← Back to search

@transcend-io/mcp-server-admin

GitHub Actions Scanned 20d ago

Transcend MCP Server — unified server with all domain tools.

C
65.4 / 100

Versions

0.4.11latest
Jul 22, 2026
0.4.10
Jul 21, 2026
0.4.9
Jul 15, 2026
0.4.8
Jul 10, 2026
0.4.7
Jul 10, 2026
+ show 29 moreshow less
0.4.6
Jul 9, 2026
0.4.5
Jul 9, 2026
0.4.4
Jul 9, 2026
0.4.3
Jul 9, 2026
0.4.2
Jul 7, 2026
0.4.1
Jul 2, 2026
0.4.0
Jul 1, 2026
0.3.19
Jun 29, 2026
0.3.18
Jun 29, 2026
0.3.17
Jun 26, 2026
0.3.16
Jun 24, 2026
0.3.15
Jun 17, 2026
0.3.14
Jun 17, 2026
0.3.13
Jun 15, 2026
0.3.12
Jun 12, 2026
0.3.11
Jun 11, 2026
0.2.13
first seen Jun 6, 2026
0.3.10
Jun 5, 2026
0.2.10
first seen Jun 5, 2026
0.3.7
May 14, 2026
0.3.6
May 12, 2026
0.3.5
May 11, 2026
0.3.4
May 8, 2026
0.3.3
May 7, 2026
0.3.2
May 4, 2026
0.3.1
Apr 29, 2026
0.3.0
Apr 27, 2026
0.2.0
Apr 23, 2026
0.1.0
Apr 22, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 107

docs_fetch_usage
annotations: none low

discovery_list_plugins
annotations: verified low

List the integration types in use in your organization, derived from the distinct

readOnlyHint true idempotentHint true destructiveHint false
discovery_classify_text
annotations: verified low

Classify text content using Transcend's LLM classifier to identify data categories. Requires at least one category label.

readOnlyHint true idempotentHint true destructiveHint false
discovery_list_scans
annotations: verified low

List data silos as classification scan records. Each row describes a silo rather than

readOnlyHint true idempotentHint true destructiveHint false
discovery_ner_extract
annotations: verified low

Extract named entities (PII, organizations, locations, etc.) from text using NER. Requires at least one entity type label.

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_processing_purposes
annotations: verified low

List processing purpose subcategories from the Processing Purposes table in Data Inventory.

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_data_subjects
annotations: verified low

List data subject types configured for the organization. Use `id` values with

readOnlyHint true idempotentHint true destructiveHint false
inventory_get_data_silo
annotations: verified low

Get detailed information about a specific data silo (Data Systems row): vendor link,

readOnlyHint true idempotentHint true destructiveHint false
inventory_write_data_silo
annotations: verified low

Create or update a data silo (Data Systems table). Pass `dataSiloId` to update by ID, or

readOnlyHint false idempotentHint false destructiveHint false
inventory_write_vendor
annotations: verified low

Create or update a vendor in the Vendors table. Pass `vendorId` to update by ID, or `title`

readOnlyHint false idempotentHint true destructiveHint false
inventory_write_category
annotations: verified low

Create or update a data subcategory in the Data Categories table.

readOnlyHint false idempotentHint true destructiveHint false
inventory_list_categories
annotations: verified low

List data category subcategories (PII types) from the Data Categories table.

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_sub_data_points
annotations: verified low

List sub-data points (individual data fields) for a specific data point, including

readOnlyHint true idempotentHint true destructiveHint false
inventory_update_or_create_data_point
annotations: verified low

Create or update a datapoint (and its fields / sub-data points) on a data silo.

readOnlyHint false idempotentHint true destructiveHint false
inventory_analyze
annotations: verified low

Analyze your data inventory including data silos by type, vendor distribution, and data point coverage

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_data_silos
annotations: verified low

List data silos (data systems and integrations) in your organization.

