← Back to search

@pandacss/mcp

GitHub Actions Scanned 30d ago

MCP server for Panda CSS AI assistants

? Not scanned yet

Versions

1.12.0latest
Jul 29, 2026
2.0.0-beta.11
Jul 24, 2026
2.0.0-beta.10
Jul 23, 2026
1.11.5
Jul 22, 2026
2.0.0-beta.9
Jul 17, 2026
+ show 20 moreshow less
2.0.0-beta.8
Jul 1, 2026
2.0.0-beta.7
Jul 1, 2026
2.0.0-beta.6
Jul 1, 2026
1.11.4
Jun 27, 2026
2.0.0-beta.5
Jun 24, 2026
2.0.0-beta.4
Jun 23, 2026
2.0.0-beta.3
Jun 19, 2026
2.0.0-beta.2
Jun 18, 2026
2.0.0-beta.1
Jun 17, 2026
2.0.0-beta.0
Jun 15, 2026
1.11.3
Jun 6, 2026
1.11.2
Jun 4, 2026
1.11.1
May 8, 2026
1.11.0
May 3, 2026
1.10.0
Apr 18, 2026
1.9.1
Mar 22, 2026
1.9.0
Mar 8, 2026
1.8.2
Feb 14, 2026
1.8.1
Jan 13, 2026
1.8.0
Jan 3, 2026

Tools 12

get_tokens
annotations: none low

Get all design tokens with their values, CSS variables, and usage examples

get_semantic_tokens
annotations: none low

Get semantic tokens with their conditional values (responsive, color modes)

get_recipes
annotations: none low

Get component recipes with their variants, default values, and usage examples

get_patterns
annotations: none low

Get layout patterns with their properties and usage examples

get_conditions
annotations: none low

Get all conditions (breakpoints, pseudo-classes, color modes) and their CSS values

get_keyframes
annotations: none low

Get keyframe animations defined in the theme

get_text_styles
annotations: none low

Get text style compositions for typography

get_layer_styles
annotations: none low

Get layer style compositions for visual styling

get_animation_styles
annotations: none low

Get animation style compositions

get_color_palette
annotations: none low

Get the color palette with all color values

get_config
annotations: none low

Get the resolved Panda CSS configuration including paths, JSX settings, and output options

get_usage_report
annotations: none low

Get a usage report of design tokens and recipes across the codebase. Shows which tokens/recipes are used, unused, or missing. Useful for auditing, cleanup, and identifying dead code.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 161

medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-icons dependency_analyzer · 60%
medium
Suspicious package name: lodash.merge dependency_analyzer · 60%
medium
Vulnerable dependency: happy-dom@20.0.11 (GHSA-6q6h-j7hj-3r64) dependency_analyzer · 95%
low
Tool 'get_tokens' has no annotations annotation_checker · 100%
low
Tool 'get_semantic_tokens' has no annotations annotation_checker · 100%
low
Tool 'get_recipes' has no annotations annotation_checker · 100%
low
Tool 'get_patterns' has no annotations annotation_checker · 100%
low
Tool 'get_conditions' has no annotations annotation_checker · 100%
low
Tool 'get_keyframes' has no annotations annotation_checker · 100%
low
Tool 'get_text_styles' has no annotations annotation_checker · 100%
low
Tool 'get_layer_styles' has no annotations annotation_checker · 100%
low
Tool 'get_animation_styles' has no annotations annotation_checker · 100%
low
Tool 'get_color_palette' has no annotations annotation_checker · 100%
low
Tool 'get_config' has no annotations annotation_checker · 100%
low
Tool 'get_usage_report' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 268 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: happy-dom@20.0.11 (GHSA-w4gp-fjgq-3q4g) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.15 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: nanoid@5.1.6 (GHSA-28wg-ghj8-5hjv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-267c-6grr-h53f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-26hh-7cqf-hhc6) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-3x4c-7xq6-9pq8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-492v-c6pp-mqqv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-9g9p-9gw9-jx7f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-ggv3-7p47-pfv8) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-h25m-26qc-wcjf) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-mwv6-3258-q52c) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-q4gf-8mx6-v5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-w37m-7fhw-fmv9) dependency_analyzer · 95%
medium
Vulnerable dependency: next@15.5.7 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.14 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.14 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-2pvr-wf23-7pc7) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-4g3v-8h47-v7g6) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-7pw4-f3q4-r2p2) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-8hv8-536x-4wqp) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-f48w-9m4c-m7f5) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-jrpj-wcv7-9fh9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.2 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.3.2 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-2pvr-wf23-7pc7) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-4g3v-8h47-v7g6) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-7pw4-f3q4-r2p2) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-8hv8-536x-4wqp) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-f48w-9m4c-m7f5) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-j687-52p2-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-jrpj-wcv7-9fh9) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.1.5 (GHSA-xr5h-phrj-8vxv) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.2.6 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.2.6 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.2.6 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.2.6 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@7.2.6 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-48hr-524c-v5w3) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-534h-c3cw-v3h9) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-934w-87qh-qr26) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-9473-5f9j-94wq) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-9pgf-384g-p7mv) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-c9cv-mq2m-ppp3) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-fx6j-w5w5-h468) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-g8wj-3cr3-6w7v) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-hg3f-28rg-4jxj) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-hxcr-hm88-mpq6) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-m3q2-p4fw-w38m) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-mm7m-92g8-7m47) dependency_analyzer · 95%
medium
Vulnerable dependency: nuxt@4.2.1 (GHSA-rq7w-g337-39qq) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-2m3v-v2m8-q956) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-479c-33wc-g2pg) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-83fc-fqcc-2hmg) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-925w-6v3x-g4j4) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-fv66-9v8q-g76r) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-rv78-f8rc-xrxh) dependency_analyzer · 95%
medium
Vulnerable dependency: react-server-dom-webpack@19.2.0 (GHSA-wx67-qw84-cm4g) dependency_analyzer · 95%
medium
Vulnerable dependency: waku@0.27.2 (GHSA-43fc-v873-qw85) dependency_analyzer · 95%
medium
Vulnerable dependency: waku@0.27.2 (GHSA-75w3-gmqx-993q) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik@1.17.2 (GHSA-p9x5-jp3h-96mm) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik-city@1.17.2 (GHSA-92j7-wgmg-f32m) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik-city@1.17.2 (GHSA-m6jq-g7gq-5w3c) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik-city@1.17.2 (GHSA-r666-8gjf-4v5f) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik-city@1.17.2 (GHSA-whhv-gg5v-864r) dependency_analyzer · 95%
medium
Vulnerable dependency: @builder.io/qwik-city@1.17.2 (GHSA-xqg6-98cw-gxhq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-2mjp-6q6p-2qxm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-35p6-xmwp-9g52) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-4992-7rv2-5pvq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-f269-vfmq-vjvj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-g8m3-5g58-fq7m) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-g9mf-h72j-4rw9) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-p88m-4jfj-68fv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-pr7r-676h-xcf6) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-v9p9-hfj2-hcw8) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-vrm6-8vpv-qv8q) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.7.0 (GHSA-vxpw-j846-p89q) dependency_analyzer · 95%
medium
Vulnerable dependency: preact@10.27.2 (GHSA-36hm-qxxp-pg3m) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-29g2-3rmr-qm68) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-2crg-3p73-43xp) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-3f6h-2hrp-w5wx) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-866w-xmhq-wj7x) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-88qp-p4qg-rqm6) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-fpg4-jhqr-589c) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-hgv7-v322-mmgr) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-j2f3-wq62-6q46) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-j62c-4x62-9r35) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-vrhm-gvg7-fpcf) dependency_analyzer · 95%
medium
Vulnerable dependency: @sveltejs/kit@2.49.1 (GHSA-wqjv-9729-c5q2) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-crpf-4hrx-3jrp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-f7gr-6p89-r883) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-h7h7-mm68-gmrc) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-m56q-vw4c-c2cp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-phwv-c562-gvmh) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-pr6f-5x2q-rwfp) dependency_analyzer · 95%
medium
Vulnerable dependency: svelte@5.45.4 (GHSA-rcqx-6q8c-2c42) dependency_analyzer · 95%
medium
Vulnerable dependency: storybook@10.1.2 (GHSA-8452-54wp-rmv6) dependency_analyzer · 95%
medium
Vulnerable dependency: storybook@10.1.2 (GHSA-mjf5-7g4m-gx5w) dependency_analyzer · 95%
medium
Vulnerable dependency: @remix-run/react@2.17.2 (GHSA-8v8x-cx79-35w7) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: get_tokens manifest_parser · 85%
info
Tool: get_semantic_tokens manifest_parser · 85%
info
Tool: get_recipes manifest_parser · 85%
info
Tool: get_patterns manifest_parser · 85%
info
Tool: get_conditions manifest_parser · 85%
info
Tool: get_keyframes manifest_parser · 85%
info
Tool: get_text_styles manifest_parser · 85%
info
Tool: get_layer_styles manifest_parser · 85%
info
Tool: get_animation_styles manifest_parser · 85%
info
Tool: get_color_palette manifest_parser · 85%
info
Tool: get_config manifest_parser · 85%
info
Tool: get_usage_report manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (13) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 236 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%