← Back to search

@1mcp/agent

GitHub Actions Scanned 27d ago

One MCP server to aggregate them all - A unified Model Context Protocol server implementation

npm ↗
? Not scanned yet

Versions

0.35.0-beta.2latest
Jul 29, 2026
0.35.0-beta.1
Jul 23, 2026
0.34.4
Jul 21, 2026
0.34.3
Jul 17, 2026
0.34.2
Jul 14, 2026
+ show 80 moreshow less
0.34.1
Jul 13, 2026
0.34.0
Jul 1, 2026
0.33.0
Jun 30, 2026
0.33.0-beta3
Jun 24, 2026
0.33.0-beta2
Jun 23, 2026
0.33.0-beta1
Jun 22, 2026
0.32.2
Jun 9, 2026
0.32.1
Jun 4, 2026
0.32.0
May 19, 2026
0.32.0-beta1
May 8, 2026
0.31.0
Apr 29, 2026
0.31.0-beta3
Apr 28, 2026
0.31.0-beta2
Apr 26, 2026
0.31.0-beta1
Apr 20, 2026
0.30.3
Apr 11, 2026
0.30.2
Mar 23, 2026
0.30.1
Mar 12, 2026
0.30.0
Mar 2, 2026
0.30.0-beta1
Feb 9, 2026
0.29.2
Feb 9, 2026
0.29.1
Jan 27, 2026
0.29.0
Jan 25, 2026
0.29.0-beta7
Jan 22, 2026
0.29.0-beta6
Jan 18, 2026
0.29.0-beta5
Jan 9, 2026
0.29.0-beta4
Jan 7, 2026
0.29.0-beta3
Jan 7, 2026
0.29.0-beta2
Jan 6, 2026
0.29.0-beta1
Dec 28, 2025
0.28.1
Dec 25, 2025
0.28.0
Dec 21, 2025
0.27.4
Dec 9, 2025
0.27.3
Nov 27, 2025
0.27.2
Nov 18, 2025
0.27.0
Nov 1, 2025
0.26.1
Oct 24, 2025
0.26.0
Oct 24, 2025
0.25.5
Oct 22, 2025
0.25.4
Oct 13, 2025
0.25.3
Oct 13, 2025
0.25.2
Oct 13, 2025
0.25.1
Oct 12, 2025
0.25.0
Oct 10, 2025
0.24.0
Oct 8, 2025
0.23.2
Sep 22, 2025
0.23.1
Sep 21, 2025
0.23.0
Sep 18, 2025
0.22.3
Sep 15, 2025
0.22.2
Sep 14, 2025
0.22.1
Sep 14, 2025
0.22.0
Sep 12, 2025
0.21.0
Sep 5, 2025
0.20.3
Sep 3, 2025
0.20.3-alpha3
Sep 3, 2025
0.20.3-alpha2
Sep 3, 2025
0.20.3-alpha1
Sep 3, 2025
0.20.2
Aug 29, 2025
0.20.1
Aug 27, 2025
0.20.0
Aug 27, 2025
0.19.0
Aug 22, 2025
0.18.1
Aug 18, 2025
0.18.0
Aug 15, 2025
0.17.0
Aug 7, 2025
0.16.0
Aug 4, 2025
0.15.0
Jul 22, 2025
0.14.0
Jul 21, 2025
0.13.1
Jul 16, 2025
0.13.0
Jul 15, 2025
0.12.0
Jul 9, 2025
0.11.0
Jun 26, 2025
0.10.3
Jun 11, 2025
0.10.1
Jun 10, 2025
0.10.0
Jun 10, 2025
0.9.0
May 6, 2025
0.8.2
May 3, 2025
0.8.0
Apr 14, 2025
0.7.0
Mar 27, 2025
0.4.0
Mar 23, 2025
0.2.0
Mar 19, 2025
0.1.0
Mar 16, 2025

