
info
Tool: link-card manifest_parser · 85%
info
Tool: summarize-order manifest_parser · 85%
info
Tool: search-notes manifest_parser · 85%
info
Tool: archive-note manifest_parser · 85%
info
Tool: lookup-order manifest_parser · 85%
info
Tool: order-total manifest_parser · 85%
info
Tool: export-orders manifest_parser · 85%
info
Tool: list-trips manifest_parser · 85%
info
Tool: shout manifest_parser · 85%
info
Tool: measure manifest_parser · 85%
info
Tool: add-note manifest_parser · 85%
info
Tool: purge-notes manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (24) manifest_parser · 80%
medium
Hardcoded OAuth client ID in modelcontextprotocol-typescript-sdk-7b781ed/test/e2e/scenarios/client-auth.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in modelcontextprotocol-typescript-sdk-7b781ed/packages/server-legacy/test/auth/handlers/authorize.test.ts oauth_scope_analyzer · 80%
high
Deprecated implicit grant flow in modelcontextprotocol-typescript-sdk-7b781ed/packages/server-legacy/test/auth/handlers/authorize.test.ts oauth_scope_analyzer · 85%
medium
Hardcoded OAuth client ID in modelcontextprotocol-typescript-sdk-7b781ed/packages/server-legacy/test/auth/middleware/clientAuth.test.ts oauth_scope_analyzer · 80%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 88 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
info
Tool: process manifest_parser · 85%
info
Tool: union-test manifest_parser · 85%
info
Tool: preprocess-test manifest_parser · 85%
info
Tool: transform-test manifest_parser · 85%
info
Tool: pipe-test manifest_parser · 85%
info
Tool: complex-transform manifest_parser · 85%
info
Tool: initial-tool manifest_parser · 85%
info
Tool: tool-1 manifest_parser · 85%
info
Tool: tool-2 manifest_parser · 85%
info
Tool: get-alerts manifest_parser · 85%
info
Tool: get-forecast manifest_parser · 85%
info
Tool: multi-greet manifest_parser · 85%
info
Tool: get-protocol-info manifest_parser · 85%
info
Tool: collect-user-info manifest_parser · 85%
info
Tool: start-notification-stream manifest_parser · 85%
info
Tool: list-files manifest_parser · 85%
info
Tool: long-task manifest_parser · 85%
info
Tool: get_weather manifest_parser · 85%
info
Tool: calculate-bmi manifest_parser · 85%
info
Tool: fetch-data manifest_parser · 85%
info
Tool: delete-file manifest_parser · 85%
info
Tool: summarize manifest_parser · 85%
info
Tool: process-files manifest_parser · 85%
info
package.json metadata manifest_parser · 100%
info
Tool: test-tool manifest_parser · 85%
info
Tool: greet manifest_parser · 85%
info
Tool: contact manifest_parser · 85%
info
Tool: user manifest_parser · 85%
info
Tool: collect-feedback manifest_parser · 85%
info
Tool: list-workspace-files manifest_parser · 85%
info
Tool: whoami manifest_parser · 85%
info
Tool: a manifest_parser · 85%
info
Tool: b manifest_parser · 85%
info
Tool: out manifest_parser · 85%
info
Tool: c manifest_parser · 85%
info
Tool: echo manifest_parser · 85%
info
Tool: test manifest_parser · 75%
info
Tool: ping manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (17) manifest_parser · 80%
low
Tool 'test-tool' has no annotations annotation_checker · 100%
low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'contact' has no annotations annotation_checker · 100%
low
Tool 'user' has no annotations annotation_checker · 100%
low
Tool 'process' has no annotations annotation_checker · 100%
low
Tool 'union-test' has no annotations annotation_checker · 100%
low
Tool 'preprocess-test' has no annotations annotation_checker · 100%
low
Tool 'transform-test' has no annotations annotation_checker · 100%
low
Tool 'pipe-test' has no annotations annotation_checker · 100%
low
Tool 'complex-transform' has no annotations annotation_checker · 100%
low
Tool 'initial-tool' has no annotations annotation_checker · 100%
low
Tool 'tool-1' has no annotations annotation_checker · 100%
low
Tool 'tool-2' has no annotations annotation_checker · 100%
low
Tool 'get-alerts' has no annotations annotation_checker · 100%
low
Tool 'get-forecast' has no annotations annotation_checker · 100%
low
