← Back to search

@caelo-cms/mcp-server

GitHub Actions Scanned 24d ago

MCP server exposing the Caelo CMS chat-runner as a `caelo_chat` tool. Lets Claude Code (or any MCP-aware client) drive a Caelo install from outside the browser.

npm ↗
? Not scanned yet

Versions

0.10.22latest
May 20, 2026
0.10.21
May 20, 2026
0.10.20
May 20, 2026
0.10.19
May 20, 2026
0.10.18
May 20, 2026
+ show 163 moreshow less
0.10.16
May 20, 2026
0.10.15
May 20, 2026
0.10.14
May 20, 2026
0.10.12
May 20, 2026
0.10.11
May 19, 2026
0.10.10
May 19, 2026
0.10.9
May 19, 2026
0.10.8
May 19, 2026
0.10.7
May 19, 2026
0.10.6
May 19, 2026
0.10.5
May 19, 2026
0.10.4
May 19, 2026
0.10.3
May 19, 2026
0.10.2
May 19, 2026
0.9.13
May 19, 2026
0.9.12
May 19, 2026
0.9.11
May 19, 2026
0.9.10
May 19, 2026
0.9.8
May 19, 2026
0.9.7
May 19, 2026
0.9.6
May 18, 2026
0.9.5
May 18, 2026
0.9.4
May 18, 2026
0.9.3
May 18, 2026
0.9.2
May 18, 2026
0.9.1
May 18, 2026
0.8.1
May 18, 2026
0.8.0
May 18, 2026
0.7.5
May 17, 2026
0.7.4
May 17, 2026
0.7.3
May 17, 2026
0.7.2
May 17, 2026
0.7.1
May 17, 2026
0.7.0
May 17, 2026
0.6.6
May 17, 2026
0.6.5
May 17, 2026
0.6.4
May 17, 2026
0.6.3
May 16, 2026
0.6.2
May 16, 2026
0.6.1
May 16, 2026
0.6.0
May 16, 2026
0.5.21
May 15, 2026
0.5.20
May 15, 2026
0.5.19
May 15, 2026
0.5.18
May 15, 2026
0.5.17
May 15, 2026
0.5.16
May 13, 2026
0.5.15
May 13, 2026
0.5.14
May 13, 2026
0.5.13
May 13, 2026
0.5.12
May 13, 2026
0.5.11
May 13, 2026
0.5.10
May 13, 2026
0.5.9
May 13, 2026
0.5.8
May 13, 2026
0.5.7
May 13, 2026
0.5.6
May 13, 2026
0.5.4
May 13, 2026
0.5.2
May 13, 2026
0.5.0
May 13, 2026
0.4.2
May 13, 2026
0.4.1
May 13, 2026
0.4.0
May 13, 2026
0.3.23
May 13, 2026
0.3.22
May 13, 2026
0.3.21
May 13, 2026
0.3.20
May 13, 2026
0.3.19
May 13, 2026
0.3.18
May 12, 2026
0.3.17
May 12, 2026
0.3.16
May 12, 2026
0.3.15
May 12, 2026
0.3.14
May 12, 2026
0.3.13
May 12, 2026
0.3.12
May 12, 2026
0.3.11
May 12, 2026
0.3.10
May 12, 2026
0.3.9
May 12, 2026
0.3.8
May 12, 2026
0.3.7
May 12, 2026
0.3.6
May 12, 2026
0.3.5
May 11, 2026
0.3.4
May 11, 2026
0.3.3
May 11, 2026
0.3.2
May 11, 2026
0.3.1
May 11, 2026
0.3.0
May 11, 2026
0.2.85
May 11, 2026
0.2.84
May 11, 2026
0.2.83
May 11, 2026
0.2.82
May 11, 2026
0.2.81
May 11, 2026
0.2.80
May 11, 2026
0.2.79
May 10, 2026
0.2.78
May 10, 2026
0.2.77
May 10, 2026
0.2.76
May 9, 2026
0.2.75
May 9, 2026
0.2.74
May 8, 2026
0.2.73
May 8, 2026
0.2.72
May 8, 2026
0.2.71
May 8, 2026
0.2.70
May 8, 2026
0.2.68
May 8, 2026
0.2.67
May 8, 2026
0.2.66
May 8, 2026
0.2.65
May 8, 2026
0.2.64
May 8, 2026
0.2.63
May 8, 2026
0.2.62
May 8, 2026
0.2.61
May 8, 2026
0.2.60
May 8, 2026
0.2.59
May 8, 2026
0.2.58
May 8, 2026
0.2.57
May 8, 2026
0.2.56
May 7, 2026
0.2.55
May 7, 2026
0.2.54
May 7, 2026
0.2.53
May 7, 2026
0.2.52
May 7, 2026
0.2.51
May 7, 2026
0.2.50
May 7, 2026
0.2.49
May 7, 2026
0.2.48
May 7, 2026
0.2.46
May 7, 2026
0.2.47
May 7, 2026
0.2.45
May 7, 2026
0.2.43
May 7, 2026
0.2.42
May 7, 2026
0.2.44
May 7, 2026
0.2.41
May 7, 2026
0.2.35
May 7, 2026
0.2.33
May 7, 2026
0.2.34
May 7, 2026
0.2.32
May 7, 2026
0.2.31
May 7, 2026
0.2.30
May 7, 2026
0.2.29
May 6, 2026
0.2.26
May 6, 2026
0.2.25
May 6, 2026
0.2.24
May 6, 2026
0.2.23
May 6, 2026
0.2.22
May 6, 2026
0.2.21
May 6, 2026
0.2.20
May 6, 2026
0.2.19
May 6, 2026
0.2.18
May 6, 2026
0.2.17
May 6, 2026
0.2.15
May 6, 2026
0.2.14
May 6, 2026
0.2.13
May 6, 2026
0.2.12
May 6, 2026
0.2.11
May 6, 2026
0.2.10
May 6, 2026
0.2.9
May 6, 2026
0.2.8
May 6, 2026
0.2.7
May 6, 2026
0.2.6
May 6, 2026
0.2.5
May 6, 2026
0.2.3
May 6, 2026
0.2.1
May 6, 2026
0.1.1
May 3, 2026
0.1.0
May 3, 2026