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_catalog_integrations
annotations: verified low

Search the Transcend integration catalog for valid `integrationName` values to pass to

readOnlyHint true idempotentHint true destructiveHint false
inventory_write_processing_purpose
annotations: verified low

Create or update a processing purpose subcategory in the Processing Purposes table.

readOnlyHint false idempotentHint true destructiveHint false
inventory_list_vendors
annotations: verified low

List vendors (third-party data processors) with contact, website, DPA link, address,

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_business_entities
annotations: verified low

List business entities from Data Inventory. Use `title` values with

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_identifiers
annotations: verified low

List identifier types (email, user ID, etc.) configured in your organization.

readOnlyHint true idempotentHint true destructiveHint false
docs_list
annotations: verified low

List or full-text search Transcend documentation. With query, ranks articles by title

readOnlyHint true idempotentHint true destructiveHint false
docs_fetch
annotations: verified low

Fetch full markdown content for a Transcend documentation article by URL.

readOnlyHint true idempotentHint true destructiveHint false
assessments_list_templates
annotations: verified low

List the blank assessment templates. Only `PUBLISHED` ones can build new assessments.

readOnlyHint true idempotentHint true destructiveHint false
assessments_list
annotations: verified low

List all assessments in your organization.

readOnlyHint true idempotentHint true destructiveHint false
policy_get_templates
annotations: verified low

List Policy Engine starter templates (no args) or return scaffold files (templateId).

readOnlyHint true idempotentHint true destructiveHint false
policy_publish
annotations: verified low

Upload an inert Policy Engine version from files (in-memory map) or dir.

readOnlyHint false idempotentHint false destructiveHint false
dsr_list_pending_requests
annotations: verified low

List outstanding ACCESS or ERASURE jobs waiting on one data silo (integration), oldest first.

readOnlyHint true idempotentHint true destructiveHint false
dsr_poll_status
annotations: verified low

Poll the current status of a Data Subject Request

readOnlyHint true idempotentHint true destructiveHint false
dsr_enrich_identifiers
annotations: verified low

Enrich a Data Subject Request with additional identifiers during preflight. Prefer a

readOnlyHint false idempotentHint false destructiveHint true
inventory_list_data_points
annotations: verified low

List data points (collections of personal data). Pass `dataSiloId` to scope to one

readOnlyHint true idempotentHint true destructiveHint false
admin_get_privacy_center
annotations: verified low

Get privacy center configuration for your organization

readOnlyHint true idempotentHint true destructiveHint false
test_docs_list
annotations: verified low

List or full-text search documentation articles.

reason string keyword string section string requestId string zodSchema object
readOnlyHint true idempotentHint true destructiveHint false
test_ping
annotations: verified low

Answer with a fixed payload, taking no arguments whatsoever.

reason string requestId string zodSchema object
readOnlyHint true idempotentHint true destructiveHint false
test_dsr_cancel
annotations: verified low

Cancel a data subject request, once a human has agreed to it.

reason string requestId string zodSchema object
readOnlyHint false idempotentHint false destructiveHint true
greet_refresh
annotations: verified low

Refresh the greeting payload for the greet view.

zodSchema object
readOnlyHint true idempotentHint true destructiveHint false
test_greet_refresh
annotations: verified low

Refresh the greeting for the test_greet view.

zodSchema object
readOnlyHint true idempotentHint true destructiveHint false
test_cancel
annotations: verified low

Cancel something, but only once a human has agreed to it.

readOnlyHint false idempotentHint false destructiveHint true
test_read
annotations: verified low

Read something harmless that needs no approval at all.

zodSchema object
readOnlyHint true idempotentHint true destructiveHint false
test_silent
annotations: verified low

A gated tool that never says what the user would be agreeing to.

zodSchema string
readOnlyHint false idempotentHint false destructiveHint true
test_collides
annotations: verified low

A gated tool that already spends the name the gate needs for itself.

zodSchema string
readOnlyHint false idempotentHint false destructiveHint true
test_bad
annotations: verified low

A gated tool whose input cannot carry the approval token.

zodSchema string
readOnlyHint false idempotentHint false destructiveHint true
stable_echo
annotations: verified low

Stable tool always registered

zodSchema object
readOnlyHint true idempotentHint true destructiveHint false
experimental_echo
annotations: verified low

Experimental tool gated by env

zodSchema object
readOnlyHint true idempotentHint true destructiveHint false
custom_functions_promote_version
annotations: verified low

Promote a draft Custom Function version to active. Does not run tests; returns

readOnlyHint false idempotentHint true destructiveHint true
custom_functions_test_run
annotations: verified low

Test a Custom Function (saved or unsaved TypeScript). Pass { id } alone for the stored

readOnlyHint false idempotentHint false destructiveHint false
custom_functions_get_code
annotations: verified low

