← Back to search

@nestjs-ai/mcp-server

GitHub Actions Scanned 9d ago

MCP server support for NestJS AI

npm ↗
? Not scanned yet

Versions

0.1.5latest
May 21, 2026
0.1.4
May 17, 2026
0.1.3
May 17, 2026
0.1.2
May 14, 2026
0.1.1
May 14, 2026
+ show 1 moreshow less
0.1.0
May 12, 2026

Tools 0

No tools indexed yet.

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 29

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: turbo@2.8.9 (GHSA-3qcw-2rhx-2726) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.8.9 (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.16 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: typeorm@0.3.28 (GHSA-2rp8-mm9q-fp49) dependency_analyzer · 95%
medium
Vulnerable dependency: typeorm@0.3.28 (GHSA-9ggv-8w38-r7pm) dependency_analyzer · 95%
medium
Vulnerable dependency: @nestjs/core@11.1.11 (GHSA-36xv-jgw5-4q75) dependency_analyzer · 95%
medium
Vulnerable dependency: @anthropic-ai/sdk@0.90.0 (GHSA-p7fg-763f-g4gf) dependency_analyzer · 95%
medium
Vulnerable dependency: @nestjs/platform-fastify@11.1.11 (GHSA-6v32-fjc9-9qf6) dependency_analyzer · 95%
medium
Vulnerable dependency: @nestjs/platform-fastify@11.1.11 (GHSA-r4wm-x892-vjmx) dependency_analyzer · 95%
medium
Vulnerable dependency: @nestjs/platform-fastify@11.1.11 (GHSA-wf42-42fg-fg84) dependency_analyzer · 95%
medium
Buffer.from base64 in nestjs-port-nestjs-ai-fb42b68/packages/models/openai/src/open-ai-chat-model.ts:494 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in nestjs-port-nestjs-ai-fb42b68/packages/vector-stores/pgvector-store/src/__tests__/pg-vector-store.spec.ts:50 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in nestjs-port-nestjs-ai-fb42b68/packages/vector-stores/mariadb-store/src/__tests__/maria-db-store.spec.ts:36 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in nestjs-port-nestjs-ai-fb42b68/packages/vector-stores/mariadb-store/src/__tests__/maria-db-store.spec.ts:54 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in nestjs-port-nestjs-ai-fb42b68/packages/vector-stores/mariadb-store/src/__tests__/maria-db-store.spec.ts:57 entropy_analyzer · 70%
medium
Buffer.from base64 in nestjs-port-nestjs-ai-fb42b68/packages/memory/repository/model-chat-memory-repository-redis/src/redis-chat-memory-repository.ts:921 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (17) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 100 components sbom_generator · 100%
high
Generic API Key Assignment found in nestjs-port-nestjs-ai-fb42b68/packages/models/openai/src/setup/open-ai-setup.ts secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%