← Back to search

@transloadit/mcp-server

GitHub Actions Scanned 7d ago

Transloadit MCP server

C
69.5 / 100

Versions

0.3.29latest
Jul 11, 2026
0.3.28
Jun 29, 2026
0.3.27
Jun 18, 2026
0.3.26
Jun 15, 2026
0.3.25
Jun 3, 2026
+ show 32 moreshow less
0.3.24
Jun 1, 2026
0.3.23
May 20, 2026
0.3.22
May 16, 2026
0.3.21
May 7, 2026
0.3.20
May 7, 2026
0.3.19
Apr 23, 2026
0.3.18
Apr 22, 2026
0.3.17
Apr 17, 2026
0.3.16
Apr 16, 2026
0.3.15
Apr 15, 2026
0.3.14
Apr 14, 2026
0.3.13
Apr 14, 2026
0.3.12
Apr 13, 2026
0.3.11
Apr 13, 2026
0.3.10
Mar 26, 2026
0.3.9
Mar 3, 2026
0.3.8
Mar 3, 2026
0.3.7
Mar 2, 2026
0.3.6
Feb 17, 2026
0.3.5
Feb 17, 2026
0.3.4
Feb 10, 2026
0.3.3
Feb 10, 2026
0.3.2
Feb 9, 2026
0.3.1
Feb 9, 2026
0.3.0
Feb 9, 2026
0.2.2
Feb 3, 2026
0.2.1
Feb 3, 2026
0.2.0
Feb 3, 2026
0.1.0
Feb 3, 2026
0.0.3
Feb 2, 2026
0.0.2
Feb 2, 2026
0.0.1
Feb 2, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

transloadit_lint_assembly_instructions
annotations: none low

Lint Assembly Instructions without creating an Assembly. Returns structured issues.

transloadit_create_assembly
annotations: none low

Create or resume an Assembly, optionally uploading files and waiting for completion.

transloadit_get_assembly_status
annotations: none low

Fetch the latest Assembly status by URL or ID.

transloadit_wait_for_assembly
annotations: none low

Polls until the Assembly completes or timeout is reached.

transloadit_list_robots
annotations: none low

Returns a filtered list of robots with short summaries.

transloadit_get_robot_help
annotations: none low

Returns a robot summary and parameter details.

transloadit_list_templates
annotations: none low

List Assembly Templates (owned and/or builtin). Tip: pass include_builtin: "exclusively-latest" to list builtins only.

Permissions 4

network medium
Server uses network capabilities via: fetch(), http
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops
shell high
Server uses shell capabilities via: child_process, spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 34

low
Tool 'transloadit_lint_assembly_instructions' has no annotations annotation_checker · 100%
low
Tool 'transloadit_create_assembly' has no annotations annotation_checker · 100%
low
Tool 'transloadit_get_assembly_status' has no annotations annotation_checker · 100%
low
Tool 'transloadit_wait_for_assembly' has no annotations annotation_checker · 100%
low
Tool 'transloadit_list_robots' has no annotations annotation_checker · 100%
low
Tool 'transloadit_get_robot_help' has no annotations annotation_checker · 100%
low
Tool 'transloadit_list_templates' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 53 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: lodash-es dependency_analyzer · 60%
medium
Vulnerable dependency: form-data@4.0.5 (GHSA-hmw2-7cc7-3qxx) dependency_analyzer · 95%
medium
Vulnerable dependency: image-size@2.0.2 (GHSA-5p2g-fcmc-qvqq) dependency_analyzer · 95%
medium
Vulnerable dependency: image-size@2.0.2 (GHSA-w3rx-r6r6-pgpr) dependency_analyzer · 95%
medium
Buffer.from base64 in transloadit-node-sdk-9afb644/packages/mcp-server/src/http-helpers.ts:31 entropy_analyzer · 75%
medium
Buffer.from base64 in transloadit-node-sdk-9afb644/packages/node/src/inputFiles.ts:100 entropy_analyzer · 75%
medium
Buffer.from base64 in transloadit-node-sdk-9afb644/packages/node/test/e2e/resume-assembly.test.ts:33 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: transloadit_lint_assembly_instructions manifest_parser · 85%
info
Tool: transloadit_create_assembly manifest_parser · 85%
info
Tool: transloadit_get_assembly_status manifest_parser · 85%
info
Tool: transloadit_wait_for_assembly manifest_parser · 85%
info
Tool: transloadit_list_robots manifest_parser · 85%
info
Tool: transloadit_get_robot_help manifest_parser · 85%
info
Tool: transloadit_list_templates manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (21) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 48 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%