Tool 'multi-greet' has no annotations annotation_checker · 100%
low
Tool 'get-protocol-info' has no annotations annotation_checker · 100%
info
Tool 'greet' annotations are consistent annotation_checker · 80%
info
Tool 'multi-greet' annotations are consistent annotation_checker · 80%
low
Tool 'collect-user-info' has no annotations annotation_checker · 100%
low
Tool 'start-notification-stream' has no annotations annotation_checker · 100%
low
Tool 'list-files' has no annotations annotation_checker · 100%
low
Tool 'long-task' has no annotations annotation_checker · 100%
low
Tool 'get_weather' has no annotations annotation_checker · 100%
low
Tool 'calculate-bmi' has no annotations annotation_checker · 100%
info
Tool 'list-files' annotations are consistent annotation_checker · 80%
info
Tool 'fetch-data' annotations are consistent annotation_checker · 80%
info
Tool 'delete-file' annotations are consistent annotation_checker · 80%
low
Tool 'process-files' has no annotations annotation_checker · 100%
low
Tool 'summarize' has no annotations annotation_checker · 100%
low
Tool 'collect-feedback' has no annotations annotation_checker · 100%
low
Tool 'list-workspace-files' has no annotations annotation_checker · 100%
low
Tool 'whoami' has no annotations annotation_checker · 100%
low
Tool 'a' has no annotations annotation_checker · 100%
low
Tool 'b' has no annotations annotation_checker · 100%
low
Tool 'out' has no annotations annotation_checker · 100%
low
Tool 'c' has no annotations annotation_checker · 100%
low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'fetch-data' has no annotations annotation_checker · 100%
low
Tool 'test' has no annotations annotation_checker · 100%
low
Tool 'ping' has no annotations annotation_checker · 100%
info
Tool 'test' annotations are consistent annotation_checker · 80%
high
Hardcoded OAuth client secret in test/integration/test/issues/test_1342OauthErrorHttp200.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in examples/client/src/clientGuide.examples.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/auth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/streamableHttp.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/crossAppAccess.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/sse.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/authExtensions.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/src/client/crossAppAccess.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/src/client/authExtensions.ts auth_checker · 95%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: better-auth@1.4.17 (GHSA-wxw3-q3m9-c3jr) dependency_analyzer · 95%
medium
Buffer.from base64 in packages/client/test/client/sse.test.ts:23 entropy_analyzer · 75%
info
SLSA Build Level 3 detected slsa_assessor · 85%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 68 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: test-tool manifest_parser · 85%
info
Tool: greet manifest_parser · 85%
info
Tool: contact manifest_parser · 85%
info
Tool: user manifest_parser · 85%
info
Tool: process manifest_parser · 85%
info
Tool: union-test manifest_parser · 85%
info
Tool: preprocess-test manifest_parser · 85%
info
Tool: transform-test manifest_parser · 85%
info
Tool: pipe-test manifest_parser · 85%
info
Tool: complex-transform manifest_parser · 85%
info
Tool: initial-tool manifest_parser · 85%
info
Tool: tool-1 manifest_parser · 85%
info
Tool: tool-2 manifest_parser · 85%
info
Tool: get-alerts manifest_parser · 85%
info
Tool: get-forecast manifest_parser · 85%
info
Tool: multi-greet manifest_parser · 85%
info
Tool: get-protocol-info manifest_parser · 85%
info
Tool: collect-user-info manifest_parser · 85%
info
Tool: start-notification-stream manifest_parser · 85%
info
Tool: list-files manifest_parser · 85%
info
Tool: long-task manifest_parser · 85%
info
Tool: get_weather manifest_parser · 85%
info
Tool: calculate-bmi manifest_parser · 85%
info
Tool: fetch-data manifest_parser · 85%
info
Tool: delete-file manifest_parser · 85%
info
Tool: process-files manifest_parser · 85%
info
Tool: summarize manifest_parser · 85%
info
