← Back to search

@odel/module-sdk

odel-ai Scanned 1h ago

SDK for building Odel modules - MCP protocol implementation with Odel extensions

npm ↗
D
54.4 / 100

Versions

2.0.0latest
Jun 4, 2026
1.0.5
Dec 20, 2025
1.0.4
Dec 19, 2025
1.0.3
Dec 19, 2025
1.0.1
Dec 9, 2025
+ show 4 moreshow less
1.0.0
Dec 8, 2025
0.0.3
Nov 17, 2025
0.0.2
Nov 17, 2025
0.0.1
Nov 17, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 55

greet
annotations: none low

A simple greeting tool

name string
test-client
annotations: none low

send-notification
annotations: none low

Sends a single notification

message string
run-notifications
annotations: none low

Sends multiple notifications over time

count number interval number
initial-tool
annotations: none low

Initial tool

test-tool
annotations: none low

A test tool

tool-1
annotations: none low

Tool 1

tool-2
annotations: none low

Tool 2

test-request-info
annotations: none low

A simple test tool with request info

name string
profile
annotations: none low

A user profile data tool

active boolean
close-stream-tool
annotations: none low

Closes its own stream

test-callback-tool
annotations: none low

Test tool

test-old-version-tool
annotations: none low

Test tool

test-no-callback-tool
annotations: none low

Test tool

test-standalone-callback-tool
annotations: none low

Test tool

close-standalone-stream-tool
annotations: none low

Closes standalone stream

close-standalone-for-reconnect
annotations: none low

Closes standalone stream

test-server
annotations: none low

active boolean
test
annotations: none low

test (new api)
annotations: none low

Test description

name string value number
test-with-meta
annotations: none low

A tool with _meta field

name string
test-without-meta
annotations: none low

A tool without _meta field

name string
valid-tool-name
annotations: none low

A valid tool name

-warning-tool
annotations: none low

A tool name that generates warnings

invalid tool name
annotations: none low

An invalid tool name

tool_with_title
annotations: none low

Tool with regular title

tool_with_all_titles
annotations: none low

Tool with all titles

contact
annotations: none low

user
annotations: none low

process
annotations: none low

union-test
annotations: none low

preprocess-test
annotations: none low

transform-test
annotations: none low

pipe-test
annotations: none low

complex-transform
annotations: none low

long-operation
annotations: none low

A long running operation with progress updates

steps number
tool_with_annotations_title
annotations: none low

Tool with annotations title

book-restaurant
annotations: none low

request-id-test
annotations: none low

error-test
annotations: none low

nonexistent-tool
annotations: none low

needs-authorization
annotations: none low

A tool with _meta field

tool_name
annotations: none low

summarize
annotations: none low

Summarize any text using an LLM

text string
start-notification-stream
annotations: none low

Starts sending periodic notifications

count number interval number
long-task
annotations: none low

A long-running task that sends progress updates. Server will disconnect mid-task to demonstrate polling.

