← Back to search Server uses network capabilities via: fetch(), http, httpx, socket, urllib Server uses filesystem capabilities via: glob, open(), os, pathlib, shutil, tempfile Server uses shell capabilities via: child_process, spawnSync(), subprocess Server uses database capabilities via: psycopg, sqlalchemy, sqlite3 Server uses env_vars capabilities via: os.environ, os.getenv(), process.env
SourceHarbor MCP
Source-first AI knowledge control tower MCP server for YouTube, Bilibili, RSSHub, and RSS.
D
40 / 100
Versions
0.1.14latestfirst seen Jun 5, 2026
Tools 22
manage_notifications annotations: none low
body string date string action str enabled bool subject string category string priority string to_email string dispatch_key string category_rules string daily_digest_enabled bool daily_digest_hour_utc string failure_alert_enabled bool
ui_audit_run annotations: none low
job_id string artifact_root string
ui_audit_read annotations: none low
key string mode str action str run_id str severity string max_files int include_base64 bool max_changed_lines int
get_job annotations: none low
job_id str
compare_job annotations: none low
job_id str
list_videos annotations: none low
limit string status string platform string
process_video annotations: none low
mode str force bool video string overrides string
get_health annotations: none low
scope str window_hours int
get_artifact annotations: none low
kind str path string job_id string video_url string include_base64 bool
list_knowledge_cards annotations: none low
limit string job_id string video_id string card_type string topic_key string claim_kind string
run_computer_use annotations: none low
safety string instruction str screenshot_base64 str
list_digest_feed annotations: none low
sort string limit string since string cursor string source string category string feedback string subscription_id string
list_reader_documents annotations: none low
limit string window_id string
get_reader_document annotations: none low
document_id str
get_reader_navigation_brief annotations: none low
limit string window_id string
run_workflow annotations: none low
payload string run_once bool workflow str workflow_id string wait_for_result bool
send_daily_report annotations: none low
body string date string subject string to_email string
ingest_poll annotations: none low
platform string max_new_videos string subscription_id string
list_ingest_runs annotations: none low
limit string status string platform string
get_ingest_run annotations: none low
run_id str
manage_subscriptions annotations: none low
id string ids string tags string action str enabled bool category string platform string priority string source_url string source_type string adapter_type string enabled_only string rsshub_route string source_value string
retrieval_search annotations: none low
mode string query str top_k int filters string
Permissions 5
network medium filesystem low shell high database medium env_vars low Scan Findings 139
low
Tool 'manage_notifications' has no annotations
low
Tool 'ui_audit_run' has no annotations
low
Tool 'ui_audit_read' has no annotations
low
Tool 'get_job' has no annotations
low
Tool 'compare_job' has no annotations
low
Tool 'list_videos' has no annotations
low
Tool 'process_video' has no annotations
low
Tool 'get_health' has no annotations
low
Tool 'get_artifact' has no annotations
low
Tool 'list_knowledge_cards' has no annotations
low
Tool 'run_computer_use' has no annotations
low
Tool 'list_digest_feed' has no annotations
low
Tool 'list_reader_documents' has no annotations
low
Tool 'get_reader_document' has no annotations
low
Tool 'get_reader_navigation_brief' has no annotations
low
Tool 'run_workflow' has no annotations
low
Tool 'send_daily_report' has no annotations
low
Tool 'ingest_poll' has no annotations
low
Tool 'list_ingest_runs' has no annotations
low
Tool 'get_ingest_run' has no annotations
low
Tool 'manage_subscriptions' has no annotations
low
Tool 'retrieval_search' has no annotations
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Suspicious package name: react-dom
medium
Suspicious package name: react-markdown
medium
Vulnerable dependency: next@16.2.3 (GHSA-267c-6grr-h53f)
medium
Vulnerable dependency: next@16.2.3 (GHSA-26hh-7cqf-hhc6)
medium
Vulnerable dependency: next@16.2.3 (GHSA-2xp9-vwfh-vxw4)
medium
Vulnerable dependency: next@16.2.3 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@16.2.3 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@16.2.3 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@16.2.3 (GHSA-492v-c6pp-mqqv)
medium
Vulnerable dependency: next@16.2.3 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@16.2.3 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@16.2.3 (GHSA-6gpp-xcg3-4w24)
medium
Vulnerable dependency: next@16.2.3 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@16.2.3 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@16.2.3 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@16.2.3 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@16.2.3 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@16.2.3 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@16.2.3 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@16.2.3 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@16.2.3 (GHSA-mg66-mrh9-m8jx)