Tool: collect-feedback manifest_parser · 85%
info
Tool: list-workspace-files manifest_parser · 85%
info
Tool: whoami manifest_parser · 85%
info
Tool: a manifest_parser · 85%
info
Tool: b manifest_parser · 85%
info
Tool: out manifest_parser · 85%
info
Tool: c manifest_parser · 85%
info
Tool: echo manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (17) manifest_parser · 80%
low
Tool 'test-tool' has no annotations annotation_checker · 100%
low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'contact' has no annotations annotation_checker · 100%
low
Tool 'user' has no annotations annotation_checker · 100%
low
Tool 'process' has no annotations annotation_checker · 100%
low
Tool 'union-test' has no annotations annotation_checker · 100%
low
Tool 'preprocess-test' has no annotations annotation_checker · 100%
low
Tool 'transform-test' has no annotations annotation_checker · 100%
low
Tool 'pipe-test' has no annotations annotation_checker · 100%
low
Tool 'complex-transform' has no annotations annotation_checker · 100%
low
Tool 'initial-tool' has no annotations annotation_checker · 100%
low
Tool 'tool-1' has no annotations annotation_checker · 100%
low
Tool 'tool-2' has no annotations annotation_checker · 100%
low
Tool 'get-alerts' has no annotations annotation_checker · 100%
low
Tool 'get-forecast' has no annotations annotation_checker · 100%
low
Tool 'multi-greet' has no annotations annotation_checker · 100%
low
Tool 'get-protocol-info' has no annotations annotation_checker · 100%
info
Tool 'greet' annotations are consistent annotation_checker · 80%
info
Tool 'multi-greet' annotations are consistent annotation_checker · 80%
low
Tool 'collect-user-info' has no annotations annotation_checker · 100%
low
Tool 'start-notification-stream' has no annotations annotation_checker · 100%
low
Tool 'list-files' has no annotations annotation_checker · 100%
low
Tool 'long-task' has no annotations annotation_checker · 100%
low
Tool 'get_weather' has no annotations annotation_checker · 100%
low
Tool 'calculate-bmi' has no annotations annotation_checker · 100%
info
Tool 'list-files' annotations are consistent annotation_checker · 80%
info
Tool 'fetch-data' annotations are consistent annotation_checker · 80%
info
Tool 'delete-file' annotations are consistent annotation_checker · 80%
low
Tool 'process-files' has no annotations annotation_checker · 100%
low
Tool 'summarize' has no annotations annotation_checker · 100%
low
Tool 'collect-feedback' has no annotations annotation_checker · 100%
low
Tool 'list-workspace-files' has no annotations annotation_checker · 100%
low
Tool 'whoami' has no annotations annotation_checker · 100%
low
Tool 'a' has no annotations annotation_checker · 100%
low
Tool 'b' has no annotations annotation_checker · 100%
low
Tool 'out' has no annotations annotation_checker · 100%
low
Tool 'c' has no annotations annotation_checker · 100%
low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'fetch-data' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in test/integration/test/issues/test_1342OauthErrorHttp200.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in examples/client/src/clientGuide.examples.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/auth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/streamableHttp.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/crossAppAccess.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/sse.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/test/client/authExtensions.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/src/client/crossAppAccess.ts auth_checker · 95%
high
Hardcoded OAuth client secret in packages/client/src/client/authExtensions.ts auth_checker · 95%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: better-auth@1.4.17 (GHSA-wxw3-q3m9-c3jr) dependency_analyzer · 95%
medium
Buffer.from base64 in packages/client/test/client/sse.test.ts:23 entropy_analyzer · 75%
info
SLSA Build Level 3 detected slsa_assessor · 85%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 66 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%