← Back to search

@transcend-io/mcp-server-admin

GitHub Actions Scanned 3d ago

Transcend MCP Server — unified server with all domain tools.

C
65.4 / 100

Versions

0.4.11latest
Jul 22, 2026
0.4.10
Jul 21, 2026
0.4.9
Jul 15, 2026
0.4.8
Jul 10, 2026
0.4.7
Jul 10, 2026
+ show 29 moreshow less
0.4.6
Jul 9, 2026
0.4.5
Jul 9, 2026
0.4.4
Jul 9, 2026
0.4.3
Jul 9, 2026
0.4.2
Jul 7, 2026
0.4.1
Jul 2, 2026
0.4.0
Jul 1, 2026
0.3.19
Jun 29, 2026
0.3.18
Jun 29, 2026
0.3.17
Jun 26, 2026
0.3.16
Jun 24, 2026
0.3.15
Jun 17, 2026
0.3.14
Jun 17, 2026
0.3.13
Jun 15, 2026
0.3.12
Jun 12, 2026
0.3.11
Jun 11, 2026
0.2.13
first seen Jun 6, 2026
0.3.10
Jun 5, 2026
0.2.10
first seen Jun 5, 2026
0.3.7
May 14, 2026
0.3.6
May 12, 2026
0.3.5
May 11, 2026
0.3.4
May 8, 2026
0.3.3
May 7, 2026
0.3.2
May 4, 2026
0.3.1
Apr 29, 2026
0.3.0
Apr 27, 2026
0.2.0
Apr 23, 2026
0.1.0
Apr 22, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 92

preferences_update_identifiers
annotations: verified low

Update existing identifiers for a user (e.g., when email changes)

readOnlyHint false idempotentHint true destructiveHint true
docs_fetch_usage
annotations: none low

preferences_upsert
annotations: verified low

Batch upsert consent preference records for multiple users

readOnlyHint false idempotentHint true destructiveHint false
preferences_append_identifiers
annotations: verified low

Append additional identifiers to an existing user preference record

readOnlyHint false idempotentHint false destructiveHint false
preferences_delete
annotations: verified low

Delete consent preferences for specified users

readOnlyHint false idempotentHint false destructiveHint true
preferences_delete_identifiers
annotations: verified low

Delete specific identifiers from a user preference record

readOnlyHint false idempotentHint false destructiveHint true
preferences_query
annotations: verified low

Query consent preferences for multiple users by their identifiers

readOnlyHint true idempotentHint true destructiveHint false
docs_fetch
annotations: verified low

Fetch full markdown content for a Transcend documentation article by URL.

readOnlyHint true idempotentHint true destructiveHint false
docs_list
annotations: verified low

List Transcend documentation articles from the public docs index.

readOnlyHint true idempotentHint true destructiveHint false
admin_create_api_key
annotations: verified low

Create a new API key with specified scopes. WARNING: The token is only shown once!

readOnlyHint false idempotentHint false destructiveHint true
admin_list_teams
annotations: verified low

List all teams in your Transcend organization. Note: API does not support cursor pagination (max ~100 results).

readOnlyHint true idempotentHint true destructiveHint false
admin_test_connection
annotations: verified low

Test connectivity to both Transcend REST and GraphQL APIs

readOnlyHint true idempotentHint true destructiveHint false
admin_list_users
annotations: verified low

List users in your Transcend organization with the same filters as Administration → Users.

readOnlyHint true idempotentHint true destructiveHint false
admin_list_scopes
annotations: verified low

List valid ScopeName values for admin_create_api_key. Default rows are compact

readOnlyHint true idempotentHint true destructiveHint false
admin_get_organization
annotations: verified low

Get information about your Transcend organization

readOnlyHint true idempotentHint true destructiveHint false
admin_list_api_keys
annotations: verified low

List all API keys configured for your organization (tokens are not shown). Note: API does not support cursor pagination (max ~100 results).

