← Back to search

io.github.K-Cupples/mockmcp

K-Cupples streamable_http Scanned 1h ago

Hosted MCP endpoint with realistic fake data for prototyping agents. 12 tools, no setup.

C
71.5 / 100

Versions

0.1.0latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 12

list_orders
annotations: none low

List mock orders with optional pagination and status filter.

get_order
annotations: none low

Fetch a single mock order by ID or numeric seed.

list_users
annotations: none low

List mock users with optional pagination. Returns a deterministic set of fake users useful for prototyping agents.

get_user
annotations: none low

Fetch a single mock user by ID or numeric seed.

create_user
annotations: none low

Create a mock user. Data is not persisted — returns a fresh fake user echoing your inputs.

name string email string
list_events
annotations: none low

List mock analytics events, optionally filtered by user or event type.

limit number offset number user_id string event_type string
create_event
annotations: none low

Record a mock analytics event. Not persisted — echoes your input with a generated id and timestamp.

user_id string event_type string properties record
create_order
annotations: none low

Create a mock order. Not persisted — returns a freshly generated order echoing your items.

user_id string quantity number product_id string unit_price_cents number
list_products
annotations: none low

List mock products with optional pagination. Deterministic fake data.

get_product
annotations: none low

Fetch a single mock product by ID or numeric seed.

search_knowledge_base
annotations: none low

Search a mock knowledge base. Returns fake articles ranked by a pseudo-relevance score.

query string
send_email
annotations: none low

Send a mock email. Nothing is actually delivered — returns a success response with a generated message ID.

cc array bcc array body string from string subject string

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 37

low
Tool 'list_events' has no annotations annotation_checker · 100%
low
Tool 'list_users' has no annotations annotation_checker · 100%
low
Tool 'get_user' has no annotations annotation_checker · 100%
low
Tool 'create_user' has no annotations annotation_checker · 100%
low
Tool 'create_event' has no annotations annotation_checker · 100%
low
Tool 'list_orders' has no annotations annotation_checker · 100%
low
Tool 'get_order' has no annotations annotation_checker · 100%
low
Tool 'create_order' has no annotations annotation_checker · 100%
low
Tool 'list_products' has no annotations annotation_checker · 100%
low
Tool 'get_product' has no annotations annotation_checker · 100%
low
Tool 'search_knowledge_base' has no annotations annotation_checker · 100%
low
Tool 'send_email' has no annotations annotation_checker · 100%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.18.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.18.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.18.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: @faker-js/faker@9.0.0 (GHSA-qxc2-j82w-r537) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list_users manifest_parser · 85%
info
Tool: get_user manifest_parser · 85%
info
Tool: create_user manifest_parser · 85%
info
Tool: list_events manifest_parser · 85%
info
Tool: create_event manifest_parser · 85%
info
Tool: list_orders manifest_parser · 85%
info
Tool: get_order manifest_parser · 85%
info
Tool: create_order manifest_parser · 85%
info
Tool: list_products manifest_parser · 85%
info
Tool: get_product manifest_parser · 85%
info
Tool: search_knowledge_base manifest_parser · 85%
info
Tool: send_email manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 130 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%