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
database medium
Server uses database capabilities via: drizzle-orm
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 57

high
Hardcoded OAuth client ID in caelo-cms-caelo-cms-6d4d2dd/packages/admin-core/src/ai/__tests__/tool-search-dangling-replay.test.ts auth_checker · 85%
high
Hardcoded OAuth client ID in caelo-cms-caelo-cms-6d4d2dd/packages/admin-core/src/ai/__tests__/tool-search-deferred-fixture.test.ts auth_checker · 85%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 94 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: js-yaml@4.3.0 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-39q2-94rc-95cp) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-55q2-fjhq-7xh7) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-76mc-f452-cxcm) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-c2j3-45gr-mqc4) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-cj63-jhhr-wcxv) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-cjmm-f4jc-qw8r) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-cmwh-pvxp-8882) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-crv5-9vww-q3g8) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-gvmj-g25r-r7wr) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-gx9m-whjm-85jf) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-h7mw-gpvr-xq4m) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-h8r8-wccr-v5f2) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-hpcv-96wg-7vj8) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-mmhx-hmjr-r674) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-r47g-fvhr-h676) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-rp9w-3fw7-7cwq) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-vhxf-7vqr-mrjg) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-vxr8-fq34-vvx9) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3 (GHSA-x4vx-rjvf-j5p4) dependency_analyzer · 95%
medium
Vulnerable dependency: file-type@21 (GHSA-5v7r-6r5c-r473) dependency_analyzer · 95%
medium
Vulnerable dependency: file-type@21 (GHSA-j47w-4g3g-c36v) dependency_analyzer · 95%
medium
Vulnerable dependency: marked@18 (GHSA-6v9c-7cg6-27q7) dependency_analyzer · 95%
medium
Buffer.from base64 in caelo-cms-caelo-cms-6d4d2dd/packages/admin-core/src/ai/chat-runner/tool-dispatch.ts:132 entropy_analyzer · 75%
medium
Buffer.from base64 in caelo-cms-caelo-cms-6d4d2dd/packages/admin-core/src/ai/providers/anthropic.ts:183 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in caelo-cms-caelo-cms-6d4d2dd/packages/plugin-sandbox/src/manifest.ts:65 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (110) manifest_parser · 80%
medium
Hardcoded OAuth client ID in caelo-cms-caelo-cms-6d4d2dd/packages/admin-core/src/ai/__tests__/tool-search-dangling-replay.test.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in caelo-cms-caelo-cms-6d4d2dd/packages/admin-core/src/ai/__tests__/tool-search-deferred-fixture.test.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 77 components sbom_generator · 100%
high
Hardcoded Password found in caelo-cms-caelo-cms-6d4d2dd/plans/phases/phase_1_db_query_api.md secret_scanner · 65%
high
Hardcoded Password found in caelo-cms-caelo-cms-6d4d2dd/plans/phases/phase_16_ai_providers_cost_obs.md secret_scanner · 65%
critical
Database URL with Password found in caelo-cms-caelo-cms-6d4d2dd/packages/provisioning/src/compose.ts secret_scanner · 85%
critical
Database URL with Password found in caelo-cms-caelo-cms-6d4d2dd/packages/provisioning/stacks/gcp-firebase/index.ts secret_scanner · 85%
critical
Database URL with Password found in caelo-cms-caelo-cms-6d4d2dd/packages/provisioning/src/wizards/gcp.ts secret_scanner · 85%
high
Hardcoded Password found in caelo-cms-caelo-cms-6d4d2dd/apps/admin/e2e/_seed.ts secret_scanner · 65%
high
Hardcoded Password found in caelo-cms-caelo-cms-6d4d2dd/apps/admin/e2e/setup-login.browser.ts secret_scanner · 65%
high
Hardcoded Password found in caelo-cms-caelo-cms-6d4d2dd/apps/admin/e2e/content-reviewer-readonly.browser.ts secret_scanner · 65%
high
Hardcoded Password found in caelo-cms-caelo-cms-6d4d2dd/apps/admin/e2e/password-reset.browser.ts secret_scanner · 65%
high
Hardcoded Password found in caelo-cms-caelo-cms-6d4d2dd/apps/admin/e2e-livedit/helpers.ts secret_scanner · 65%
critical
Database URL with Password found in caelo-cms-caelo-cms-6d4d2dd/.github/workflows/ci.yml secret_scanner · 85%
critical
Database URL with Password found in caelo-cms-caelo-cms-6d4d2dd/.github/workflows/e2e-livedit.yml secret_scanner · 85%
critical
Database URL with Password found in caelo-cms-caelo-cms-6d4d2dd/.github/workflows/release.yml secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%