Back to search
? Not scanned yet

oraclemcp

Author MuhDur
Scanned 8d ago

Engine-free, safe-by-default Oracle Database MCP server with a fail-closed SQL guard (unofficial).

MCP Registry

Versions

0.1.0
first seen Jun 30, 2026

Tools 0

No tools indexed yet.

Permissions 4

network Server uses network capabilities via: fetch(), http, socket, urllib
medium
filesystem Server uses filesystem capabilities via: open(), os, pathlib, shutil, tempfile
low
shell Server uses shell capabilities via: child_process, spawn(), spawnSync(), subprocess
high
env_vars Server uses env_vars capabilities via: os.environ, process.env
low

Scan Findings 33

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: vite@8.1.2 (GHSA-587h-7wmj-h5pm) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.1.2 (GHSA-698v-4r3x-3vcv) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.1.2 (GHSA-9jrq-w75r-8gcw) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.1.2 (GHSA-r825-w8mm-5pxw) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.1.2 (GHSA-rq7h-c2jc-7f22) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (65) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 150 components sbom_generator · 100%
high
Hardcoded Password found in MuhDur-oraclemcp-7317ae8/docs/live-xe-release-evidence.md secret_scanner · 65%
high
Hardcoded Password found in MuhDur-oraclemcp-7317ae8/.github/workflows/ci.yml secret_scanner · 65%
high
Hardcoded Password found in MuhDur-oraclemcp-7317ae8/docs/operator/real-adb-tcps-signoff.md secret_scanner · 65%
high
Hardcoded Password found in MuhDur-oraclemcp-7317ae8/scripts/rig/oracle_l1.sh secret_scanner · 65%
high
Hardcoded Password found in MuhDur-oraclemcp-7317ae8/scripts/rig/tool_surface_sweep.py secret_scanner · 65%
high
Hardcoded Password found in MuhDur-oraclemcp-7317ae8/scripts/rig/failure_recovery_e2e.py secret_scanner · 65%
critical
RSA Private Key found in MuhDur-oraclemcp-7317ae8/crates/oraclemcp-core/src/tls.rs secret_scanner · 95%
critical
RSA Private Key found in MuhDur-oraclemcp-7317ae8/crates/oraclemcp-core/src/iam_token.rs secret_scanner · 95%
high
Hardcoded Password found in MuhDur-oraclemcp-7317ae8/crates/oraclemcp-audit/src/record.rs secret_scanner · 65%
high
Hardcoded Password found in MuhDur-oraclemcp-7317ae8/crates/oraclemcp-telemetry/src/logging.rs secret_scanner · 65%
high
Authorization Bearer Token found in MuhDur-oraclemcp-7317ae8/crates/oraclemcp-telemetry/src/otlp/metrics.rs secret_scanner · 70%
high
Authorization Bearer Token found in MuhDur-oraclemcp-7317ae8/crates/oraclemcp-telemetry/src/otlp/traces.rs secret_scanner · 70%
high
Hardcoded Password found in MuhDur-oraclemcp-7317ae8/crates/oraclemcp-telemetry/src/otlp/traces.rs secret_scanner · 65%
critical
AWS Access Key ID found in MuhDur-oraclemcp-7317ae8/crates/oraclemcp-telemetry/src/otlp/redact.rs secret_scanner · 95%
high
Authorization Bearer Token found in MuhDur-oraclemcp-7317ae8/crates/oraclemcp-telemetry/src/otlp/redact.rs secret_scanner · 70%
high
Hardcoded Password found in MuhDur-oraclemcp-7317ae8/crates/oraclemcp-telemetry/src/otlp/redact.rs secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%