medium
Vulnerable dependency: next@16.2.3 (GHSA-p293-qw3h-jr36)
medium
Vulnerable dependency: next@16.2.3 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@16.2.3 (GHSA-q8wf-6r8g-63ch)
medium
Vulnerable dependency: next@16.2.3 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@16.2.3 (GHSA-wfc6-r584-vfw7)
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: vite@7.3.2 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@7.3.2 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-82fw-gwwq-j7x9)
medium
Vulnerable dependency: fastapi@0.116.0,<1 (GHSA-8h2j-cgx8-6xv7)
medium
Vulnerable dependency: fastapi@0.116.0,<1 (PYSEC-2021-100)
medium
Vulnerable dependency: fastapi@0.116.0,<1 (PYSEC-2024-38)
medium
Vulnerable dependency: httpx@0.28.1,<1 (GHSA-h8pj-cxx2-jfg2)
medium
Vulnerable dependency: httpx@0.28.1,<1 (PYSEC-2022-183)
medium
Vulnerable dependency: markdown@3.8.2,<4 (GHSA-5wmx-573v-2qwq)
medium
Vulnerable dependency: markdown@3.8.2,<4 (PYSEC-2026-89)
medium
Vulnerable dependency: mcp@1.13.1,<2 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.13.1,<2 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.13.1,<2 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: mcp@1.13.1,<2 (GHSA-jpw9-pfvf-9f58)
medium
Vulnerable dependency: mcp@1.13.1,<2 (GHSA-vj7q-gjh5-988w)
medium
Vulnerable dependency: mcp@1.13.1,<2 (PYSEC-2026-1616)
medium
Vulnerable dependency: mcp@1.13.1,<2 (PYSEC-2026-1617)
medium
Vulnerable dependency: mcp@1.13.1,<2 (PYSEC-2026-1618)
medium
Vulnerable dependency: mcp@1.13.1,<2 (PYSEC-2026-3482)
medium
Vulnerable dependency: mcp@1.13.1,<2 (PYSEC-2026-3483)
medium
Vulnerable dependency: pyasn1@0.6.3,<1 (GHSA-8ppf-4f7h-5ppj)
medium
Vulnerable dependency: pyasn1@0.6.3,<1 (GHSA-hm4w-wwcw-mr6r)
medium
Vulnerable dependency: pyasn1@0.6.3,<1 (GHSA-jr27-m4p2-rc6r)
medium
Vulnerable dependency: pyasn1@0.6.3,<1 (GHSA-m4p7-r5rc-7g4j)
medium
Vulnerable dependency: pyasn1@0.6.3,<1 (PYSEC-2026-2263)
medium
Vulnerable dependency: pyasn1@0.6.3,<1 (PYSEC-2026-3455)
medium
Vulnerable dependency: pyasn1@0.6.3,<1 (PYSEC-2026-3456)
medium
Vulnerable dependency: pyasn1@0.6.3,<1 (PYSEC-2026-3457)
medium
Vulnerable dependency: pydantic@2.11.7,<3 (GHSA-5jqp-qgf6-3pvh)
medium
Vulnerable dependency: pydantic@2.11.7,<3 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.11.7,<3 (PYSEC-2021-47)
medium
Vulnerable dependency: pydantic@2.11.7,<3 (PYSEC-2026-1812)
medium
Vulnerable dependency: sqlalchemy@2.0.43,<3 (GHSA-38fc-9xqv-7f7q)
medium
Vulnerable dependency: sqlalchemy@2.0.43,<3 (GHSA-887w-45rq-vxgf)
medium
Vulnerable dependency: sqlalchemy@2.0.43,<3 (GHSA-hfg2-wf6j-x53p)
medium
Vulnerable dependency: sqlalchemy@2.0.43,<3 (PYSEC-2012-9)
medium
Vulnerable dependency: sqlalchemy@2.0.43,<3 (PYSEC-2019-123)
medium
Vulnerable dependency: sqlalchemy@2.0.43,<3 (PYSEC-2019-124)
medium
Vulnerable dependency: uvicorn@0.35.0,<1 (GHSA-33c7-2mpw-hg34)
medium
Vulnerable dependency: uvicorn@0.35.0,<1 (GHSA-f97h-2pfx-f59f)
medium
Vulnerable dependency: uvicorn@0.35.0,<1 (PYSEC-2020-150)
medium
Vulnerable dependency: uvicorn@0.35.0,<1 (PYSEC-2020-151)
info
package.json metadata
info
pyproject.toml metadata
info
Tool: manage_notifications
info
Tool: ui_audit_run
info
Tool: ui_audit_read
info
Tool: get_job
info
Tool: compare_job
info
Tool: list_videos
info
Tool: process_video
info
Tool: get_health
info
Tool: get_artifact
info
Tool: list_knowledge_cards
info
Tool: run_computer_use
info
Tool: list_digest_feed
info
Tool: list_reader_documents
info
Tool: get_reader_document
info
Tool: get_reader_navigation_brief
info
Tool: run_workflow
info
Tool: send_daily_report
info
Tool: ingest_poll
info
Tool: list_ingest_runs
info
Tool: get_ingest_run
info
Tool: manage_subscriptions
info
Tool: retrieval_search
info
Required env vars (110)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 1018 components
high
Generic API Key Assignment found in xiaojiou176-open-BrewMe-13b67c0/scripts/governance/check_ci_workflow_strictness.py
high
Hardcoded Password found in xiaojiou176-open-BrewMe-13b67c0/scripts/release/run_db_rollback_drill.sh
high
Generic API Key Assignment found in xiaojiou176-open-BrewMe-13b67c0/scripts/ci/web_e2e.sh
high
Generic API Key Assignment found in xiaojiou176-open-BrewMe-13b67c0/scripts/ci/smoke_llm_real_local.sh
high
Generic API Key Assignment found in xiaojiou176-open-BrewMe-13b67c0/scripts/ci/smoke_computer_use_local.sh
high
Generic API Key Assignment found in xiaojiou176-open-BrewMe-13b67c0/scripts/runtime/configure_rsshub.sh
high
Generic API Key Assignment found in xiaojiou176-open-BrewMe-13b67c0/scripts/runtime/dev_api.sh
high
Generic API Key Assignment found in xiaojiou176-open-BrewMe-13b67c0/scripts/runtime/run_daily_digest.sh
high
Generic API Key Assignment found in xiaojiou176-open-BrewMe-13b67c0/scripts/runtime/run_failure_alerts.sh
critical
Database URL with Password found in xiaojiou176-open-BrewMe-13b67c0/infra/compose/miniflux-nextflux.compose.yml
medium
No build provenance detected (SLSA L0)