Load plaintext TypeScript and runtime context for editing. Sensitive: userDefinedEnv may

readOnlyHint true idempotentHint true destructiveHint false
custom_functions_upsert
annotations: verified low

Create or update a Custom Function from plaintext TypeScript. Save does not require a

readOnlyHint false idempotentHint false destructiveHint false
custom_functions_list
annotations: verified low

List Custom Functions (lifecycle, gateway, silo, versions). Search with text; check

readOnlyHint true idempotentHint true destructiveHint false
admin_get_current_user
annotations: verified low

Get information about the currently authenticated user (the API key owner)

readOnlyHint true idempotentHint true destructiveHint false
admin_get_organization
annotations: verified low

Get information about your Transcend organization

readOnlyHint true idempotentHint true destructiveHint false
admin_list_api_keys
annotations: verified low

List all API keys configured for your organization (tokens are not shown).

readOnlyHint true idempotentHint true destructiveHint false
admin_list_scopes
annotations: verified low

List valid ScopeName values for API keys and user permissions. Default rows are compact

readOnlyHint true idempotentHint true destructiveHint false
admin_list_users
annotations: verified low

List users in your Transcend organization with the same filters as Administration → Users.

readOnlyHint true idempotentHint true destructiveHint false
admin_test_connection
annotations: verified low

Test connectivity to both Transcend REST and GraphQL APIs

readOnlyHint true idempotentHint true destructiveHint false
admin_list_teams
annotations: verified low

List all teams in your Transcend organization.

readOnlyHint true idempotentHint true destructiveHint false
assessments_update_assignees
annotations: verified low

Assign internal users (by ID) or external users (by email) to an assessment form. This also transitions DRAFT assessments to SHARED status.

readOnlyHint false idempotentHint true destructiveHint false
assessments_prefill
annotations: verified low

Create an assessment form, fill in the answers you supply, and assign it for review in

readOnlyHint false idempotentHint false destructiveHint false
assessments_create_template
annotations: verified low

Create a new assessment form template with sections and questions inline.

readOnlyHint false idempotentHint false destructiveHint false
assessments_create
annotations: verified low

Create a new privacy assessment inside an assessment group, resolved by name through

readOnlyHint false idempotentHint false destructiveHint false
assessments_write_comment
annotations: verified low

Leave, reply to, edit, or resolve reviewer feedback on an assessment — form, section,

readOnlyHint false idempotentHint false destructiveHint false
assessments_add_section
annotations: verified low

Add a new section (with optional inline questions) to an existing assessment form template.

readOnlyHint false idempotentHint false destructiveHint false
assessments_get
annotations: verified low

Read one filled-in assessment and the answers submitted to it. Given only assessmentId

readOnlyHint true idempotentHint true destructiveHint false
assessments_list_comments
annotations: verified low

Read the reviewer feedback on one assessment — the comments left on it during review.

readOnlyHint true idempotentHint true destructiveHint false
assessments_answer_question
annotations: verified low

Answer an assessment question by selecting existing answer options or providing free-text values. For SINGLE_SELECT/MULTI_SELECT questions, provide assessmentAnswerIds from the answerOptions. For SHORT_ANSWER_TEXT/LONG_ANSWER_TEXT, provide assessmentAnswerValues with {value, isUserCreated: true}.

readOnlyHint false idempotentHint true destructiveHint false
assessments_update
annotations: verified low

Update an existing assessment.

readOnlyHint false idempotentHint true destructiveHint false
assessments_export_template
annotations: verified low

Export a full assessment form template as JSON, including all sections, questions, answer options,

readOnlyHint true idempotentHint true destructiveHint false
assessments_submit_response
annotations: verified low

Submit an assessment form for review. Optionally specify which sections to submit. This

readOnlyHint false idempotentHint false destructiveHint true
assessments_create_group
annotations: verified low

Create a new assessment group linked to a template. Assessment groups are containers for

readOnlyHint false idempotentHint false destructiveHint false
assessments_list_groups
annotations: verified low

List all assessment groups. Groups are containers for assessments and are linked to

readOnlyHint true idempotentHint true destructiveHint false
preferences_upsert
annotations: verified low

Batch upsert consent preference records for multiple users.

readOnlyHint false idempotentHint true destructiveHint false
preferences_update_identifiers
annotations: verified low

Rewrite an existing identifier value in place, moving its consent history onto the

readOnlyHint false idempotentHint true destructiveHint true
preferences_delete_identifiers
annotations: verified low