readOnlyHint true idempotentHint true destructiveHint false
admin_get_privacy_center
annotations: verified low

Get privacy center configuration for your organization

readOnlyHint true idempotentHint true destructiveHint false
admin_get_current_user
annotations: verified low

Get information about the currently authenticated user (the API key owner)

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_business_entities
annotations: verified low

List business entities from Data Inventory. Use `title` values with

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_vendors
annotations: verified low

List vendors (third-party data processors) with contact, website, DPA link, address,

readOnlyHint true idempotentHint true destructiveHint false
inventory_analyze
annotations: verified low

Analyze your data inventory including data silos by type, vendor distribution, and data point coverage

readOnlyHint true idempotentHint true destructiveHint false
inventory_write_vendor
annotations: verified low

Create or update a vendor in the Vendors table. Pass `vendorId` to update by ID, or `title`

readOnlyHint false idempotentHint true destructiveHint false
inventory_list_catalog_integrations
annotations: verified low

Search the Transcend integration catalog for valid `integrationName` values to pass to

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_processing_purposes
annotations: verified low

List processing purpose subcategories from the Processing Purposes table in Data Inventory.

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_data_points
annotations: verified low

List data points (collections of personal data). Pass `dataSiloId` to scope to one

readOnlyHint true idempotentHint true destructiveHint false
inventory_update_or_create_data_point
annotations: verified low

Create or update a datapoint (and its fields / sub-data points) on a data silo.

readOnlyHint false idempotentHint true destructiveHint false
inventory_write_category
annotations: verified low

Create or update a data subcategory in the Data Categories table.

readOnlyHint false idempotentHint true destructiveHint false
inventory_list_categories
annotations: verified low

List data category subcategories (PII types) from the Data Categories table.

readOnlyHint true idempotentHint true destructiveHint false
inventory_get_data_silo
annotations: verified low

Get detailed information about a specific data silo (Data Systems row): vendor link,

readOnlyHint true idempotentHint true destructiveHint false
inventory_write_data_silo
annotations: verified low

Create or update a data silo (Data Systems table). Pass `dataSiloId` to update by ID, or

readOnlyHint false idempotentHint false destructiveHint false
inventory_list_identifiers
annotations: verified low

List identifier types (email, user ID, etc.) configured in your organization. Paginate with `offset` (increment by `limit`) until `hasNextPage` is false; `totalCount` is the full count.

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_data_subjects
annotations: verified low

List data subject types configured for the organization. Use `id` values with

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_sub_data_points
annotations: verified low

List sub-data points (individual data fields) for a specific data point, including

readOnlyHint true idempotentHint true destructiveHint false
inventory_list_data_silos
annotations: verified low

List data silos (data systems and integrations) in your organization.

readOnlyHint true idempotentHint true destructiveHint false
inventory_write_processing_purpose
annotations: verified low

Create or update a processing purpose subcategory in the Processing Purposes table.

readOnlyHint false idempotentHint true destructiveHint false
workflows_list_email_templates
annotations: verified low

List all email templates used in workflows and communications. Note: API does not support cursor pagination (max ~100 results).

readOnlyHint true idempotentHint true destructiveHint false
workflows_list
annotations: verified low

List all workflows configured in your organization. Note: API does not support cursor pagination (max ~100 results).

readOnlyHint true idempotentHint true destructiveHint false
workflows_update_config
annotations: verified low

Update the configuration for a workflow. Supported fields: title, subtitle, description.

readOnlyHint false idempotentHint true destructiveHint false
assessments_prefill
annotations: verified low

Convenience tool: Create a new assessment form, AI-prefill all the answers, and assign it to a reviewer.

readOnlyHint false idempotentHint false destructiveHint false
assessments_list
annotations: verified low

List all privacy assessments in your organization. Supports filtering by status. Each row includes a `url` field with the canonical admin-dashboard link for that assessment — surface those to the user verbatim and do not construct assessment URLs from raw IDs. Note: Cursor pagination is not supported (max 100 results).

