← Back to search

tiny-stdio-mcp-server

GitHub Actions Scanned 8d ago

Minimal MCP server over stdio with typed tools and rich content helpers

npm ↗
D
53.8 / 100

Versions

terminal-pilot-mcp
0.0.52latest
Jul 29, 2026
0.0.51
Jul 29, 2026
0.0.50
Jul 16, 2026
0.0.49
Jul 16, 2026
0.0.48
Jul 9, 2026
+ show 44 moreshow less
0.0.47
Jul 7, 2026
0.0.46
Jul 7, 2026
0.0.45
Jul 6, 2026
0.0.44
Jul 6, 2026
0.0.43
Jul 6, 2026
0.0.42
Jul 4, 2026
0.0.41
Jul 4, 2026
0.0.40
Jun 25, 2026
0.0.39
Jun 25, 2026
0.0.38
Jun 25, 2026
0.0.37
Jun 24, 2026
0.0.36
Jun 23, 2026
0.0.35
Jun 23, 2026
0.0.34
Jun 22, 2026
0.0.33
Jun 17, 2026
0.0.32
Jun 17, 2026
0.0.31
Jun 16, 2026
0.0.30
Jun 15, 2026
0.0.29
Jun 15, 2026
0.0.28
Jun 14, 2026
0.0.27
Jun 14, 2026
0.0.26
Jun 11, 2026
0.0.25
Jun 11, 2026
0.0.24
Jun 11, 2026
0.0.23
Jun 10, 2026
0.0.22
Jun 9, 2026
0.0.21
Jun 8, 2026
0.0.20
Jun 8, 2026
0.0.19
Jun 4, 2026
0.0.18
May 15, 2026
0.0.17
May 6, 2026
0.0.16
May 4, 2026
0.0.15
Apr 26, 2026
0.0.14
Apr 23, 2026
0.0.13
Apr 22, 2026
0.0.12
Apr 20, 2026
0.0.11
Apr 19, 2026
0.0.10
Apr 14, 2026
0.0.9
Apr 8, 2026
0.0.8
Apr 8, 2026
0.0.7
Apr 7, 2026
0.0.6
Apr 7, 2026
0.0.5
Apr 3, 2026
0.0.1
Apr 3, 2026
tiny-stdio-mcp-server
0.1.21latest
Jul 7, 2026
0.1.20
Jul 7, 2026
0.1.19
Jul 7, 2026
0.1.18
Jul 6, 2026
0.1.17
Jul 6, 2026
+ show 17 moreshow less
0.1.16
Jul 6, 2026
0.1.15
Jul 6, 2026
0.1.14
Jul 6, 2026
0.1.13
Jul 4, 2026
0.1.12
Jun 22, 2026
0.1.11
Jun 18, 2026
0.1.10
Jun 16, 2026
0.1.9
Jun 15, 2026
0.1.8
Jun 15, 2026
0.1.7
Jun 14, 2026
0.1.6
Jun 14, 2026
0.1.5
Jun 12, 2026
0.1.4
Jun 9, 2026
0.1.3
Jun 4, 2026
0.1.2
Apr 26, 2026
0.1.1
Apr 14, 2026
0.1.0
Feb 9, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 58

counter
annotations: none low

tool1
annotations: none low

delay
annotations: none low

sync
annotations: none low

long
annotations: none low

tool
annotations: none low

Second

search
annotations: none low

bad-input
annotations: none low

duplicate-tool
annotations: none low

Third

duplicate
annotations: none low

Third

duplicate-features
annotations: none low

prompt
annotations: none low

caesar_cipher_encrypt
annotations: none low

Encrypts text using the Caesar cipher

notify_during_call
annotations: none low

Send a tools changed notification while the call is in flight

typed_profile
annotations: none low

Return a typed profile

invalid_typed_profile
annotations: none low

Return an invalid typed profile

dynamic_add
annotations: none low

Dynamic add

conformance-test-server
annotations: none low

oauth-http-server
annotations: none low

sometimes-hangs
annotations: none low

repo
annotations: none low

Search query

repo-default
annotations: none low

sync-tool
annotations: none low

async-tool
annotations: none low

sync-throw
annotations: none low

async-throw
annotations: none low

single
annotations: none low

reject
annotations: none low

syncFail
annotations: none low

multi
annotations: none low

many
annotations: none low

complex
annotations: none low

A string

add
annotations: none low

A string

lookup
annotations: none low

Look up a user

bad_output
annotations: none low

Return an invalid typed result

bad_envelope
annotations: none low

Return a malformed result envelope

word_of_the_day
annotations: none low

Returns a random word.