Remove one identifier from a preference record, keeping the record and its remaining

readOnlyHint false idempotentHint false destructiveHint true
preferences_delete
annotations: verified low

Delete consent preferences for specified users

readOnlyHint false idempotentHint false destructiveHint true
preferences_append_identifiers
annotations: verified low

Add another identifier that resolves to an existing preference record.

readOnlyHint false idempotentHint false destructiveHint false
preferences_list_partitions
annotations: verified low

List Preference Store partition keys for this organization: the default airgap-bundle

readOnlyHint true idempotentHint true destructiveHint false
preferences_query
annotations: verified low

Query consent preferences for multiple users by their identifiers

readOnlyHint true idempotentHint true destructiveHint false
workflows_update_config
annotations: verified low

Update the configuration for a workflow. Supported fields: title, subtitle, description.

readOnlyHint false idempotentHint true destructiveHint false
workflows_list_email_templates
annotations: verified low

List all email templates used in workflows and communications.

readOnlyHint true idempotentHint true destructiveHint false
workflows_list
annotations: verified low

List workflow configs in your organization. Use each returned `id` as `workflowConfigId`

readOnlyHint true idempotentHint true destructiveHint false
policy_set_live
annotations: verified low

Explicit go-live or take-offline step after policy_publish.

readOnlyHint false idempotentHint false destructiveHint true
policy_list_bundles
annotations: verified low

Discover Policy Engine bundles, version history, and download URLs.

readOnlyHint true idempotentHint true destructiveHint false
dsr_analyze
annotations: verified low

Summarize the 100 most recent DSRs: counts by type and status, completion rate, and a configurable recent-days window (default 30). For full-fleet analytics, page through dsr_list and aggregate yourself.

readOnlyHint true idempotentHint true destructiveHint false
dsr_cancel
annotations: verified low

Cancel a Data Subject Request

readOnlyHint false idempotentHint false destructiveHint true
dsr_list_identifiers
annotations: verified low

List decrypted identifiers attached to a Data Subject Request.

readOnlyHint true idempotentHint true destructiveHint false
dsr_list_request_data_silos
annotations: verified low

List connected data systems (request data silos) for a Data Subject Request, including each

readOnlyHint true idempotentHint true destructiveHint false
dsr_submit
annotations: verified low

Submit a Data Subject Request via customer-ingress REST bulk create

readOnlyHint false idempotentHint false destructiveHint true
dsr_list
annotations: verified low

List Data Subject Requests with assigned owners and teams.

readOnlyHint true idempotentHint true destructiveHint false
dsr_get_details
annotations: verified low

Get detailed information about a specific Data Subject Request, including assigned request

readOnlyHint true idempotentHint true destructiveHint false
consent_get_preferences
annotations: verified low

Get consent preferences for a specific user/identifier

readOnlyHint true idempotentHint true destructiveHint false
consent_delete_cookies
annotations: verified low

Permanently delete one or more cookies by ID. Irreversible — prefer

readOnlyHint false idempotentHint false destructiveHint true
consent_update_data_flows
annotations: verified low

Update one or more data flows. Use to approve (status=LIVE), junk (isJunk=true),

readOnlyHint false idempotentHint true destructiveHint true
consent_get_timeseries_analytics
annotations: verified low

Query timeseries consent analytics via airgapBundleTimeseriesAnalytics.

readOnlyHint true idempotentHint true destructiveHint false
consent_get_analytics_data
annotations: verified low

Query consent metrics via the analyticsData GraphQL query.

readOnlyHint true idempotentHint true destructiveHint false
consent_list_airgap_bundles
annotations: verified low

Get the consent manager (airgap bundle) configured for your organization.

readOnlyHint true idempotentHint true destructiveHint false
consent_get_aggregate_analytics
annotations: verified low

Query aggregate consent analytics via airgapBundleAggregateAnalytics.

readOnlyHint true idempotentHint true destructiveHint false
consent_delete_data_flows
annotations: verified low

Permanently delete one or more data flows by ID. Irreversible — prefer

readOnlyHint false idempotentHint false destructiveHint true
consent_update_cookies
annotations: verified low

Update one or more cookies. Use to approve (status=LIVE), junk (isJunk=true),

readOnlyHint false idempotentHint true destructiveHint true
consent_list_cookies
annotations: verified low

List cookies in your consent manager.

