← Back to search

Northwestern University Libraries Digital Collections API

nulib streamable_http Scanned 7d ago

Agent integration with the Northwestern University Libraries Digital Collections API

MCP Registry ↗
? Not scanned yet

Versions

2.10.10latest
first seen Jun 5, 2026

Tools 0

No tools indexed yet.

Permissions 3

network medium
Server uses network capabilities via: fetch(), urllib
filesystem low
Server uses filesystem capabilities via: fs sync ops, os, path
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 124

medium
Vulnerable dependency: hono@4.12.18 (GHSA-54fx-42gc-7vw4) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-79qm-7rj5-m7r9) dependency_analyzer · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 117 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: cookie@0.5.0 (GHSA-pxg6-pf52-xh8x) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-2gcr-mfcq-wcc3) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-3hrh-pfw6-9m5x) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-88fw-hqm2-52qc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-8j4g-w8fx-2239) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-f23p-vx2j-j53r) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-f577-qrjj-4474) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-hvrm-45r6-mjfj) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-j6c9-x7qj-28xf) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-rv63-4mwf-qqc2) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-w62v-xxxg-mg59) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-wgpf-jwqj-8h8p) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-wwfh-h76j-fc44) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-xgm2-5f3f-mvvc) dependency_analyzer · 95%
medium
Vulnerable dependency: hono@4.12.18 (GHSA-xrhx-7g5j-rcj5) dependency_analyzer · 95%
medium
Vulnerable dependency: aws-sdk@2.1640.0 (GHSA-j965-2qgj-vjmq) dependency_analyzer · 95%
medium
Vulnerable dependency: idna@3.10 (GHSA-65pc-fj4g-8rjx) dependency_analyzer · 95%
medium
Vulnerable dependency: idna@3.10 (PYSEC-2026-215) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.3.27 (GHSA-3644-q5cj-c5c7) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.3.27 (GHSA-gr75-jv2w-4656) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.3.27 (PYSEC-2026-2192) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.3.27 (PYSEC-2026-2555) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (GHSA-2g6r-c272-w58r) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (GHSA-6qv9-48xg-fc7f) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (GHSA-926x-3r5x-gfhw) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (GHSA-c67j-w6g6-q2cm) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (GHSA-pjwx-r37v-7724) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (GHSA-qh6h-p6c9-ff54) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (PYSEC-2026-1518) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (PYSEC-2026-2193) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (PYSEC-2026-2562) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (PYSEC-2026-2563) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (PYSEC-2026-2564) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3.78 (PYSEC-2026-373) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-openai@0.3.35 (GHSA-r7w7-9xr2-qq2r) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-openai@0.3.35 (PYSEC-2026-76) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-text-splitters@0.3.11 (GHSA-fv5p-p927-qmxr) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-text-splitters@0.3.11 (PYSEC-2026-77) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph@0.6.8 (GHSA-g48c-2wqr-h844) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph@0.6.8 (PYSEC-2026-83) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph-checkpoint@2.1.2 (GHSA-fjqc-hq36-qh5p) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph-checkpoint@2.1.2 (GHSA-mhr3-j7m5-c7c9) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph-checkpoint@2.1.2 (GHSA-wwqv-p2pp-99h5) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph-checkpoint@2.1.2 (PYSEC-2026-1527) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph-checkpoint@2.1.2 (PYSEC-2026-2573) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph-checkpoint@2.1.2 (PYSEC-2026-2574) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph-sdk@0.2.9 (GHSA-w39p-vh2g-g8g5) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph-sdk@0.2.9 (PYSEC-2026-2575) dependency_analyzer · 95%
medium
Vulnerable dependency: langsmith@0.4.33 (GHSA-3644-q5cj-c5c7) dependency_analyzer · 95%
medium
Vulnerable dependency: langsmith@0.4.33 (GHSA-f4xh-w4cj-qxq8) dependency_analyzer · 95%
medium
