← Back to search

sfcc-dev-mcp

GitHub Actions Scanned 8d ago

MCP server for Salesforce B2C Commerce Cloud development assistance including logs, debugging, and development tools

npm ↗
? Not scanned yet

Versions

1.1.0latest
Apr 8, 2026
1.0.22
Feb 24, 2026
1.0.21
Feb 21, 2026
1.0.20
Feb 21, 2026
1.0.19
Feb 19, 2026
+ show 17 moreshow less
1.0.16
Feb 13, 2026
1.0.15
Oct 3, 2025
1.0.14
Sep 17, 2025
1.0.13
Sep 15, 2025
1.0.12
Aug 19, 2025
1.0.11
Aug 15, 2025
1.0.10
Aug 15, 2025
1.0.9-2
Aug 13, 2025
1.0.8
Aug 12, 2025
1.0.7
Aug 11, 2025
1.0.6
Aug 11, 2025
1.0.5
Aug 11, 2025
1.0.4-np
Aug 11, 2025
1.0.3
Aug 10, 2025
1.0.2
Aug 9, 2025
1.0.1
Aug 9, 2025
1.0.0
Aug 9, 2025

Tools 0

No tools indexed yet.

Permissions 4

filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path
network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 27

high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/servers/sfcc-mock-server/src/config/server-config.js auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/log-client.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/site-preferences-client.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/logger.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/code-version-handler.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/configuration-factory.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/ocapi-auth-client.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/code-versions-client.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/server.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/ocapi-client.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/system-objects-client.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/config.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in taurgis-sfcc-dev-mcp-6105786/tests/script-debugger-client.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in taurgis-sfcc-dev-mcp-6105786/tests/servers/sfcc-mock-server/src/middleware/auth.js:40 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (10) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 765 components sbom_generator · 100%
high
Hardcoded Password found in taurgis-sfcc-dev-mcp-6105786/docs-site-v2/guide/configuration.md secret_scanner · 65%
high
Hardcoded Password found in taurgis-sfcc-dev-mcp-6105786/ai-instructions/skills/sfcc-localserviceregistry/SKILL.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%