readOnlyHint true idempotentHint true destructiveHint false
assessments_create
annotations: verified low

Create a new privacy assessment within an assessment group. Assessment groups are linked to templates. You can provide either an assessmentGroupId directly, or a templateId to auto-resolve the first matching group. Use assessments_list_groups to find available groups. The response includes a `url` field with the canonical admin-dashboard link — surface that to the user verbatim and do not construct assessment URLs from raw IDs.

readOnlyHint false idempotentHint false destructiveHint false
assessments_create_template
annotations: verified low

Create a new assessment form template with sections and questions inline.

readOnlyHint false idempotentHint false destructiveHint false
assessments_list_templates
annotations: verified low

List all available assessment templates. Note: Cursor pagination is not supported by the Transcend API for templates - use limit to control results (max 100).

readOnlyHint true idempotentHint true destructiveHint false
assessments_answer_question
annotations: verified low

Answer an assessment question by selecting existing answer options or providing free-text values. For SINGLE_SELECT/MULTI_SELECT questions, provide assessmentAnswerIds from the answerOptions. For SHORT_ANSWER_TEXT/LONG_ANSWER_TEXT, provide assessmentAnswerValues with {value, isUserCreated: true}.

readOnlyHint false idempotentHint true destructiveHint false
assessments_update_assignees
annotations: verified low

Assign internal users (by ID) or external users (by email) to an assessment form. This also transitions DRAFT assessments to SHARED status.

readOnlyHint false idempotentHint true destructiveHint false
assessments_submit_response
annotations: verified low

Submit an assessment form for review. Optionally specify which sections to submit. This transitions the assessment toward the IN_REVIEW status. The response includes a `url` field pointing at the assessment-group page where reviewers can find the submitted form — surface that to the user verbatim and do not construct assessment URLs from raw IDs.

readOnlyHint false idempotentHint false destructiveHint true
assessments_update
annotations: verified low

Update an existing assessment. The response includes a `url` field with the canonical admin-dashboard link — surface that to the user verbatim and do not construct assessment URLs from raw IDs.

readOnlyHint false idempotentHint true destructiveHint false
assessments_list_groups
annotations: verified low

List all assessment groups. Groups are containers for assessments and are linked to templates. Use this to find the right group ID for creating assessments. Each row includes a `groupUrl` field with the canonical admin-dashboard link — surface those to the user verbatim.

readOnlyHint true idempotentHint true destructiveHint false
assessments_export_template
annotations: verified low

Export a full assessment form template as JSON, including all sections, questions, answer options,

readOnlyHint true idempotentHint true destructiveHint false
assessments_get
annotations: verified low

Get detailed information about a specific assessment including questions and responses. The response includes a `url` field with the canonical admin-dashboard link — surface that to the user verbatim and do not construct assessment URLs from raw IDs.

readOnlyHint true idempotentHint true destructiveHint false
assessments_add_section
annotations: verified low

Add a new section (with optional inline questions) to an existing assessment form template.

readOnlyHint false idempotentHint false destructiveHint false
assessments_create_group
annotations: verified low

Create a new assessment group linked to a template. Assessment groups are containers for assessments. The response includes a `groupUrl` field with the canonical admin-dashboard link to the group — surface that to the user verbatim.

readOnlyHint false idempotentHint false destructiveHint false
discovery_list_plugins
annotations: verified low

List all available discovery plugins (integration types) in your organization.

readOnlyHint true idempotentHint true destructiveHint false
discovery_list_scans
annotations: verified low

List all data classification scans. Returns data silos with classification info.

readOnlyHint true idempotentHint true destructiveHint false
discovery_ner_extract
annotations: verified low

Extract named entities (PII, organizations, locations, etc.) from text using NER

readOnlyHint true idempotentHint true destructiveHint false
discovery_classify_text
annotations: verified low

Classify text content using Transcend's LLM classifier to identify data categories

readOnlyHint true idempotentHint true destructiveHint false
test_cancel
annotations: verified low