multi-greet
annotations: none low

A tool that sends different greetings with delays between them

name string
register_user
annotations: none low

Register a new user account by collecting their information

create_event
annotations: none low

Create a calendar event by collecting event details

update_shipping_address
annotations: none low

Update shipping address with validation

get_weather
annotations: none low

Get weather information for a city

city string country string
list-files
annotations: none low

Returns a list of files as ResourceLinks without embedding their content

includeDescriptions boolean
collect-user-info
annotations: none low

A tool that collects user information through form elicitation

payment-confirm
annotations: none low

A tool that confirms a payment directly with a user

cartId string
third-party-auth
annotations: none low

A demo tool that requires third-party OAuth credentials

param1 string

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 143

low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'test-client' has no annotations annotation_checker · 100%
low
Tool 'send-notification' has no annotations annotation_checker · 100%
low
Tool 'run-notifications' has no annotations annotation_checker · 100%
low
Tool 'initial-tool' has no annotations annotation_checker · 100%
low
Tool 'test-tool' has no annotations annotation_checker · 100%
low
Tool 'tool-1' has no annotations annotation_checker · 100%
low
Tool 'tool-2' has no annotations annotation_checker · 100%
low
Tool 'test-request-info' has no annotations annotation_checker · 100%
low
Tool 'profile' has no annotations annotation_checker · 100%
low
Tool 'close-stream-tool' has no annotations annotation_checker · 100%
low
Tool 'test-callback-tool' has no annotations annotation_checker · 100%
low
Tool 'test-old-version-tool' has no annotations annotation_checker · 100%
low
Tool 'test-no-callback-tool' has no annotations annotation_checker · 100%
low
Tool 'test-standalone-callback-tool' has no annotations annotation_checker · 100%
low
Tool 'close-standalone-stream-tool' has no annotations annotation_checker · 100%
low
Tool 'close-standalone-for-reconnect' has no annotations annotation_checker · 100%
low
Tool 'test-server' has no annotations annotation_checker · 100%
low
Tool 'test' has no annotations annotation_checker · 100%
low
Tool 'test (new api)' has no annotations annotation_checker · 100%
low
Tool 'test-with-meta' has no annotations annotation_checker · 100%
low
Tool 'test-without-meta' has no annotations annotation_checker · 100%
low
Tool 'valid-tool-name' has no annotations annotation_checker · 100%
low
Tool '-warning-tool' has no annotations annotation_checker · 100%
low
Tool 'invalid tool name' has no annotations annotation_checker · 100%
low
Tool 'tool_with_title' has no annotations annotation_checker · 100%
low
Tool 'tool_with_all_titles' has no annotations annotation_checker · 100%
low
Tool 'contact' has no annotations annotation_checker · 100%
low
Tool 'user' has no annotations annotation_checker · 100%
low
Tool 'process' has no annotations annotation_checker · 100%
low
Tool 'union-test' has no annotations annotation_checker · 100%
low
Tool 'preprocess-test' has no annotations annotation_checker · 100%
low
Tool 'transform-test' has no annotations annotation_checker · 100%
low
Tool 'pipe-test' has no annotations annotation_checker · 100%
low
Tool 'complex-transform' has no annotations annotation_checker · 100%
low
Tool 'long-operation' has no annotations annotation_checker · 100%
low
Tool 'tool_with_annotations_title' has no annotations annotation_checker · 100%
low
Tool 'book-restaurant' has no annotations annotation_checker · 100%
low
Tool 'request-id-test' has no annotations annotation_checker · 100%
low
Tool 'error-test' has no annotations annotation_checker · 100%
low
Tool 'nonexistent-tool' has no annotations annotation_checker · 100%
low
Tool 'needs-authorization' has no annotations annotation_checker · 100%
low
Tool 'tool_name' has no annotations annotation_checker · 100%
low
Tool 'summarize' has no annotations annotation_checker · 100%
low
Tool 'start-notification-stream' has no annotations annotation_checker · 100%
low
Tool 'long-task' has no annotations annotation_checker · 100%
low
Tool 'multi-greet' has no annotations annotation_checker · 100%
low
Tool 'register_user' has no annotations annotation_checker · 100%
low
Tool 'create_event' has no annotations annotation_checker · 100%
low
Tool 'update_shipping_address' has no annotations annotation_checker · 100%
low
Tool 'get_weather' has no annotations annotation_checker · 100%
info
Tool 'greet' annotations are consistent annotation_checker · 80%
low
Tool 'list-files' has no annotations annotation_checker · 100%
low
Tool 'collect-user-info' has no annotations annotation_checker · 100%
low
Tool 'payment-confirm' has no annotations annotation_checker · 100%
low