list_pages
annotations: none low

List memory pages.

read_page
annotations: none low

Read a memory page.

search_memory
annotations: none low

Search memory pages.

status
annotations: none low

Show memory status.

append_to_page
annotations: none low

Append content to a memory page.

test
annotations: none low

Test

dynamic
annotations: none low

Dynamic tool

echo
annotations: none low

Echo message

greet
annotations: none low

Greets

missing
annotations: none low

fail
annotations: none low

Tuple

invalid
annotations: none low

Tuple

validated
annotations: none low

Tuple

malformed
annotations: none low

hang
annotations: none low

fast
annotations: none low

slow
annotations: none low

test-server
annotations: none low

Name to greet

noop
annotations: none low

structured
annotations: none low

empty
annotations: none low

A string

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, net
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, fs/promises, os, pathlib, shutil
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 175

info
Tool: complex manifest_parser · 75%
low
Tool 'invalid' has no annotations annotation_checker · 100%
low
Tool 'lookup' has no annotations annotation_checker · 100%
low
Tool 'bad_output' has no annotations annotation_checker · 100%
low
Tool 'bad_envelope' has no annotations annotation_checker · 100%
low
Tool 'word_of_the_day' has no annotations annotation_checker · 100%
low
Tool 'list_pages' has no annotations annotation_checker · 100%
low
Tool 'read_page' has no annotations annotation_checker · 100%
low
Tool 'search_memory' has no annotations annotation_checker · 100%
low
Tool 'status' has no annotations annotation_checker · 100%
low
Tool 'append_to_page' has no annotations annotation_checker · 100%
low
Tool 'test' has no annotations annotation_checker · 100%
low
Tool 'dynamic' has no annotations annotation_checker · 100%
low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'greet' has no annotations annotation_checker · 100%
low
Tool 'missing' has no annotations annotation_checker · 100%
low
Tool 'fail' has no annotations annotation_checker · 100%
low
Tool 'validated' has no annotations annotation_checker · 100%
low
Tool 'malformed' has no annotations annotation_checker · 100%
low
Tool 'hang' has no annotations annotation_checker · 100%
low
Tool 'fast' has no annotations annotation_checker · 100%
low
Tool 'slow' has no annotations annotation_checker · 100%
low
Tool 'test-server' has no annotations annotation_checker · 100%
low
Tool 'noop' has no annotations annotation_checker · 100%
low
Tool 'structured' has no annotations annotation_checker · 100%
low
Tool 'empty' has no annotations annotation_checker · 100%
low
Tool 'complex' has no annotations annotation_checker · 100%
low
Tool 'add' has no annotations annotation_checker · 100%
low
Tool 'reject' has no annotations annotation_checker · 100%
low
Tool 'syncFail' has no annotations annotation_checker · 100%
low
Tool 'multi' has no annotations annotation_checker · 100%
low
Tool 'many' has no annotations annotation_checker · 100%
low
Tool 'single' has no annotations annotation_checker · 100%
low
Tool 'counter' has no annotations annotation_checker · 100%
low
Tool 'tool1' has no annotations annotation_checker · 100%
low
Tool 'delay' has no annotations annotation_checker · 100%
low
Tool 'sync' has no annotations annotation_checker · 100%
low
Tool 'long' has no annotations annotation_checker · 100%
low
Tool 'tool' has no annotations annotation_checker · 100%
low
Tool 'search' has no annotations annotation_checker · 100%
low
Tool 'bad-input' has no annotations annotation_checker · 100%
low
Tool 'duplicate-tool' has no annotations annotation_checker · 100%
low
Tool 'duplicate' has no annotations annotation_checker · 100%
low
Tool 'duplicate-features' has no annotations annotation_checker · 100%
low
Tool 'prompt' has no annotations annotation_checker · 100%
low
Tool 'caesar_cipher_encrypt' has no annotations annotation_checker · 100%
low
Tool 'notify_during_call' has no annotations annotation_checker · 100%