readOnlyHint true idempotentHint true destructiveHint false
consent_bulk_triage
annotations: verified low

Bulk triage action: approve or junk multiple cookies and data flows in a single call.

readOnlyHint false idempotentHint false destructiveHint true
consent_list_data_flows
annotations: verified low

List data flows (network requests) in your consent manager.

readOnlyHint true idempotentHint true destructiveHint false
consent_list_purposes
annotations: verified low

List all tracking purposes configured for consent management.

readOnlyHint true idempotentHint true destructiveHint false
consent_list_roc_records
annotations: verified low

List all ROC records for a given user in a partition.

readOnlyHint true idempotentHint true destructiveHint false
consent_list_regimes
annotations: verified low

List all consent experiences (regional regimes) configured for your organization.

readOnlyHint true idempotentHint true destructiveHint false
${toolName}
annotations: verified low

TODO: what this returns, and when the model should call it.

readOnlyHint true idempotentHint true destructiveHint false
example_hello_app_refresh
annotations: verified low

Re-read the greeting payload for the example_hello_app view.

readOnlyHint true idempotentHint true destructiveHint false
example_consequential
annotations: verified low

Pretend to permanently delete a record, after asking the user to confirm. Demonstrates

readOnlyHint false idempotentHint false destructiveHint true

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 301

low
Tool 'docs_fetch_usage' has no annotations annotation_checker · 100%
info
Tool 'discovery_list_plugins' annotations are consistent annotation_checker · 80%
info
Tool 'discovery_classify_text' annotations are consistent annotation_checker · 80%
info
Tool 'discovery_list_scans' annotations are consistent annotation_checker · 80%
info
Tool 'discovery_ner_extract' annotations are consistent annotation_checker · 80%
info
Tool 'test_docs_list' annotations are consistent annotation_checker · 80%
info
Tool 'test_ping' annotations are consistent annotation_checker · 80%
info
Tool 'test_dsr_cancel' annotations are consistent annotation_checker · 80%
info
Tool 'greet_refresh' annotations are consistent annotation_checker · 80%
info
Tool 'test_greet_refresh' annotations are consistent annotation_checker · 80%
info
Tool 'test_cancel' annotations are consistent annotation_checker · 80%
info
Tool 'test_read' annotations are consistent annotation_checker · 80%
info
Tool 'test_silent' annotations are consistent annotation_checker · 80%
info
Tool 'test_collides' annotations are consistent annotation_checker · 80%
info
Tool 'test_bad' annotations are consistent annotation_checker · 80%
info
Tool 'stable_echo' annotations are consistent annotation_checker · 80%
info
Tool 'experimental_echo' annotations are consistent annotation_checker · 80%
info
Tool 'custom_functions_promote_version' annotations are consistent annotation_checker · 80%
info
Tool 'custom_functions_test_run' annotations are consistent annotation_checker · 80%
info
Tool 'custom_functions_get_code' annotations are consistent annotation_checker · 80%
info
Tool 'custom_functions_upsert' annotations are consistent annotation_checker · 80%
info
Tool 'custom_functions_list' annotations are consistent annotation_checker · 80%
info
Tool 'admin_get_current_user' annotations are consistent annotation_checker · 80%
info
Tool 'admin_get_organization' annotations are consistent annotation_checker · 80%
info
Tool 'admin_list_api_keys' annotations are consistent annotation_checker · 80%
info
Tool 'admin_list_scopes' annotations are consistent annotation_checker · 80%
info
Tool 'admin_list_users' annotations are consistent annotation_checker · 80%
info
Tool 'admin_test_connection' annotations are consistent annotation_checker · 80%
info
Tool 'admin_list_teams' annotations are consistent annotation_checker · 80%
info
Tool 'admin_get_privacy_center' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_data_points' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_processing_purposes' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_data_subjects' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_get_data_silo' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_write_data_silo' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_write_vendor' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_write_category' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_categories' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_sub_data_points' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_update_or_create_data_point' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_analyze' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_data_silos' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_catalog_integrations' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_write_processing_purpose' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_vendors' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_business_entities' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'docs_list' annotations are consistent annotation_checker · 80%
info
