← Back to search

@paperclipai/mcp-server

GitHub Actions Scanned 21d ago

Model Context Protocol server for Paperclip.

npm
? Not scanned yet

Versions

No versions found.

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 92

high
Hardcoded OAuth client secret in paperclipai-paperclip-fc9e9b7/server/src/__tests__/tool-access-service.test.ts auth_checker · 95%
high
Hardcoded OAuth client ID in paperclipai-paperclip-fc9e9b7/packages/adapters/claude-local/src/server/setup-token-parse.test.ts auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 171 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Vulnerable dependency: @paperclipai/server@workspace:* (GHSA-265w-rf2w-cjh4) dependency_analyzer · 95%
medium
Vulnerable dependency: @paperclipai/server@workspace:* (GHSA-3xx2-mqjm-hg9x) dependency_analyzer · 95%
medium
Vulnerable dependency: @paperclipai/server@workspace:* (GHSA-47wq-cj9q-wpmp) dependency_analyzer · 95%
medium
Vulnerable dependency: @paperclipai/server@workspace:* (GHSA-68qg-g8mg-6pr7) dependency_analyzer · 95%
medium
Vulnerable dependency: @paperclipai/server@workspace:* (GHSA-p7mm-r948-4q3q) dependency_analyzer · 95%
medium
Vulnerable dependency: @paperclipai/server@workspace:* (GHSA-vr7g-88fq-vhq3) dependency_analyzer · 95%
medium
Vulnerable dependency: @paperclipai/server@workspace:* (GHSA-w8hx-hqjv-vjcq) dependency_analyzer · 95%
medium
Vulnerable dependency: @paperclipai/server@workspace:* (GHSA-xfqj-r5qw-8g4j) dependency_analyzer · 95%
medium
Vulnerable dependency: @paperclipai/shared@workspace:* (GHSA-3pw3-v88x-xj24) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: wrangler@4.15.0 (GHSA-36p8-mvp6-cv38) dependency_analyzer · 95%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/cli/src/checks/secrets-check.ts:20 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/cli/src/commands/client/company.ts:160 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/server/src/__tests__/codex-device-login-credential-read.test.ts:94 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/server/src/__tests__/codex-device-login-credential-read.test.ts:192 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/server/src/__tests__/codex-device-login-credential-read.test.ts:221 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in paperclipai-paperclip-fc9e9b7/server/src/__tests__/company-skills-service.test.ts:373 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in paperclipai-paperclip-fc9e9b7/server/src/__tests__/company-skills-service.test.ts:374 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in paperclipai-paperclip-fc9e9b7/server/src/__tests__/company-skills-service.test.ts:375 entropy_analyzer · 70%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/server/src/__tests__/feedback-share-client.test.ts:92 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/server/src/services/company-portability.ts:1906 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/server/src/services/issues.ts:812 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/server/src/services/codex-device-login-credential-read.ts:93 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/server/src/secrets/local-encrypted-provider.ts:36 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/server/src/secrets/local-encrypted-provider.ts:209 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/server/src/secrets/local-encrypted-provider.ts:210 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/server/src/secrets/local-encrypted-provider.ts:211 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/.github/scripts/check-pr-release-bootstrap.mjs:35 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/.github/scripts/check-pr-dependencies.mjs:51 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/.github/scripts/check-pr-dependencies.mjs:52 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/duplex-body-spool.ts:337 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/duplex-bridge-broker.test.ts:130 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/sandbox-run-log-stream.ts:82 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/sandbox-callback-bridge.ts:2416 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/execution-target-sandbox.test.ts:6030 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/execution-target-stdin-race.test.ts:116 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/execution-target-stdin-race.test.ts:379 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/duplex-bridge-broker-byte-ledger.test.ts:105 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/execution-target.ts:2187 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/execution-target.ts:2311 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/execution-target.ts:2345 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/execution-target.ts:2390 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/acpx-engine/execute.test.ts:1659 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/acpx-engine/execute.test.ts:2581 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/acpx-engine/execute.test.ts:2629 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/acpx-engine/startup-characterization.test.ts:243 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/acpx-engine/startup-characterization.test.ts:280 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/adapters/codex-local/src/server/quota.ts:54 entropy_analyzer · 75%
medium
Buffer.from base64 in paperclipai-paperclip-fc9e9b7/packages/plugins/sandbox-providers/kubernetes/src/upload-interceptor.ts:120 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (348) manifest_parser · 80%
medium
Hardcoded OAuth client ID in paperclipai-paperclip-fc9e9b7/packages/adapters/claude-local/src/server/setup-token-parse.test.ts oauth_scope_analyzer · 80%
high
Deprecated implicit grant flow in paperclipai-paperclip-fc9e9b7/packages/adapters/claude-local/src/server/setup-token-parse.test.ts oauth_scope_analyzer · 85%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 126 components sbom_generator · 100%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/docker/docker-compose.yml secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/doc/DOCKER.md secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/doc/DATABASE.md secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/scripts/backfill-issue-reference-mentions.ts secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/scripts/request-hot-restart.ts secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/docs/deploy/database.md secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/docs/deploy/aws-ecs.md secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/cli/src/commands/worktree.ts secret_scanner · 85%
high
Hardcoded Password found in paperclipai-paperclip-fc9e9b7/cli/src/commands/worktree.ts secret_scanner · 65%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/cli/src/commands/routines.ts secret_scanner · 85%
high
Hardcoded Password found in paperclipai-paperclip-fc9e9b7/cli/src/commands/routines.ts secret_scanner · 65%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/cli/src/commands/db-backup.ts secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/cli/src/commands/auth-bootstrap-ceo.ts secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/server/src/index.ts secret_scanner · 85%
high
Hardcoded Password found in paperclipai-paperclip-fc9e9b7/server/src/index.ts secret_scanner · 65%
high
Hardcoded Password found in paperclipai-paperclip-fc9e9b7/server/src/services/smoke-lab.ts secret_scanner · 65%
high
Generic API Key Assignment found in paperclipai-paperclip-fc9e9b7/packages/adapter-utils/src/acpx-engine/execute.ts secret_scanner · 75%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/packages/db/scripts/clean-poisoned-claude-sessions.ts secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/packages/db/scripts/create-auth-bootstrap-invite.ts secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/packages/db/src/backup.ts secret_scanner · 85%
critical
Database URL with Password found in paperclipai-paperclip-fc9e9b7/packages/db/src/migration-runtime.ts secret_scanner · 85%
high
Hardcoded Password found in paperclipai-paperclip-fc9e9b7/packages/db/src/migration-runtime.ts secret_scanner · 65%
critical
RSA Private Key found in paperclipai-paperclip-fc9e9b7/packages/google-sheets-mcp-server/src/tools.ts secret_scanner · 95%
high
Hardcoded Password found in paperclipai-paperclip-fc9e9b7/ui/src/pages/tools/SmokeLabTab.tsx secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%