low
Tool 'typed_profile' has no annotations annotation_checker · 100%
low
Tool 'invalid_typed_profile' has no annotations annotation_checker · 100%
low
Tool 'dynamic_add' has no annotations annotation_checker · 100%
low
Tool 'conformance-test-server' has no annotations annotation_checker · 100%
low
Tool 'oauth-http-server' has no annotations annotation_checker · 100%
low
Tool 'sometimes-hangs' has no annotations annotation_checker · 100%
low
Tool 'repo' has no annotations annotation_checker · 100%
low
Tool 'repo-default' has no annotations annotation_checker · 100%
low
Tool 'sync-tool' has no annotations annotation_checker · 100%
low
Tool 'async-tool' has no annotations annotation_checker · 100%
low
Tool 'sync-throw' has no annotations annotation_checker · 100%
low
Tool 'async-throw' has no annotations annotation_checker · 100%
medium
Vulnerable dependency: yaml@2.8.2 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
high
Hardcoded OAuth client ID in poe-platform-poe-code-a69096b/packages/opencode-poe-auth/src/poe-auth-plugin.test.ts auth_checker · 85%
high
Hardcoded OAuth client ID in poe-platform-poe-code-a69096b/packages/opencode-poe-auth/src/poe-auth-plugin.ts auth_checker · 85%
high
Hardcoded OAuth client secret in poe-platform-poe-code-a69096b/packages/toolcraft/src/cli.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in poe-platform-poe-code-a69096b/packages/toolcraft/src/error-report.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in poe-platform-poe-code-a69096b/packages/tiny-http-mcp-oauth-test-server/src/index.test.ts auth_checker · 85%
high
Hardcoded OAuth client ID in poe-platform-poe-code-a69096b/packages/tiny-http-mcp-oauth-test-server/src/inspector-smoke.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in poe-platform-poe-code-a69096b/packages/mcp-oauth/src/mcp-oauth.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in poe-platform-poe-code-a69096b/src/services/services.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in poe-platform-poe-code-a69096b/src/cli/cli-scripts.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in poe-platform-poe-code-a69096b/src/cli/oauth-login.ts auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 267 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: shell-quote@1.8.4 (GHSA-395f-4hp3-45gv) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.6.0 (GHSA-v3rj-xjv7-4jmq) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.3 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.16 (GHSA-23hp-3jrh-7fpw) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.16 (GHSA-8x88-c5mf-7j5w) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.16 (GHSA-gvwx-54wh-qm9j) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.16 (GHSA-r292-9mhp-454m) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.5.16 (GHSA-w8wr-v893-vjvp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.3.0 (GHSA-pqhp-25j4-6hq9) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.3.0 (GHSA-v3rj-xjv7-4jmq) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.8.1 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
High-entropy string (6.04 bits/char) in poe-platform-poe-code-a69096b/packages/tiny-oauth-test-server/src/index.test.ts:620 entropy_analyzer · 55%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/toolcraft-openapi/src/http.ts:743 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/toolcraft-openapi/src/http.ts:769 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/tiny-stdio-mcp-server/src/server.ts:1173 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/tiny-stdio-mcp-server/src/content/file.ts:91 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/terminal-png/src/renderers.test.ts:251 entropy_analyzer · 75%
info