Tool 'docs_fetch' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_list_templates' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_list' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_update_assignees' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_prefill' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_create_template' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_create' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_write_comment' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_add_section' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_get' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_list_comments' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_answer_question' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_update' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_export_template' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_submit_response' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_create_group' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_list_groups' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_upsert' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_update_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_delete_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_delete' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_append_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_list_partitions' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_query' annotations are consistent annotation_checker · 80%
info
Tool 'workflows_update_config' annotations are consistent annotation_checker · 80%
info
Tool 'workflows_list_email_templates' annotations are consistent annotation_checker · 80%
info
Tool 'workflows_list' annotations are consistent annotation_checker · 80%
info
Tool 'policy_set_live' annotations are consistent annotation_checker · 80%
info
Tool 'policy_list_bundles' annotations are consistent annotation_checker · 80%
info
Tool 'policy_get_templates' annotations are consistent annotation_checker · 80%
info
Tool 'policy_publish' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_list_pending_requests' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_poll_status' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_enrich_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_analyze' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_cancel' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_list_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_list_request_data_silos' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_submit' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_list' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_get_details' annotations are consistent annotation_checker · 80%
info
Tool 'consent_get_preferences' annotations are consistent annotation_checker · 80%
info
Tool 'consent_delete_cookies' annotations are consistent annotation_checker · 80%
info
Tool 'consent_update_data_flows' annotations are consistent annotation_checker · 80%
info
Tool 'consent_get_timeseries_analytics' annotations are consistent annotation_checker · 80%
info
Tool 'consent_get_analytics_data' annotations are consistent annotation_checker · 80%
info
Tool 'consent_list_airgap_bundles' annotations are consistent annotation_checker · 80%
info
Tool 'consent_get_aggregate_analytics' annotations are consistent annotation_checker · 80%
info
Tool 'consent_delete_data_flows' annotations are consistent annotation_checker · 80%
info
Tool 'consent_update_cookies' annotations are consistent annotation_checker · 80%
info
Tool 'consent_list_cookies' annotations are consistent annotation_checker · 80%
info
Tool 'consent_bulk_triage' annotations are consistent annotation_checker · 80%
info
Tool 'consent_list_data_flows' annotations are consistent annotation_checker · 80%
info
Tool 'consent_list_purposes' annotations are consistent annotation_checker · 80%
info
Tool 'consent_list_roc_records' annotations are consistent annotation_checker · 80%
info
Tool 'consent_list_regimes' annotations are consistent annotation_checker · 80%
info
Tool '${toolName}' annotations are consistent annotation_checker · 80%
info
Tool 'example_hello_app_refresh' annotations are consistent annotation_checker · 80%
info
Tool 'example_consequential' annotations are consistent annotation_checker · 80%
high
Hardcoded OAuth client secret in transcend-io-tools-f02f57e/packages/mcp/mcp-server-base/tests/oauth-token-refresh.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in transcend-io-tools-f02f57e/packages/mcp/mcp-server-base/tests/oauth-token-exchange.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in transcend-io-tools-f02f57e/packages/mcp/mcp-server-base/tests/oauth-client-verify.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 172 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: lodash-es dependency_analyzer · 60%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: turbo@catalog: (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-353f-5xf4-qw67) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-c27g-q93r-2cwf) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-mv48-hcvh-8jj8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@catalog: (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@catalog: (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@catalog: (GHSA-v88g-cgmw-v5xw) dependency_analyzer · 95%