Cancel something, but only once a human has agreed to it.

readOnlyHint false idempotentHint false destructiveHint true
test_read
annotations: verified low

Read something harmless that needs no approval at all.

zodSchema object
readOnlyHint true idempotentHint true destructiveHint false
test_silent
annotations: verified low

A gated tool that never says what the user would be agreeing to.

zodSchema string
readOnlyHint false idempotentHint false destructiveHint true
test_collides
annotations: verified low

A gated tool that already spends the name the gate needs for itself.

zodSchema string
readOnlyHint false idempotentHint false destructiveHint true
test_bad
annotations: verified low

A gated tool whose input cannot carry the approval token.

zodSchema string
readOnlyHint false idempotentHint false destructiveHint true
test_greet_refresh
annotations: verified low

Refresh the greeting for the test_greet view.

zodSchema object
readOnlyHint true idempotentHint true destructiveHint false
greet_refresh
annotations: verified low

Refresh the greeting payload for the greet view.

zodSchema object
readOnlyHint true idempotentHint true destructiveHint false
dsr_list
annotations: verified low

List Data Subject Requests with assigned owners and teams.

readOnlyHint true idempotentHint true destructiveHint false
dsr_cancel
annotations: verified low

Cancel a Data Subject Request

readOnlyHint false idempotentHint false destructiveHint true
dsr_submit
annotations: verified low

Submit a Data Subject Request via customer-ingress REST bulk create

readOnlyHint false idempotentHint false destructiveHint true
dsr_analyze
annotations: verified low

Summarize the 100 most recent DSRs: counts by type and status, completion rate, and a configurable recent-days window (default 30). For full-fleet analytics, page through dsr_list and aggregate yourself.

readOnlyHint true idempotentHint true destructiveHint false
dsr_get_details
annotations: verified low

Get detailed information about a specific Data Subject Request, including assigned request

readOnlyHint true idempotentHint true destructiveHint false
dsr_list_identifiers
annotations: verified low

List decrypted identifiers attached to a Data Subject Request.

readOnlyHint true idempotentHint true destructiveHint false
dsr_download_keys
annotations: verified low

Get download keys for a completed Data Subject Request. These keys can be used to download the DSR results.

readOnlyHint true idempotentHint true destructiveHint false
dsr_enrich_identifiers
annotations: verified low

Enrich a Data Subject Request with additional identifiers during preflight processing

readOnlyHint false idempotentHint false destructiveHint true
dsr_list_request_data_silos
annotations: verified low

List connected data systems (request data silos) for a Data Subject Request, including each

readOnlyHint true idempotentHint true destructiveHint false
dsr_respond_access
annotations: verified low

Respond to an ACCESS request by uploading user data

readOnlyHint false idempotentHint false destructiveHint false
dsr_poll_status
annotations: verified low

Poll the current status of a Data Subject Request

readOnlyHint true idempotentHint true destructiveHint false
dsr_respond_erasure
annotations: verified low

Confirm that data erasure has been completed for a data silo

readOnlyHint false idempotentHint true destructiveHint false
consent_update_data_flows
annotations: verified low

Update one or more data flows. Use to approve (status=LIVE), junk (isJunk=true),

readOnlyHint false idempotentHint true destructiveHint true
consent_get_analytics_data
annotations: verified low

Query consent metrics via the analyticsData GraphQL query.

readOnlyHint true idempotentHint true destructiveHint false
consent_get_timeseries_analytics
annotations: verified low

Query timeseries consent analytics via airgapBundleTimeseriesAnalytics.

readOnlyHint true idempotentHint true destructiveHint false
consent_get_aggregate_analytics
annotations: verified low

Query aggregate consent analytics via airgapBundleAggregateAnalytics.

readOnlyHint true idempotentHint true destructiveHint false
consent_update_cookies
annotations: verified low

Update one or more cookies. Use to approve (status=LIVE), junk (isJunk=true),

readOnlyHint false idempotentHint true destructiveHint true
consent_list_regimes
annotations: verified low