Tool: empty manifest_parser · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/auth-store/src/encrypted-file-store.ts:109 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/auth-store/src/encrypted-file-store.ts:110 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/auth-store/src/encrypted-file-store.ts:111 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/auth-store/src/auth-store.test.ts:271 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/auth-store/src/auth-store.test.ts:272 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/superintendent/src/mcp.ts:219 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/superintendent/src/mcp.ts:260 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/superintendent/src/runtime/run-superintendent.test.ts:353 entropy_analyzer · 75%
medium
Buffer.from base64 in poe-platform-poe-code-a69096b/packages/superintendent/src/runtime/run-owner-review.test.ts:404 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in poe-platform-poe-code-a69096b/packages/toolcraft/src/mcp-proxy.test.ts:42 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: lookup manifest_parser · 70%
info
Tool: bad_output manifest_parser · 70%
info
Tool: bad_envelope manifest_parser · 70%
info
Tool: word_of_the_day manifest_parser · 90%
info
Tool: list_pages manifest_parser · 70%
info
Tool: read_page manifest_parser · 70%
info
Tool: search_memory manifest_parser · 70%
info
Tool: status manifest_parser · 70%
info
Tool: append_to_page manifest_parser · 70%
info
Tool: test manifest_parser · 70%
info
Tool: dynamic manifest_parser · 70%
info
Tool: echo manifest_parser · 70%
info
Tool: greet manifest_parser · 75%
info
Tool: missing manifest_parser · 75%
info
Tool: fail manifest_parser · 75%
info
Tool: invalid manifest_parser · 75%
info
Tool: validated manifest_parser · 75%
info
Tool: malformed manifest_parser · 75%
info
Tool: hang manifest_parser · 75%
info
Tool: fast manifest_parser · 75%
info
Tool: slow manifest_parser · 75%
info
Tool: test-server manifest_parser · 75%
info
Tool: noop manifest_parser · 75%
info
Tool: structured manifest_parser · 75%
info
Tool: add manifest_parser · 75%
info
Tool: reject manifest_parser · 75%
info
Tool: syncFail manifest_parser · 75%
info
Tool: multi manifest_parser · 75%
info
Tool: many manifest_parser · 75%
info
Tool: single manifest_parser · 75%
info
Tool: counter manifest_parser · 75%
info
Tool: tool1 manifest_parser · 75%
info
Tool: delay manifest_parser · 75%
info
Tool: sync manifest_parser · 75%
info
Tool: long manifest_parser · 75%
info
Tool: tool manifest_parser · 70%
info
Tool: search manifest_parser · 75%
info
Tool: bad-input manifest_parser · 75%
info
Tool: duplicate-tool manifest_parser · 75%
info
Tool: duplicate manifest_parser · 75%
info
Tool: duplicate-features manifest_parser · 75%
info
Tool: prompt manifest_parser · 75%
info
Tool: caesar_cipher_encrypt manifest_parser · 70%
info
Tool: notify_during_call manifest_parser · 70%
info
Tool: typed_profile manifest_parser · 70%
info
Tool: invalid_typed_profile manifest_parser · 70%
info
Tool: dynamic_add manifest_parser · 70%
info
Tool: conformance-test-server manifest_parser · 75%
info
Tool: oauth-http-server manifest_parser · 75%
info
Tool: sometimes-hangs manifest_parser · 75%
info
Tool: repo manifest_parser · 75%
info
Tool: repo-default manifest_parser · 75%
info
Tool: sync-tool manifest_parser · 90%
info
Tool: async-tool manifest_parser · 90%
info
Tool: sync-throw manifest_parser · 90%
info
Tool: async-throw manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (89) manifest_parser · 80%
medium
Hardcoded OAuth client ID in poe-platform-poe-code-a69096b/packages/opencode-poe-auth/src/poe-auth-plugin.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in poe-platform-poe-code-a69096b/packages/opencode-poe-auth/src/poe-auth-plugin.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in poe-platform-poe-code-a69096b/packages/tiny-http-mcp-oauth-test-server/src/index.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in poe-platform-poe-code-a69096b/packages/tiny-http-mcp-oauth-test-server/src/inspector-smoke.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in poe-platform-poe-code-a69096b/src/cli/oauth-login.ts oauth_scope_analyzer · 80%
high
High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 691 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%