medium
Vulnerable dependency: csv-parse@7.0.0 (GHSA-8cw4-87c7-c6xx) dependency_analyzer · 95%
medium
Vulnerable dependency: diff@catalog: (GHSA-73rr-hh4g-fpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: diff@catalog: (GHSA-h6ch-v84p-w6p9) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-2883-xcg3-v3hh) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-mh29-5h37-fv8m) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-f23m-r3pf-42rh) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-r5fr-rjxr-66jc) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-xxjr-mmjv-4gpg) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog: (GHSA-35jh-r3h4-6jhm) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog: (GHSA-4xc9-xhrj-v574) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog: (GHSA-f23m-r3pf-42rh) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog: (GHSA-fvqr-27wr-82fm) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog: (GHSA-jf85-cpcp-j695) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@catalog: (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: dd-trace@2.45.1 (GHSA-wxqq-gcq8-c443) dependency_analyzer · 95%
medium
Vulnerable dependency: sequelize@6.37.3 (GHSA-6457-6jrx-69cr) dependency_analyzer · 95%
medium
Vulnerable dependency: sequelize@6.37.3 (GHSA-v8fg-2rw7-q452) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@14.0.1 (PYSEC-2024-161) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-3ww4-gg4f-jr7f) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-537c-gmf6-5ccf) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-6vqw-3v5j-54x4) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-9v9h-cgj8-h64p) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-h4gh-qq45-vh27) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-m959-cc7f-wv43) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-r6ph-v2qm-q3c2) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2024-225) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-1283) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-1285) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-2141) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-35) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-3553) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-3554) dependency_analyzer · 95%
medium
Buffer.from base64 in transcend-io-tools-f02f57e/packages/mcp/mcp-server-custom-functions/tests/custom-functions.test.ts:531 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-f02f57e/packages/mcp/mcp-server-custom-functions/tests/custom-functions.test.ts:571 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-f02f57e/packages/mcp/mcp-server-custom-functions/tests/custom-functions.test.ts:671 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-f02f57e/packages/mcp/mcp-server-preferences/src/tools/preferences_query.ts:28 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-f02f57e/packages/cli/src/lib/consent-manager/createConsentToken.ts:20 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-f02f57e/packages/cli/src/lib/consent-manager/createConsentToken.ts:21 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-f02f57e/packages/cli/src/lib/custom-functions/tests/local-simulator.test.ts:122 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in transcend-io-tools-f02f57e/packages/cli/src/commands/admin/generate-api-keys/readme.ts:107 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in transcend-io-tools-f02f57e/packages/cli/src/commands/admin/generate-api-keys/readme.ts:111 entropy_analyzer · 70%
medium
Buffer.from base64 in transcend-io-tools-f02f57e/packages/sdk/src/custom-functions/codeSigning.ts:105 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-f02f57e/packages/sdk/src/custom-functions/tests/syncCustomFunctionDsrIntegration.test.ts:179 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-f02f57e/packages/sdk/src/custom-functions/tests/syncCustomFunctionDsrIntegration.test.ts:314 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-f02f57e/packages/sdk/src/custom-functions/tests/syncCustomFunctionDsrIntegration.test.ts:344 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: docs_fetch_usage manifest_parser · 75%
info
Tool: discovery_list_plugins manifest_parser · 75%
info
Tool: discovery_classify_text manifest_parser · 75%
info
Tool: discovery_list_scans manifest_parser · 75%
info
Tool: discovery_ner_extract manifest_parser · 75%
info
Tool: test_docs_list manifest_parser · 75%
info
Tool: test_ping manifest_parser · 75%
info
Tool: test_dsr_cancel manifest_parser · 75%
info
Tool: greet_refresh manifest_parser · 75%
info
Tool: test_greet_refresh manifest_parser · 75%
info
Tool: test_cancel manifest_parser · 75%
info
Tool: test_read manifest_parser · 75%
info
Tool: test_silent manifest_parser · 75%
info
Tool: test_collides manifest_parser · 75%
info
Tool: test_bad manifest_parser · 75%
info
Tool: stable_echo manifest_parser · 75%
info
Tool: experimental_echo manifest_parser · 75%
info
