← Back to search

@telorun/mcp-server

pasi Scanned 2d ago

Telo MCP Server module — Model Context Protocol server resource kinds for Telo manifests.

npm ↗
? Not scanned yet

Versions

0.8.0latest
Jul 27, 2026
0.7.0
Jun 7, 2026
0.6.1
Jun 1, 2026
0.6.0
May 31, 2026
0.5.1
May 27, 2026
+ show 6 moreshow less
0.5.0
May 27, 2026
0.4.2
May 17, 2026
0.4.1
May 16, 2026
0.4.0
May 9, 2026
0.3.0
May 8, 2026
0.2.0
May 7, 2026

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 53

medium
Vulnerable dependency: vitest@2.1.8 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.8 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 172 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-virtuoso dependency_analyzer · 60%
medium
Vulnerable dependency: esbuild@catalog: (GHSA-67mh-4wv8-2f99) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@6 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.0 (GHSA-58qx-3vcg-4xpx) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.0 (GHSA-96hv-2xvq-fx4p) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.0.1 (GHSA-23c5-xmqv-rm74) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.0.1 (GHSA-3ppc-4f35-3m26) dependency_analyzer · 95%
medium
Vulnerable dependency: minimatch@10.0.1 (GHSA-7r86-cg39-jmmj) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@0.27.4 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Vulnerable dependency: pdfjs-dist@6.0.227 (GHSA-hq66-cqwq-w95j) dependency_analyzer · 95%
medium
Vulnerable dependency: kysely@0.28.15 (GHSA-pv5w-4p9q-p3v2) dependency_analyzer · 95%
medium
Vulnerable dependency: @fastify/static@8.0.0 (GHSA-83w8-p2f5-377r) dependency_analyzer · 95%
medium
Vulnerable dependency: @fastify/static@8.0.0 (GHSA-8pvw-jcv7-9cmj) dependency_analyzer · 95%
medium
Vulnerable dependency: @fastify/static@8.0.0 (GHSA-pr96-94w5-mx2h) dependency_analyzer · 95%
medium
Vulnerable dependency: @fastify/static@8.0.0 (GHSA-x428-ghpx-8j92) dependency_analyzer · 95%
medium
Buffer.from base64 in telorun-telo-46295b2/apps/k8s-runner/src/k8s/image-build.ts:456 entropy_analyzer · 75%
medium
Buffer.from base64 in telorun-telo-46295b2/apps/k8s-runner/src/k8s/image-build.ts:482 entropy_analyzer · 75%
medium
Buffer.from base64 in telorun-telo-46295b2/kernel/nodejs/src/cel-handlers.ts:14 entropy_analyzer · 75%
medium
Buffer.from base64 in telorun-telo-46295b2/kernel/nodejs/src/transports/oci/docker-credentials.ts:75 entropy_analyzer · 75%
medium
Buffer.from base64 in telorun-telo-46295b2/modules/http-client/nodejs/src/http-request-controller.ts:569 entropy_analyzer · 75%
medium
Buffer.from base64 in telorun-telo-46295b2/modules/ai-openai/nodejs/src/openai-image-model-controller.ts:328 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (35) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 144 components sbom_generator · 100%
critical
Database URL with Password found in telorun-telo-46295b2/docker-compose.yml secret_scanner · 85%
critical
Database URL with Password found in telorun-telo-46295b2/modules/postgres/telo.yaml secret_scanner · 85%
critical
Database URL with Password found in telorun-telo-46295b2/modules/sql/README.md secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
high
Declared package '@telorun/mcp-server' matches no manifest in the repo identity_guard · 70%