List all consent experiences (regional regimes) configured for your organization.

readOnlyHint true idempotentHint true destructiveHint false
consent_set_preferences
annotations: verified low

Set consent preferences for a user (client-side sync)

readOnlyHint false idempotentHint true destructiveHint false
consent_get_inventory_stats
annotations: verified low

Get cookie and data-flow inventory triage counts: live (approved), needs review, and junk.

readOnlyHint true idempotentHint true destructiveHint false
consent_list_cookies
annotations: verified low

List cookies in your consent manager.

readOnlyHint true idempotentHint true destructiveHint false
consent_bulk_triage
annotations: verified low

Bulk triage action: approve or junk multiple cookies and data flows in a single call.

readOnlyHint false idempotentHint false destructiveHint true
consent_list_data_flows
annotations: verified low

List data flows (network requests) in your consent manager.

readOnlyHint true idempotentHint true destructiveHint false
consent_list_airgap_bundles
annotations: verified low

Get the consent manager (airgap bundle) configured for your organization.

readOnlyHint true idempotentHint true destructiveHint false
consent_list_purposes
annotations: verified low

List all tracking purposes configured for consent management (max ~100 results).

readOnlyHint true idempotentHint true destructiveHint false
consent_get_preferences
annotations: verified low

Get consent preferences for a specific user/identifier

readOnlyHint true idempotentHint true destructiveHint false
example_consequential
annotations: verified low

Pretend to permanently delete a record, after asking the user to confirm. Demonstrates

readOnlyHint false idempotentHint false destructiveHint true
example_hello_app_refresh
annotations: verified low

Re-read the greeting payload for the example_hello_app view.

readOnlyHint true idempotentHint true destructiveHint false
${toolName}
annotations: verified low

TODO: what this returns, and when the model should call it.

