← Back to search

@assistant-ui/mcp-docs-server

GitHub Actions Scanned 24d ago

MCP server for assistant-ui documentation and examples

npm ↗
D
40 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 2

echo
annotations: verified low

Echo back the provided text.

readOnlyHint true openWorldHint false
fingerprint
annotations: verified low

Return a deterministic fingerprint of a string (sha256 hex).

readOnlyHint true openWorldHint false

Permissions 5

network medium
Server uses network capabilities via: fetch(), httpx
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path, pathlib
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync(), subprocess
database medium
Server uses database capabilities via: redis
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 32

medium
Suspicious package name: react-reconciler dependency_analyzer · 60%
medium
Suspicious package name: react-router dependency_analyzer · 60%
info
Tool 'echo' annotations are consistent annotation_checker · 80%
info
Tool 'fingerprint' annotations are consistent annotation_checker · 80%
high
Hardcoded OAuth client secret in assistant-ui-assistant-ui-08611a0/packages/react-mcp/src/resources/storage/McpLocalStorage.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 1038 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Suspicious package name: react-native dependency_analyzer · 60%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-shiki dependency_analyzer · 60%
medium
Suspicious package name: react-grab dependency_analyzer · 60%
info
OSV.dev API query failed dependency_analyzer · 100%
medium
Buffer.from base64 in assistant-ui-assistant-ui-08611a0/apps/docs/lib/playground-url-state.ts:106 entropy_analyzer · 75%
medium
Buffer.from base64 in assistant-ui-assistant-ui-08611a0/packages/core/src/utils/image-media-type.ts:89 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: echo manifest_parser · 85%
info
Tool: fingerprint manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (55) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 353 components sbom_generator · 100%
critical
AWS Secret Access Key found in assistant-ui-assistant-ui-08611a0/apps/docs/content/docs/(getting-started)/installation.mdx secret_scanner · 90%
high
Generic API Key Assignment found in assistant-ui-assistant-ui-08611a0/apps/docs/content/docs/(getting-started)/installation.mdx secret_scanner · 75%
critical
Database URL with Password found in assistant-ui-assistant-ui-08611a0/python/assistant-transport-backend-langgraph/README.md secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%