← Back to search

dataforseo-mcp-server

GitHub Actions Scanned 27d ago

A Model Context Protocol (MCP) server for the DataForSEO API, enabling modular and extensible integration of DataForSEO endpoints with support for both HTTP and SSE transports.

npm ↗
? Not scanned yet

Versions

3.0.0-beta.0latest
Jul 29, 2026
2.9.11
Jun 30, 2026
2.9.9
Jun 17, 2026
2.9.8
Jun 8, 2026
2.9.7
Jun 5, 2026
+ show 53 moreshow less
2.9.6
Jun 3, 2026
2.9.5
May 30, 2026
2.9.4
May 19, 2026
2.9.3
May 19, 2026
2.9.2
May 12, 2026
2.9.1
May 11, 2026
2.8.10
Apr 21, 2026
2.8.9
Apr 14, 2026
2.8.8
Apr 14, 2026
2.8.7
Mar 3, 2026
2.8.6
Feb 25, 2026
2.8.5
Jan 7, 2026
2.8.1
Nov 24, 2025
2.8.0
Nov 21, 2025
2.7.13
Oct 28, 2025
2.7.12
Oct 6, 2025
2.7.11
Sep 5, 2025
2.7.10
Aug 26, 2025
2.7.9
Aug 21, 2025
2.7.8
Aug 19, 2025
2.7.7
Aug 18, 2025
2.7.6
Aug 18, 2025
2.7.5
Aug 15, 2025
2.7.4
Aug 15, 2025
2.7.2
Jul 28, 2025
2.7.1
Jul 25, 2025
2.7.0
Jul 25, 2025
2.6.0
Jul 10, 2025
2.5.2
Jul 9, 2025
2.5.1
Jul 3, 2025
2.5.0
Jun 30, 2025
2.4.0
Jun 26, 2025
2.3.0
Jun 24, 2025
2.2.6
Jun 10, 2025
2.2.5
Jun 9, 2025
2.2.4
May 28, 2025
2.2.3
May 28, 2025
2.2.2
May 26, 2025
2.2.1
May 26, 2025
2.2.0
May 26, 2025
2.1.0
May 26, 2025
2.0.1
May 21, 2025
2.0.0
May 21, 2025
1.1.2
May 21, 2025
1.1.1-beta.1
May 21, 2025
1.1.0
May 21, 2025
1.0.6
May 14, 2025
1.0.5
May 14, 2025
1.0.4
May 12, 2025
1.0.3
May 12, 2025
1.0.2
May 12, 2025
1.0.1
May 12, 2025
1.0.0
May 12, 2025

Tools 0

No tools indexed yet.

Permissions 3

network medium
Server uses network capabilities via: fetch(), http
filesystem low
Server uses filesystem capabilities via: fs, fs/promises
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 21

info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (7) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.4.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.4.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: agents@0.0.101 (GHSA-cvhv-6xm6-c3v4) dependency_analyzer · 95%
medium
Vulnerable dependency: agents@0.0.101 (GHSA-r7x9-8ph7-w8cg) dependency_analyzer · 95%
medium
Vulnerable dependency: agents@0.0.101 (GHSA-w5cr-2qhr-jqc5) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-qw6h-vgh9-j6wx) dependency_analyzer · 95%
medium
Vulnerable dependency: express@4.18.2 (GHSA-rv95-896h-c2vc) dependency_analyzer · 95%
medium
Vulnerable dependency: wrangler@4.24.0 (GHSA-36p8-mvp6-cv38) dependency_analyzer · 95%
medium
Buffer.from base64 in dataforseo-mcp-server-typescript-842bceb/src/core/api/token-expiry.ts:37 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 280 components sbom_generator · 100%
high
Hardcoded Password found in dataforseo-mcp-server-typescript-842bceb/README.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%