readOnlyHint true idempotentHint true destructiveHint false

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 262

info
Tool 'workflows_update_config' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_prefill' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_list' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_create' annotations are consistent annotation_checker · 80%
info
Tool 'admin_list_users' annotations are consistent annotation_checker · 80%
info
Tool 'admin_list_scopes' annotations are consistent annotation_checker · 80%
info
Tool 'admin_get_organization' annotations are consistent annotation_checker · 80%
info
Tool 'admin_list_api_keys' annotations are consistent annotation_checker · 80%
info
Tool 'admin_get_privacy_center' annotations are consistent annotation_checker · 80%
info
Tool 'admin_get_current_user' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_business_entities' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_vendors' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_analyze' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_write_vendor' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_catalog_integrations' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_processing_purposes' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_data_points' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_update_or_create_data_point' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_write_category' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_categories' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_get_data_silo' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_write_data_silo' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_data_subjects' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_sub_data_points' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_list_data_silos' annotations are consistent annotation_checker · 80%
info
Tool 'inventory_write_processing_purpose' annotations are consistent annotation_checker · 80%
info
Tool 'workflows_list_email_templates' annotations are consistent annotation_checker · 80%
info
Tool 'workflows_list' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_create_template' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_list_templates' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_answer_question' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_update_assignees' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_submit_response' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_update' annotations are consistent annotation_checker · 80%
low
Tool 'docs_fetch_usage' has no annotations annotation_checker · 100%
info
Tool 'preferences_upsert' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_append_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_delete' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_update_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_delete_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'preferences_query' annotations are consistent annotation_checker · 80%
info
Tool 'docs_fetch' annotations are consistent annotation_checker · 80%
info
Tool 'docs_list' annotations are consistent annotation_checker · 80%
info
Tool 'admin_create_api_key' annotations are consistent annotation_checker · 80%
info
Tool 'admin_list_teams' annotations are consistent annotation_checker · 80%
info
Tool 'admin_test_connection' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_list_groups' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_export_template' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_get' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_add_section' annotations are consistent annotation_checker · 80%
info
Tool 'assessments_create_group' annotations are consistent annotation_checker · 80%
info
Tool 'discovery_list_plugins' annotations are consistent annotation_checker · 80%
info
Tool 'discovery_list_scans' annotations are consistent annotation_checker · 80%
info
Tool 'discovery_ner_extract' annotations are consistent annotation_checker · 80%
info
Tool 'discovery_classify_text' annotations are consistent annotation_checker · 80%
info
Tool 'test_cancel' annotations are consistent annotation_checker · 80%
info
Tool 'test_read' annotations are consistent annotation_checker · 80%
info
Tool 'test_silent' annotations are consistent annotation_checker · 80%
info
Tool 'test_collides' annotations are consistent annotation_checker · 80%
info
Tool 'test_bad' annotations are consistent annotation_checker · 80%
info
Tool 'test_greet_refresh' annotations are consistent annotation_checker · 80%
info
Tool 'greet_refresh' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_list' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_cancel' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_submit' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_analyze' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_get_details' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_list_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_download_keys' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_enrich_identifiers' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_list_request_data_silos' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_respond_access' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_poll_status' annotations are consistent annotation_checker · 80%
info
Tool 'dsr_respond_erasure' annotations are consistent annotation_checker · 80%
info
