← Back to search Server uses network capabilities via: fetch(), urllib Server uses filesystem capabilities via: fs, glob, open(), os, pathlib, shutil, tempfile Server uses shell capabilities via: child_process, spawnSync(), subprocess Server uses env_vars capabilities via: os.environ, process.env
novada-mcp
One MCP server for all web data. Search, scrape, crawl, proxy, and AI research in one install.
C
72 / 100
Versions
0.9.33latestJul 30, 2026
0.9.32Jul 22, 2026
0.9.31Jul 22, 2026
0.9.30Jul 20, 2026
0.9.29Jul 19, 2026
+ show 60 moreshow less
0.9.28Jul 14, 2026
0.9.27Jul 14, 2026
0.9.26Jul 13, 2026
0.9.25Jul 13, 2026
0.9.24Jul 10, 2026
0.9.23Jul 10, 2026
0.9.22Jul 8, 2026
0.9.21Jul 8, 2026
0.9.20Jul 7, 2026
0.9.19Jul 7, 2026
0.9.18Jul 7, 2026
0.9.17Jul 5, 2026
0.9.16Jul 5, 2026
0.9.15Jul 4, 2026
0.9.13Jul 4, 2026
0.9.7Jul 4, 2026
0.9.6Jul 4, 2026
0.9.3Jul 3, 2026
0.9.2Jul 3, 2026
0.9.1Jul 2, 2026
0.9.0Jul 1, 2026
0.8.10Jul 1, 2026
0.8.9Jun 30, 2026
0.8.8Jun 30, 2026
0.8.7Jun 30, 2026
0.8.6Jun 29, 2026
0.8.5Jun 29, 2026
0.8.4Jun 26, 2026
0.8.3Jun 26, 2026
0.8.2Jun 26, 2026
0.8.1Jun 23, 2026
0.8.0Jun 8, 2026
0.7.13May 28, 2026
0.7.12May 27, 2026
0.7.11May 27, 2026
0.7.10May 26, 2026
0.7.9May 22, 2026
0.7.8May 22, 2026
0.7.7May 21, 2026
0.7.6May 21, 2026
0.7.5May 21, 2026
0.7.4May 21, 2026
0.7.3May 21, 2026
0.7.1May 19, 2026
0.7.0Apr 23, 2026
0.6.10Apr 20, 2026
0.6.9Apr 14, 2026
0.6.8Apr 13, 2026
0.6.7Apr 13, 2026
0.6.6Apr 13, 2026
0.6.5Apr 10, 2026
0.6.4Apr 10, 2026
0.6.3Apr 10, 2026
0.6.2Apr 10, 2026
0.6.1Apr 10, 2026
0.6.0Apr 10, 2026
0.4.1Mar 29, 2026
0.3.1Mar 29, 2026
0.3.0Mar 29, 2026
0.1.0Mar 29, 2026
Tools 1
novada annotations: none low
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 60
low
Tool 'novada' has no annotations
high
Hardcoded OAuth client ID in NovadaLabs-Novada-mcp-d6f763e/hosted-server/vercel/test/oauth.test.mjs
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: axios@1.15.0 (GHSA-35jp-ww65-95wh)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-3g43-6gmg-66jw)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-3w6x-2g7m-8v23)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-42h9-826w-cgv3)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-445q-vr5w-6q77)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-5c9x-8gcm-mpgx)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-62hf-57xw-28j9)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-6chq-wfr3-2hj9)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-777c-7fjr-54vf)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-7q8q-rj6j-mhjq)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-898c-q2cr-xwhg)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-f4gw-2p7v-4548)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-hfxv-24rg-xrqf)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-j5f8-grm9-p9fc)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-jqh4-m9w3-8hp9)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-m7pr-hjqh-92cm)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-mmx7-hfxf-jppx)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-mwf2-3pr3-8698)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-p92q-9vqr-4j8v)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pf86-5x62-jrwf)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pjwm-pj3p-43mv)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pmv8-rq9r-6j72)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-pmwg-cvhr-8vh7)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-q8qp-cvcw-x6jj)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-vf2m-468p-8v99)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-w9j2-pvgh-6h63)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-xhjh-pmcv-23jw)
medium
Vulnerable dependency: axios@1.15.0 (GHSA-xx6v-rp6x-q39c)
medium
Vulnerable dependency: vitest@3.1.0 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: wrangler@4.0.0 (GHSA-36p8-mvp6-cv38)
medium
Buffer.from base64 in NovadaLabs-Novada-mcp-d6f763e/npm-package/tests/tools/scrape.test.ts:125
medium
Buffer.from base64 in NovadaLabs-Novada-mcp-d6f763e/npm-package/tests/tools/scrape.test.ts:142
medium
Buffer.from base64 in NovadaLabs-Novada-mcp-d6f763e/npm-package/src/utils/url.ts:82
medium
Hex string literal (>50 chars) in NovadaLabs-Novada-mcp-d6f763e/hosted-server/vercel/test/oauth.test.mjs:198
medium
Buffer.from base64 in NovadaLabs-Novada-mcp-d6f763e/hosted-server/vercel/api/_telemetry.ts:402
info
package.json metadata
info
Tool: novada
info
Transport: stdio
info
Required env vars (59)
medium
Hardcoded OAuth client ID in NovadaLabs-Novada-mcp-d6f763e/hosted-server/vercel/test/oauth.test.mjs
high
Deprecated implicit grant flow in NovadaLabs-Novada-mcp-d6f763e/hosted-server/vercel/test/oauth.test.mjs
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 840 components
high
Hardcoded Password found in NovadaLabs-Novada-mcp-d6f763e/npm-package/src/tools/proxy_residential.ts
high
Hardcoded Password found in NovadaLabs-Novada-mcp-d6f763e/npm-package/src/tools/proxy.ts
high
Hardcoded Password found in NovadaLabs-Novada-mcp-d6f763e/npm-package/src/tools/proxy_datacenter.ts
high
Hardcoded Password found in NovadaLabs-Novada-mcp-d6f763e/npm-package/src/tools/proxy_account_create.ts
high
Hardcoded Password found in NovadaLabs-Novada-mcp-d6f763e/npm-package/src/tools/proxy_mobile.ts
high
Hardcoded Password found in NovadaLabs-Novada-mcp-d6f763e/npm-package/src/tools/proxy_isp.ts
high
Hardcoded Password found in NovadaLabs-Novada-mcp-d6f763e/monitoring/smoke/full-tools-probe.mjs
high
Authorization Bearer Token found in NovadaLabs-Novada-mcp-d6f763e/hosted-server/worker/README.md
high
Authorization Bearer Token found in NovadaLabs-Novada-mcp-d6f763e/hosted-server/vercel/README.md
medium
No build provenance detected (SLSA L0)