Vulnerable dependency: langsmith@0.4.33 (GHSA-rr7j-v2q5-chgv) dependency_analyzer · 95%
medium
Vulnerable dependency: langsmith@0.4.33 (GHSA-v34v-rq6j-cj6p) dependency_analyzer · 95%
medium
Vulnerable dependency: langsmith@0.4.33 (PYSEC-2026-2582) dependency_analyzer · 95%
medium
Vulnerable dependency: langsmith@0.4.33 (PYSEC-2026-2583) dependency_analyzer · 95%
medium
Vulnerable dependency: langsmith@0.4.33 (PYSEC-2026-2584) dependency_analyzer · 95%
medium
Vulnerable dependency: orjson@3.11.3 (GHSA-hx9q-6w63-j58v) dependency_analyzer · 95%
medium
Vulnerable dependency: orjson@3.11.3 (PYSEC-2026-107) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.6.0 (GHSA-752w-5fwx-jx9f) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.6.0 (GHSA-993g-76c3-p5m4) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.6.0 (GHSA-fhv5-28vv-h8m8) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.6.0 (GHSA-xgmm-8j9v-c9wx) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.6.0 (PYSEC-2025-183) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.6.0 (PYSEC-2026-120) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.6.0 (PYSEC-2026-175) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.6.0 (PYSEC-2026-177) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.6.0 (PYSEC-2026-179) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.1 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.1 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.32.5 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.32.5 (PYSEC-2026-2275) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.5.0 (GHSA-2xpw-w6gg-jr37) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.5.0 (GHSA-38jv-5279-wg99) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.5.0 (GHSA-gm62-xv2j-4w53) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.5.0 (GHSA-qccp-gfcp-xxvc) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.5.0 (PYSEC-2026-141) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.5.0 (PYSEC-2026-1994) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.5.0 (PYSEC-2026-1996) dependency_analyzer · 95%
medium
Vulnerable dependency: urllib3@2.5.0 (PYSEC-2026-1998) dependency_analyzer · 95%
medium
Vulnerable dependency: wheel@0.45.1 (GHSA-8rrh-rw8j-w5fx) dependency_analyzer · 95%
medium
Vulnerable dependency: wheel@0.45.1 (PYSEC-2026-2047) dependency_analyzer · 95%
medium
Vulnerable dependency: Pygments@2.7.3,<3.0.0 (GHSA-5239-wwwm-4pmq) dependency_analyzer · 95%
medium
Vulnerable dependency: Pygments@2.7.3,<3.0.0 (GHSA-mrwq-x4v8-fh7p) dependency_analyzer · 95%
medium
Vulnerable dependency: Pygments@2.7.3,<3.0.0 (PYSEC-2023-117) dependency_analyzer · 95%
medium
Vulnerable dependency: Pygments@2.7.3,<3.0.0 (PYSEC-2026-2987) dependency_analyzer · 95%
medium
Vulnerable dependency: setuptools@78.1.0 (GHSA-5rjg-fvgr-3xxf) dependency_analyzer · 95%
medium
Vulnerable dependency: setuptools@78.1.0 (GHSA-h35f-9h28-mq5c) dependency_analyzer · 95%
medium
Vulnerable dependency: setuptools@78.1.0 (PYSEC-2025-49) dependency_analyzer · 95%
medium
Vulnerable dependency: setuptools@78.1.0 (PYSEC-2026-3447) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.2 (GHSA-3644-q5cj-c5c7) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.2 (GHSA-3hjh-jh2h-vrg6) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.2 (GHSA-gr75-jv2w-4656) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.2 (PYSEC-2024-118) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.2 (PYSEC-2024-323) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.2 (PYSEC-2026-2192) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain@0.2 (PYSEC-2026-2555) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-openai@0.1 (GHSA-r7w7-9xr2-qq2r) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-openai@0.1 (PYSEC-2026-76) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph@0.2 (GHSA-g48c-2wqr-h844) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph@0.2 (PYSEC-2026-2194) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph@0.2 (PYSEC-2026-83) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.32 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.32 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.32 (PYSEC-2026-1872) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.32 (PYSEC-2026-2275) dependency_analyzer · 95%
medium
Vulnerable dependency: wheel@0.40 (GHSA-8rrh-rw8j-w5fx) dependency_analyzer · 95%
medium
Vulnerable dependency: wheel@0.40 (PYSEC-2026-2047) dependency_analyzer · 95%
medium
Buffer.from base64 in nulib-dc-api-v2-12d43de/mcp/apps/mcp/handlers/lambdaStreamableHttp.ts:33 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (44) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 542 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%