← Back to search

postar-pipe-mcp

zkr-1211 Scanned 27d ago

Unified CI/CD MCP Server - orchestrates GitLab and Jenkins MCPs with dynamic skills

npm ↗
B
75.4 / 100

Versions

2.1.1latest
Jun 18, 2026
2.1.0
May 19, 2026
1.5.10
May 14, 2026
1.5.9
Apr 27, 2026
1.5.8
Apr 26, 2026
+ show 48 moreshow less
1.5.7
Apr 26, 2026
1.5.6
Apr 26, 2026
1.5.5
Apr 25, 2026
1.5.4
Apr 16, 2026
1.5.2
Apr 16, 2026
1.5.1
Apr 14, 2026
1.5.0
Apr 13, 2026
1.4.5
Apr 13, 2026
1.4.4
Apr 13, 2026
1.4.3
Apr 12, 2026
1.4.2
Apr 12, 2026
1.4.1
Apr 12, 2026
1.4.0
Apr 12, 2026
1.3.7
Apr 12, 2026
1.3.6
Apr 11, 2026
1.3.5
Apr 11, 2026
1.3.4
Apr 11, 2026
1.3.3
Apr 11, 2026
1.3.1
Apr 11, 2026
1.3.0
Apr 11, 2026
1.2.26
Apr 11, 2026
1.2.24
Apr 11, 2026
1.2.23
Apr 11, 2026
1.2.22
Apr 11, 2026
1.2.21
Apr 11, 2026
1.2.20
Apr 11, 2026
1.2.19
Apr 11, 2026
1.2.18
Apr 10, 2026
1.2.14
Apr 10, 2026
1.2.13
Apr 10, 2026
1.2.12
Apr 10, 2026
1.2.9
Apr 10, 2026
1.2.8
Apr 10, 2026
1.2.7
Apr 10, 2026
1.2.6
Apr 10, 2026
1.2.4
Apr 10, 2026
1.2.3
Apr 10, 2026
1.2.2
Apr 9, 2026
1.2.1
Apr 9, 2026
1.2.0
Apr 9, 2026
1.1.15
Apr 9, 2026
1.1.14
Apr 9, 2026
1.0.3
Apr 8, 2026
1.0.2
Apr 7, 2026
1.0.1
Apr 7, 2026
1.0.0
Apr 3, 2026
0.0.2
Apr 3, 2026
0.0.1
Apr 3, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 3

${metadata.name}
annotations: none low

${metadata.description}

trigger string
get_env_config
annotations: none low

获取当前 MCP 服务端的全部环境配置信息（GitLab、Jenkins、PIPE_TEMPLATE 等）。AI 可通过此工具一次性获取所有连接配置，无需逐个猜测环境变量。敏感 token 会做脱敏处理，仅展示前4位。

batch_execute
annotations: none low

批量执行多个MCP工具调用，支持组内并行。一次调用完成多步骤操作，减少AI与MCP之间的往返次数。适用于CI/CD流水线、多环境查询、批量操作等场景。

args record tool string steps array parallel_group number

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops, fs/promises
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 43

medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.4 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
low
Tool '${metadata.name}' has no annotations annotation_checker · 100%
low
Tool 'get_env_config' has no annotations annotation_checker · 100%
low
Tool 'batch_execute' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-2883-xcg3-v3hh) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-mh29-5h37-fv8m) dependency_analyzer · 95%
medium
Vulnerable dependency: mammoth@1.8.0 (GHSA-rmjr-87wv-gf87) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-8jhw-289h-jh2g) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-92r3-m2mg-pj97) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-c24v-8rfc-w8vw) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-c27g-q93r-2cwf) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.0.0 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
High-entropy string (6.07 bits/char) in zkr-1211-mcp-7e48eb2/src/server.ts:96 entropy_analyzer · 56%
info
package.json metadata manifest_parser · 100%
info
Tool: ${metadata.name} manifest_parser · 85%
info
Tool: get_env_config manifest_parser · 85%
info
Tool: batch_execute manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (28) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 427 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%