Tool 'consent_update_data_flows' annotations are consistent annotation_checker · 80%
info
Tool 'consent_get_analytics_data' annotations are consistent annotation_checker · 80%
info
Tool 'consent_get_timeseries_analytics' annotations are consistent annotation_checker · 80%
info
Tool 'consent_get_aggregate_analytics' annotations are consistent annotation_checker · 80%
info
Tool 'consent_update_cookies' annotations are consistent annotation_checker · 80%
info
Tool 'consent_list_regimes' annotations are consistent annotation_checker · 80%
info
Tool 'consent_set_preferences' annotations are consistent annotation_checker · 80%
info
Tool 'consent_get_inventory_stats' annotations are consistent annotation_checker · 80%
info
Tool 'consent_list_cookies' annotations are consistent annotation_checker · 80%
info
Tool 'consent_bulk_triage' annotations are consistent annotation_checker · 80%
info
Tool 'consent_list_data_flows' annotations are consistent annotation_checker · 80%
info
Tool 'consent_list_airgap_bundles' annotations are consistent annotation_checker · 80%
info
Tool 'consent_list_purposes' annotations are consistent annotation_checker · 80%
info
Tool 'consent_get_preferences' annotations are consistent annotation_checker · 80%
info
Tool 'example_consequential' annotations are consistent annotation_checker · 80%
info
Tool 'example_hello_app_refresh' annotations are consistent annotation_checker · 80%
info
Tool '${toolName}' annotations are consistent annotation_checker · 80%
high
Hardcoded OAuth client secret in transcend-io-tools-3ed732f/packages/mcp/mcp-server-base/tests/oauth-token-exchange.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in transcend-io-tools-3ed732f/packages/mcp/mcp-server-base/tests/oauth-client-verify.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in transcend-io-tools-3ed732f/packages/mcp/mcp-server-base/tests/oauth-token-refresh.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 149 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: lodash-es dependency_analyzer · 60%
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-f23m-r3pf-42rh) dependency_analyzer · 95%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: turbo@catalog: (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-353f-5xf4-qw67) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-c27g-q93r-2cwf) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-mv48-hcvh-8jj8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@catalog: (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@catalog: (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@catalog: (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-r5fr-rjxr-66jc) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash-es@4.17.21 (GHSA-xxjr-mmjv-4gpg) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog: (GHSA-35jh-r3h4-6jhm) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog: (GHSA-4xc9-xhrj-v574) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog: (GHSA-f23m-r3pf-42rh) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog: (GHSA-fvqr-27wr-82fm) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@catalog: (GHSA-jf85-cpcp-j695) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-mh29-5h37-fv8m) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@catalog: (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: dd-trace@2.45.1 (GHSA-wxqq-gcq8-c443) dependency_analyzer · 95%
medium
Vulnerable dependency: sequelize@6.37.3 (GHSA-6457-6jrx-69cr) dependency_analyzer · 95%
medium
Vulnerable dependency: sequelize@6.37.3 (GHSA-v8fg-2rw7-q452) dependency_analyzer · 95%
medium
Vulnerable dependency: pyarrow@14.0.1 (PYSEC-2024-161) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-3ww4-gg4f-jr7f) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-537c-gmf6-5ccf) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-6vqw-3v5j-54x4) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-9v9h-cgj8-h64p) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-h4gh-qq45-vh27) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-jwv3-5hgf-82ww) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-m2h6-j472-rp4c) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-m959-cc7f-wv43) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (GHSA-r6ph-v2qm-q3c2) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2024-225) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-1283) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-1285) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-2141) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-35) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-3553) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41.0.6 (PYSEC-2026-3554) dependency_analyzer · 95%
medium
Buffer.from base64 in transcend-io-tools-3ed732f/packages/sdk/src/custom-functions/codeSigning.ts:105 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-3ed732f/packages/sdk/src/custom-functions/tests/syncCustomFunctionDsrIntegration.test.ts:179 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-3ed732f/packages/sdk/src/custom-functions/tests/syncCustomFunctionDsrIntegration.test.ts:314 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-3ed732f/packages/sdk/src/custom-functions/tests/syncCustomFunctionDsrIntegration.test.ts:344 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in transcend-io-tools-3ed732f/packages/cli/src/commands/admin/generate-api-keys/readme.ts:107 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in transcend-io-tools-3ed732f/packages/cli/src/commands/admin/generate-api-keys/readme.ts:111 entropy_analyzer · 70%