Tool 'third-party-auth' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in Odel-AI-ts-module-sdk-b8bb571/test/client/auth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in Odel-AI-ts-module-sdk-b8bb571/test/client/sse.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in Odel-AI-ts-module-sdk-b8bb571/test/client/streamableHttp.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in Odel-AI-ts-module-sdk-b8bb571/test/server/auth/router.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in Odel-AI-ts-module-sdk-b8bb571/test/server/auth/middleware/clientAuth.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in Odel-AI-ts-module-sdk-b8bb571/test/server/auth/middleware/clientAuth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in Odel-AI-ts-module-sdk-b8bb571/test/server/auth/providers/proxyProvider.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in Odel-AI-ts-module-sdk-b8bb571/test/server/auth/handlers/revoke.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in Odel-AI-ts-module-sdk-b8bb571/test/server/auth/handlers/authorize.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in Odel-AI-ts-module-sdk-b8bb571/test/server/auth/handlers/authorize.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in Odel-AI-ts-module-sdk-b8bb571/test/server/auth/handlers/token.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in Odel-AI-ts-module-sdk-b8bb571/test/examples/server/demoInMemoryOAuthProvider.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.8 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.8 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.0 (GHSA-58qx-3vcg-4xpx) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.0 (GHSA-96hv-2xvq-fx4p) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: greet manifest_parser · 70%
info
Tool: test-client manifest_parser · 75%
info
Tool: send-notification manifest_parser · 70%
info
Tool: run-notifications manifest_parser · 70%
info
Tool: initial-tool manifest_parser · 85%
info
Tool: test-tool manifest_parser · 85%
info
Tool: tool-1 manifest_parser · 85%
info
Tool: tool-2 manifest_parser · 85%
info
Tool: test-request-info manifest_parser · 70%
info
Tool: profile manifest_parser · 70%
info
Tool: close-stream-tool manifest_parser · 70%
info
Tool: test-callback-tool manifest_parser · 70%
info
Tool: test-old-version-tool manifest_parser · 70%
info
Tool: test-no-callback-tool manifest_parser · 70%
info
Tool: test-standalone-callback-tool manifest_parser · 70%
info
Tool: close-standalone-stream-tool manifest_parser · 70%
info
Tool: close-standalone-for-reconnect manifest_parser · 70%
info
Tool: test-server manifest_parser · 75%
info
Tool: test manifest_parser · 85%
info
Tool: test (new api) manifest_parser · 85%
info
Tool: test-with-meta manifest_parser · 85%
info
Tool: test-without-meta manifest_parser · 85%
info
Tool: valid-tool-name manifest_parser · 85%
info
Tool: -warning-tool manifest_parser · 85%
info
Tool: invalid tool name manifest_parser · 85%
info
Tool: tool_with_title manifest_parser · 85%
info
Tool: tool_with_all_titles manifest_parser · 85%
info
Tool: contact manifest_parser · 85%
info
Tool: user manifest_parser · 85%
info
Tool: process manifest_parser · 85%
info
Tool: union-test manifest_parser · 85%
info
Tool: preprocess-test manifest_parser · 85%
info
Tool: transform-test manifest_parser · 85%
info
Tool: pipe-test manifest_parser · 85%
info
Tool: complex-transform manifest_parser · 85%
info
Tool: long-operation manifest_parser · 70%
info
Tool: tool_with_annotations_title manifest_parser · 70%
info
Tool: book-restaurant manifest_parser · 70%
info
Tool: request-id-test manifest_parser · 75%
info
Tool: error-test manifest_parser · 75%
info
Tool: nonexistent-tool manifest_parser · 75%
info
Tool: needs-authorization manifest_parser · 75%
info
Tool: tool_name manifest_parser · 75%
info
Tool: summarize manifest_parser · 85%
info
Tool: start-notification-stream manifest_parser · 70%
info
Tool: long-task manifest_parser · 70%
info
Tool: multi-greet manifest_parser · 70%
info
Tool: register_user manifest_parser · 85%
info
Tool: create_event manifest_parser · 85%
info
Tool: update_shipping_address manifest_parser · 85%
info
Tool: get_weather manifest_parser · 85%
info
Tool: list-files manifest_parser · 85%
info
Tool: collect-user-info manifest_parser · 70%
info
Tool: payment-confirm manifest_parser · 85%
info
Tool: third-party-auth manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (9) manifest_parser · 80%
medium
Hardcoded OAuth client ID in Odel-AI-ts-module-sdk-b8bb571/test/server/auth/middleware/clientAuth.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in Odel-AI-ts-module-sdk-b8bb571/test/server/auth/handlers/authorize.test.ts oauth_scope_analyzer · 80%
high
Deprecated implicit grant flow in Odel-AI-ts-module-sdk-b8bb571/test/server/auth/handlers/authorize.test.ts oauth_scope_analyzer · 85%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 331 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%