Tools 7

read_file
annotations: none low

Upstream description

test_tool
annotations: none low

Test tool

test
annotations: none low

Test

test-tool
annotations: none low

A test tool

write_file
annotations: none low

Write file contents

search
annotations: none low

Search files

query
annotations: none low

Query database

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 105

low
Tool 'read_file' has no annotations annotation_checker · 100%
low
Tool 'test_tool' has no annotations annotation_checker · 100%
low
Tool 'test' has no annotations annotation_checker · 100%
low
Tool 'test-tool' has no annotations annotation_checker · 100%
low
Tool 'write_file' has no annotations annotation_checker · 100%
low
Tool 'search' has no annotations annotation_checker · 100%
low
Tool 'query' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in 1mcp-app-agent-15ee1e8/test/unit-utils/TestFixtures.ts auth_checker · 95%
high
Hardcoded OAuth client secret in 1mcp-app-agent-15ee1e8/test/unit-utils/MockFactories.ts auth_checker · 95%
high
Hardcoded OAuth client ID in 1mcp-app-agent-15ee1e8/test/e2e/oauth-refresh-concurrency.e2e.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in 1mcp-app-agent-15ee1e8/test/e2e/http/http-auth.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in 1mcp-app-agent-15ee1e8/test/e2e/utils/CommandTestEnvironment.ts auth_checker · 85%
high
Hardcoded OAuth client ID in 1mcp-app-agent-15ee1e8/src/auth/sdkOAuthClientProvider.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in 1mcp-app-agent-15ee1e8/src/auth/sdkOAuthClientProvider.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in 1mcp-app-agent-15ee1e8/src/config/configLoader.validation-app-config.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in 1mcp-app-agent-15ee1e8/src/auth/storage/clientDataRepository.test.ts auth_checker · 85%
high
Hardcoded OAuth client secret in 1mcp-app-agent-15ee1e8/src/auth/storage/clientDataRepository.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in 1mcp-app-agent-15ee1e8/src/auth/storage/clientSessionRepository.test.ts auth_checker · 95%
high
Hardcoded OAuth client secret in 1mcp-app-agent-15ee1e8/src/domains/admin/adminConfiguredServerService.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-35jp-ww65-95wh) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-3g43-6gmg-66jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-3p68-rc4w-qgx5) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-3w6x-2g7m-8v23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-43fc-jf86-j433) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-445q-vr5w-6q77) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-5c9x-8gcm-mpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-62hf-57xw-28j9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-6chq-wfr3-2hj9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-777c-7fjr-54vf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-898c-q2cr-xwhg) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-fvcv-3m26-pcqx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-hfxv-24rg-xrqf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-j5f8-grm9-p9fc) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-jqh4-m9w3-8hp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-m7pr-hjqh-92cm) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-p92q-9vqr-4j8v) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-pf86-5x62-jrwf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-pmwg-cvhr-8vh7) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-q8qp-cvcw-x6jj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-vf2m-468p-8v99) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-w9j2-pvgh-6h63) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-xhjh-pmcv-23jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.12.2 (GHSA-xx6v-rp6x-q39c) dependency_analyzer · 95%
medium
Vulnerable dependency: body-parser@2.2.0 (GHSA-v422-hmwv-36x6) dependency_analyzer · 95%
medium
Vulnerable dependency: body-parser@2.2.0 (GHSA-wqch-xfxh-vrr4) dependency_analyzer · 95%
medium
Vulnerable dependency: express-rate-limit@8.2.1 (GHSA-46wh-pxpv-q5gq) dependency_analyzer · 95%
medium
Vulnerable dependency: handlebars@4.7.8 (GHSA-2qvq-rjwj-gvw9) dependency_analyzer · 95%
medium
Vulnerable dependency: handlebars@4.7.8 (GHSA-2w6w-674q-4c4q) dependency_analyzer · 95%
medium
Vulnerable dependency: handlebars@4.7.8 (GHSA-3mfm-83xf-c92r) dependency_analyzer · 95%
medium
Vulnerable dependency: handlebars@4.7.8 (GHSA-442j-39wm-28r2) dependency_analyzer · 95%
medium
Vulnerable dependency: handlebars@4.7.8 (GHSA-7rx3-28cr-v5wh) dependency_analyzer · 95%
medium
Vulnerable dependency: handlebars@4.7.8 (GHSA-9cx6-37pm-9jff) dependency_analyzer · 95%
medium
Vulnerable dependency: handlebars@4.7.8 (GHSA-xhpv-hc6g-r9c6) dependency_analyzer · 95%
medium
Vulnerable dependency: handlebars@4.7.8 (GHSA-xjpj-3mr7-gcpf) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.6.0 (GHSA-v3rj-xjv7-4jmq) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@0.28.0 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@11.9.0 (GHSA-2v8p-3f2j-5mp7) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@11.9.0 (GHSA-3rrr-jr9j-h3q3) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@11.9.0 (GHSA-6m6c-36f7-fhxh) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@11.9.0 (GHSA-6x64-9x62-f2gx) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@11.9.0 (GHSA-7rqq-prvp-x9jh) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@11.9.0 (GHSA-87f9-hvmw-gh4p) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@11.9.0 (GHSA-8gwm-58g9-j8pw) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@11.9.0 (GHSA-c4c3-pg64-4m4v) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@11.9.0 (GHSA-ghcm-xqfw-q4vr) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@11.9.0 (GHSA-rhh3-jpg6-66xh) dependency_analyzer · 95%
medium
Vulnerable dependency: mermaid@11.9.0 (GHSA-xcj9-5m2h-648r) dependency_analyzer · 95%
medium
Buffer.from base64 in 1mcp-app-agent-15ee1e8/src/transport/http/routes/adminRoutes.ts:991 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in 1mcp-app-agent-15ee1e8/src/core/server/templateIdentity.test.ts:21 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in 1mcp-app-agent-15ee1e8/src/core/server/templateIdentity.test.ts:22 entropy_analyzer · 70%
medium
Buffer.from base64 in 1mcp-app-agent-15ee1e8/src/core/capabilities/toolRegistry.ts:330 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: read_file manifest_parser · 90%
info
Tool: test_tool manifest_parser · 90%
info
Tool: test manifest_parser · 90%
info
Tool: test-tool manifest_parser · 90%
info
Tool: write_file manifest_parser · 90%
info
Tool: search manifest_parser · 90%
info
Tool: query manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (36) manifest_parser · 80%
medium
Hardcoded OAuth client ID in 1mcp-app-agent-15ee1e8/test/e2e/oauth-refresh-concurrency.e2e.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in 1mcp-app-agent-15ee1e8/test/e2e/utils/CommandTestEnvironment.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in 1mcp-app-agent-15ee1e8/src/auth/sdkOAuthClientProvider.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in 1mcp-app-agent-15ee1e8/src/auth/storage/clientDataRepository.test.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 82 components sbom_generator · 100%
high
Hardcoded Password found in 1mcp-app-agent-15ee1e8/docs/zh/guide/advanced/cloud-deployment.md secret_scanner · 65%
high
Hardcoded Password found in 1mcp-app-agent-15ee1e8/docs/en/guide/advanced/cloud-deployment.md secret_scanner · 65%
high
Hardcoded Password found in 1mcp-app-agent-15ee1e8/src/utils/validation/sanitization.ts secret_scanner · 65%
high
Hardcoded Password found in 1mcp-app-agent-15ee1e8/src/domains/admin/adminConfiguredServerService.ts secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%