medium
Buffer.from base64 in transcend-io-tools-3ed732f/packages/cli/src/lib/consent-manager/createConsentToken.ts:20 entropy_analyzer · 75%
medium
Buffer.from base64 in transcend-io-tools-3ed732f/packages/cli/src/lib/consent-manager/createConsentToken.ts:21 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: docs_fetch_usage manifest_parser · 75%
info
Tool: preferences_upsert manifest_parser · 75%
info
Tool: preferences_append_identifiers manifest_parser · 75%
info
Tool: preferences_delete manifest_parser · 75%
info
Tool: preferences_update_identifiers manifest_parser · 75%
info
Tool: preferences_delete_identifiers manifest_parser · 75%
info
Tool: preferences_query manifest_parser · 75%
info
Tool: docs_fetch manifest_parser · 75%
info
Tool: docs_list manifest_parser · 75%
info
Tool: admin_create_api_key manifest_parser · 75%
info
Tool: admin_list_teams manifest_parser · 75%
info
Tool: admin_test_connection manifest_parser · 75%
info
Tool: admin_list_users manifest_parser · 75%
info
Tool: admin_list_scopes manifest_parser · 75%
info
Tool: admin_get_organization manifest_parser · 75%
info
Tool: admin_list_api_keys manifest_parser · 75%
info
Tool: admin_get_privacy_center manifest_parser · 75%
info
Tool: admin_get_current_user manifest_parser · 75%
info
Tool: inventory_list_business_entities manifest_parser · 75%
info
Tool: inventory_list_vendors manifest_parser · 75%
info
Tool: inventory_analyze manifest_parser · 75%
info
Tool: inventory_write_vendor manifest_parser · 75%
info
Tool: inventory_list_catalog_integrations manifest_parser · 75%
info
Tool: inventory_list_processing_purposes manifest_parser · 75%
info
Tool: inventory_list_data_points manifest_parser · 75%
info
Tool: inventory_update_or_create_data_point manifest_parser · 75%
info
Tool: inventory_write_category manifest_parser · 75%
info
Tool: inventory_list_categories manifest_parser · 75%
info
Tool: inventory_get_data_silo manifest_parser · 75%
info
Tool: inventory_write_data_silo manifest_parser · 75%
info
Tool: inventory_list_identifiers manifest_parser · 75%
info
Tool: inventory_list_data_subjects manifest_parser · 75%
info
Tool: inventory_list_sub_data_points manifest_parser · 75%
info
Tool: inventory_list_data_silos manifest_parser · 75%
info
Tool: inventory_write_processing_purpose manifest_parser · 75%
info
Tool: workflows_list_email_templates manifest_parser · 75%
info
Tool: workflows_list manifest_parser · 75%
info
Tool: workflows_update_config manifest_parser · 75%
info
Tool: assessments_prefill manifest_parser · 75%
info
Tool: assessments_list manifest_parser · 75%
info
Tool: assessments_create manifest_parser · 75%
info
Tool: assessments_create_template manifest_parser · 75%
info
Tool: assessments_list_templates manifest_parser · 75%
info
Tool: assessments_answer_question manifest_parser · 75%
info
Tool: assessments_update_assignees manifest_parser · 75%
info
Tool: assessments_submit_response manifest_parser · 75%
info
Tool: assessments_update manifest_parser · 75%
info
Tool: assessments_list_groups manifest_parser · 75%
info
Tool: assessments_export_template manifest_parser · 75%
info
Tool: assessments_get manifest_parser · 75%
info
Tool: assessments_add_section manifest_parser · 75%
info
Tool: assessments_create_group manifest_parser · 75%
info
Tool: discovery_list_plugins manifest_parser · 75%
info
Tool: discovery_list_scans manifest_parser · 75%
info
Tool: discovery_ner_extract manifest_parser · 75%
info
Tool: discovery_classify_text manifest_parser · 75%
info
Tool: test_cancel manifest_parser · 75%
info
Tool: test_read manifest_parser · 75%
info
Tool: test_silent manifest_parser · 75%
info
Tool: test_collides manifest_parser · 75%
info
Tool: test_bad manifest_parser · 75%
info
Tool: test_greet_refresh manifest_parser · 75%
info
Tool: greet_refresh manifest_parser · 75%
info
Tool: dsr_list manifest_parser · 75%
info
Tool: dsr_cancel manifest_parser · 75%
info
Tool: dsr_submit manifest_parser · 75%
info
Tool: dsr_analyze manifest_parser · 75%
info
Tool: dsr_get_details manifest_parser · 75%
info
Tool: dsr_list_identifiers manifest_parser · 75%
info
Tool: dsr_download_keys manifest_parser · 75%
info
Tool: dsr_enrich_identifiers manifest_parser · 75%
info
Tool: dsr_list_request_data_silos manifest_parser · 75%
info
Tool: dsr_respond_access manifest_parser · 75%
info
Tool: dsr_poll_status manifest_parser · 75%
info
Tool: dsr_respond_erasure manifest_parser · 75%
info
Tool: consent_update_data_flows manifest_parser · 75%
info
Tool: consent_get_analytics_data manifest_parser · 75%
info
Tool: consent_get_timeseries_analytics manifest_parser · 75%
info
Tool: consent_get_aggregate_analytics manifest_parser · 75%
info
Tool: consent_update_cookies manifest_parser · 75%
info
Tool: consent_list_regimes manifest_parser · 75%
info
Tool: consent_set_preferences manifest_parser · 75%
info
Tool: consent_get_inventory_stats manifest_parser · 75%
info
Tool: consent_list_cookies manifest_parser · 75%
info
Tool: consent_bulk_triage manifest_parser · 75%
info
Tool: consent_list_data_flows manifest_parser · 75%
info
Tool: consent_list_airgap_bundles manifest_parser · 75%
info
Tool: consent_list_purposes manifest_parser · 75%
info
Tool: consent_get_preferences manifest_parser · 75%
info
Tool: example_consequential manifest_parser · 75%
info
Tool: example_hello_app_refresh manifest_parser · 75%
info
Tool: ${toolName} manifest_parser · 75%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (24) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 113 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%