Tool: custom_functions_promote_version manifest_parser · 75%
info
Tool: custom_functions_test_run manifest_parser · 75%
info
Tool: custom_functions_get_code manifest_parser · 75%
info
Tool: custom_functions_upsert manifest_parser · 75%
info
Tool: custom_functions_list manifest_parser · 75%
info
Tool: admin_get_current_user manifest_parser · 75%
info
Tool: admin_get_organization manifest_parser · 75%
info
Tool: admin_list_api_keys manifest_parser · 75%
info
Tool: admin_list_scopes manifest_parser · 75%
info
Tool: admin_list_users manifest_parser · 75%
info
Tool: admin_test_connection manifest_parser · 75%
info
Tool: admin_list_teams manifest_parser · 75%
info
Tool: admin_get_privacy_center manifest_parser · 75%
info
Tool: inventory_list_data_points manifest_parser · 75%
info
Tool: inventory_list_processing_purposes manifest_parser · 75%
info
Tool: inventory_list_data_subjects manifest_parser · 75%
info
Tool: inventory_get_data_silo manifest_parser · 75%
info
Tool: inventory_write_data_silo manifest_parser · 75%
info
Tool: inventory_write_vendor manifest_parser · 75%
info
Tool: inventory_write_category manifest_parser · 75%
info
Tool: inventory_list_categories manifest_parser · 75%
info
Tool: inventory_list_sub_data_points manifest_parser · 75%
info
Tool: inventory_update_or_create_data_point manifest_parser · 75%
info
Tool: inventory_analyze manifest_parser · 75%
info
Tool: inventory_list_data_silos manifest_parser · 75%
info
Tool: inventory_list_catalog_integrations manifest_parser · 75%
info
Tool: inventory_write_processing_purpose manifest_parser · 75%
info
Tool: inventory_list_vendors manifest_parser · 75%
info
Tool: inventory_list_business_entities manifest_parser · 75%
info
Tool: inventory_list_identifiers manifest_parser · 75%
info
Tool: docs_list manifest_parser · 75%
info
Tool: docs_fetch manifest_parser · 75%
info
Tool: assessments_list_templates manifest_parser · 75%
info
Tool: assessments_list manifest_parser · 75%
info
Tool: assessments_update_assignees manifest_parser · 75%
info
Tool: assessments_prefill manifest_parser · 75%
info
Tool: assessments_create_template manifest_parser · 75%
info
Tool: assessments_create manifest_parser · 75%
info
Tool: assessments_write_comment manifest_parser · 75%
info
Tool: assessments_add_section manifest_parser · 75%
info
Tool: assessments_get manifest_parser · 75%
info
Tool: assessments_list_comments manifest_parser · 75%
info
Tool: assessments_answer_question manifest_parser · 75%
info
Tool: assessments_update manifest_parser · 75%
info
Tool: assessments_export_template manifest_parser · 75%
info
Tool: assessments_submit_response manifest_parser · 75%
info
Tool: assessments_create_group manifest_parser · 75%
info
Tool: assessments_list_groups manifest_parser · 75%
info
Tool: preferences_upsert manifest_parser · 75%
info
Tool: preferences_update_identifiers manifest_parser · 75%
info
Tool: preferences_delete_identifiers manifest_parser · 75%
info
Tool: preferences_delete manifest_parser · 75%
info
Tool: preferences_append_identifiers manifest_parser · 75%
info
Tool: preferences_list_partitions manifest_parser · 75%
info
Tool: preferences_query manifest_parser · 75%
info
Tool: workflows_update_config manifest_parser · 75%
info
Tool: workflows_list_email_templates manifest_parser · 75%
info
Tool: workflows_list manifest_parser · 75%
info
Tool: policy_set_live manifest_parser · 75%
info
Tool: policy_list_bundles manifest_parser · 75%
info
Tool: policy_get_templates manifest_parser · 75%
info
Tool: policy_publish manifest_parser · 75%
info
Tool: dsr_list_pending_requests manifest_parser · 75%
info
Tool: dsr_poll_status manifest_parser · 75%
info
Tool: dsr_enrich_identifiers manifest_parser · 75%
info
Tool: dsr_analyze manifest_parser · 75%
info
Tool: dsr_cancel manifest_parser · 75%
info
Tool: dsr_list_identifiers manifest_parser · 75%
info
Tool: dsr_list_request_data_silos manifest_parser · 75%
info
Tool: dsr_submit manifest_parser · 75%
info
Tool: dsr_list manifest_parser · 75%
info
Tool: dsr_get_details manifest_parser · 75%
info
Tool: consent_get_preferences manifest_parser · 75%
info
Tool: consent_delete_cookies manifest_parser · 75%
info
Tool: consent_update_data_flows manifest_parser · 75%
info
Tool: consent_get_timeseries_analytics manifest_parser · 75%
info
Tool: consent_get_analytics_data manifest_parser · 75%
info
Tool: consent_list_airgap_bundles manifest_parser · 75%
info
Tool: consent_get_aggregate_analytics manifest_parser · 75%
info
Tool: consent_delete_data_flows manifest_parser · 75%
info
Tool: consent_update_cookies manifest_parser · 75%
info
Tool: consent_list_cookies manifest_parser · 75%
info
Tool: consent_bulk_triage manifest_parser · 75%
info
Tool: consent_list_data_flows manifest_parser · 75%
info
Tool: consent_list_purposes manifest_parser · 75%
info
Tool: consent_list_roc_records manifest_parser · 75%
info
Tool: consent_list_regimes manifest_parser · 75%
info
Tool: ${toolName} manifest_parser · 75%
info
Tool: example_hello_app_refresh manifest_parser · 75%
info
Tool: example_consequential manifest_parser · 75%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (26) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 123 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%