← Back to search

@pagopa/dx-mcpserver

GitHub Actions Scanned 27d ago

An MCP server that supports developers using DX tools.

npm ↗
? Not scanned yet

Versions

0.2.12latest
Jul 28, 2026
0.2.10
Jul 2, 2026
0.2.9
Jun 26, 2026
0.2.8
Jun 18, 2026
0.2.7
Jun 9, 2026
+ show 25 moreshow less
0.2.6
Jun 9, 2026
0.2.5
Jun 4, 2026
0.2.4
May 7, 2026
0.2.3
May 5, 2026
0.2.2
Apr 28, 2026
0.2.1
Apr 20, 2026
0.2.0
Apr 9, 2026
0.1.6
Apr 1, 2026
0.1.5
Mar 23, 2026
0.1.4
Mar 16, 2026
0.1.3
Mar 4, 2026
0.1.2
Feb 5, 2026
0.1.1
Jan 28, 2026
0.0.12
Dec 19, 2025
0.0.11
Dec 15, 2025
0.0.10
Dec 12, 2025
0.0.9
Dec 3, 2025
0.0.8
Dec 2, 2025
0.0.7
Nov 20, 2025
0.0.6
Nov 17, 2025
0.0.5
Nov 11, 2025
0.0.4
Oct 30, 2025
0.0.3
Oct 30, 2025
0.0.2
Oct 16, 2025
0.0.1
Oct 13, 2025

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: fetch(), urllib
filesystem low
Server uses filesystem capabilities via: fs sync ops, open(), os, pathlib, shutil
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync(), subprocess
database medium
Server uses database capabilities via: sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 38

high
Hardcoded OAuth client secret in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/plan.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 1039 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
info
OSV.dev API query failed dependency_analyzer · 100%
medium
Buffer.from base64 in pagopa-dx-1323cb4/apps/cli/src/adapters/octokit/index.ts:153 entropy_analyzer · 75%
medium
Buffer.from base64 in pagopa-dx-1323cb4/apps/dx-metrics-import/src/lib/importers/search.ts:107 entropy_analyzer · 75%
medium
Buffer.from base64 in pagopa-dx-1323cb4/apps/dx-metrics-import/src/lib/importers/workflows.ts:123 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/module-lock.test.ts:80 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/module-lock.test.ts:92 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:28 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:30 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:33 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:34 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:35 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:36 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:38 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:39 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in pagopa-dx-1323cb4/packages/dx-tasks/src/terraform/__tests__/mask-output.test.ts:40 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (57) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 424 components sbom_generator · 100%
critical
Database URL with Password found in pagopa-dx-1323cb4/apps/dx-metrics-import/README.md secret_scanner · 85%
critical
GitHub Personal Access Token found in pagopa-dx-1323cb4/apps/dx-metrics/.env.local secret_scanner · 95%
critical
Database URL with Password found in pagopa-dx-1323cb4/apps/dx-metrics/.env.local secret_scanner · 85%
critical
Database URL with Password found in pagopa-dx-1323cb4/packages/dx-metrics-core/README.md secret_scanner · 85%
critical
Database URL with Password found in pagopa-dx-1323cb4/infra/resources/_modules/metrics_portal/db.tf secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%