← Back to search

@mongodb-js/mcp-types

GitHub Actions Scanned 5d ago

Shared TypeScript types and interfaces for MongoDB MCP server packages

? Not scanned yet

Versions

1.15.0-alpha.11latest
Jul 27, 2026
1.15.0-alpha.10
Jul 24, 2026
1.15.0-alpha.9
Jul 23, 2026
1.15.0-alpha.8
Jul 23, 2026
1.15.0-alpha.7
Jul 22, 2026
+ show 73 moreshow less
1.15.0-alpha.6
Jul 21, 2026
1.15.0-alpha.5
Jul 18, 2026
1.15.0-alpha.4
Jul 18, 2026
1.15.0-alpha.3
Jul 18, 2026
1.15.0-alpha.2
Jul 16, 2026
1.15.0-alpha.1
Jul 16, 2026
1.14.0
Jul 14, 2026
1.14.0-prerelease.3
Jul 12, 2026
1.14.0-prerelease.2
Jul 3, 2026
1.14.0-prerelease.1
Jul 1, 2026
1.14.0-prerelease.0
Jun 26, 2026
1.13.0
Jun 16, 2026
1.12.0
Jun 4, 2026
1.11.0
May 22, 2026
1.11.0-prerelease.3
May 11, 2026
1.11.0-prerelease.2
May 6, 2026
1.11.0-prerelease.1
Apr 28, 2026
1.10.0
Apr 20, 2026
1.9.1-prerelease.2
Apr 20, 2026
1.9.0-prererelease.2
Apr 10, 2026
1.9.1-prerelease.1
Mar 30, 2026
1.9.0
Mar 24, 2026
1.8.2-prerelease.2
Mar 18, 2026
1.8.2-prerelease.1
Mar 17, 2026
1.8.1
Mar 13, 2026
1.8.1-pre.1
Mar 11, 2026
1.8.0
Mar 4, 2026
1.8.0-prerelease.1
Mar 4, 2026
1.7.0
Feb 23, 2026
1.6.1-prerelease.4
Feb 20, 2026
1.6.1-prerelease.3
Feb 18, 2026
1.6.1-prerelease.2
Feb 17, 2026
1.6.1-prerelease.1
Feb 17, 2026
1.6.0
Feb 10, 2026
1.5.1-prerelease.2
Feb 9, 2026
1.5.1-prerelease.1
Feb 6, 2026
1.5.0
Jan 15, 2026
1.4.1-prerelease.6
Jan 14, 2026
1.4.1-prerelease.5
Jan 14, 2026
1.4.1-prerelease.4
Jan 13, 2026
1.4.1-prerelease.3
Jan 13, 2026
1.4.1-prerelease.2
Jan 13, 2026
1.4.1
Jan 12, 2026
1.4.1-prerelease.1
Jan 12, 2026
1.4.0-prerelease.1
Jan 12, 2026
1.4.0
Jan 6, 2026
1.3.1
Dec 12, 2025
1.3.0
Dec 5, 2025
1.3.0-pre.2
Dec 2, 2025
1.3.0-pre.1
Nov 27, 2025
1.2.0
Oct 23, 2025
1.1.0
Oct 16, 2025
1.1.0-prerelease.1
Oct 13, 2025
1.0.3-prerelease.1
Oct 7, 2025
1.0.2
Oct 6, 2025
1.0.2-prerelease.2
Sep 26, 2025
1.0.2-prerelease.1
Sep 25, 2025
1.0.1
Sep 22, 2025
1.0.0
Sep 16, 2025
1.0.0-prerelease.2
Sep 16, 2025
1.0.0-prerelease.1
Sep 16, 2025
0.3.1-prerelease.1
Sep 10, 2025
0.3.0
Aug 28, 2025
0.2.0
Jul 24, 2025
0.1.3
Jun 30, 2025
0.1.2
Jun 24, 2025
0.1.1
May 12, 2025
0.1.0
May 1, 2025
0.0.8
Apr 30, 2025
0.0.7
Apr 28, 2025
0.0.6
Apr 28, 2025
0.0.5
Apr 25, 2025
0.0.4
Apr 23, 2025

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 29

high
Hardcoded OAuth client secret in mongodb-js-mongodb-mcp-server-df2cb89/packages/integration-tests/src/transports/configOverrides.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in mongodb-js-mongodb-mcp-server-df2cb89/packages/integration-tests/src/transports/streamableHttpMcpHttpServer.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in mongodb-js-mongodb-mcp-server-df2cb89/packages/integration-tests/src/common/apiClient.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in mongodb-js-mongodb-mcp-server-df2cb89/packages/integration-tests/src/helpers/createTestServer.ts auth_checker · 95%
high
Hardcoded OAuth client secret in mongodb-js-mongodb-mcp-server-df2cb89/packages/mongodb-atlas-mcp-remote/src/integration.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in mongodb-js-mongodb-mcp-server-df2cb89/packages/mongodb-atlas-mcp-remote/src/config.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in mongodb-js-mongodb-mcp-server-df2cb89/packages/cli/src/createApiClientFromConfig.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in mongodb-js-mongodb-mcp-server-df2cb89/packages/atlas-api-client/src/apiClient.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in mongodb-js-mongodb-mcp-server-df2cb89/packages/atlas-api-client/src/auth/clientCredentials.test.ts auth_checker · 95%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 114 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: yaml@2.8.1 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.8 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.8 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Buffer.from base64 in mongodb-js-mongodb-mcp-server-df2cb89/packages/integration-tests/src/fixtures/httpsServerProxyTest.ts:15 entropy_analyzer · 75%
medium
High-entropy string (6.02 bits/char) in mongodb-js-mongodb-mcp-server-df2cb89/packages/ui/src/lib/tools/list-databases.ts:7 entropy_analyzer · 55%
medium
High-entropy string (6.04 bits/char) in mongodb-js-mongodb-mcp-server-df2cb89/packages/ui/src/lib/tools/list-databases.ts:7 entropy_analyzer · 55%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (49) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 128 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%