← Back to search Server uses network capabilities via: fetch() Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path Server uses shell capabilities via: child_process, execSync(), spawn() Server uses env_vars capabilities via: process.env
@donmai/mcp-server
MCP server exposing Donmai fleet capabilities to MCP-aware clients
npm
? Not scanned yet
Versions
0.9.10latestJul 6, 2026
0.9.9Jul 5, 2026
0.9.8Jun 12, 2026
0.9.7Jun 11, 2026
0.9.6Jun 11, 2026
+ show 7 moreshow less
0.9.5May 30, 2026
0.9.4May 28, 2026
0.9.3May 26, 2026
0.9.2May 26, 2026
0.9.1May 26, 2026
0.9.0May 25, 2026
0.0.0May 25, 2026
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 44
high
Hardcoded OAuth client secret in RenseiAI-donmai-libraries-fed764e/packages/core/src/providers/plugin-types.test.ts
info
Sandbox failed to start for behavioral verification
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: next@15.5.18 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@15.5.18 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@15.5.18 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@15.5.18 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@15.5.18 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@15.5.18 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@15.5.18 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@15.5.18 (GHSA-q8wf-6r8g-63ch)
medium
Vulnerable dependency: postcss@8 (GHSA-566m-qj78-rww5)
medium
Vulnerable dependency: postcss@8 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8 (GHSA-7fh5-64p2-3v2j)
medium
Vulnerable dependency: postcss@8 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8 (GHSA-hwj9-h5mp-3pm3)
medium
Vulnerable dependency: postcss@8 (GHSA-qx2v-qp2m-jg93)
medium
Vulnerable dependency: postcss@8 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: next@16.2.7 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@16.2.7 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@16.2.7 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@16.2.7 (GHSA-6gpp-xcg3-4w24)
medium
Vulnerable dependency: next@16.2.7 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@16.2.7 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@16.2.7 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@16.2.7 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@16.2.7 (GHSA-q8wf-6r8g-63ch)
medium
Buffer.from base64 in RenseiAI-donmai-libraries-fed764e/packages/core/src/providers/verifiers/sigstore.ts:126
medium
Buffer.from base64 in RenseiAI-donmai-libraries-fed764e/packages/core/src/providers/verifiers/cosign.ts:97
medium
Buffer.from base64 in RenseiAI-donmai-libraries-fed764e/packages/core/src/providers/verifiers/ed25519.ts:23
medium
Buffer.from base64 in RenseiAI-donmai-libraries-fed764e/packages/core/src/providers/verifiers/ed25519.ts:39
medium
Buffer.from base64 in RenseiAI-donmai-libraries-fed764e/packages/core/src/providers/verifiers/minisign.ts:44
medium
Buffer.from base64 in RenseiAI-donmai-libraries-fed764e/packages/core/src/providers/verifiers/minisign.ts:73
medium
Buffer.from base64 in RenseiAI-donmai-libraries-fed764e/packages/server/src/jwt-envelope.ts:309
info
package.json metadata
info
Transport: stdio
info
Required env vars (115)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 57 components
medium
No build provenance detected (SLSA L0)