← Back to search

@roam-research/roam-mcp

Roam-Research 35 stars Scanned 20d ago

Roam Research MCP server

npm ↗
? Not scanned yet

Versions

0.9.2latest
Jul 29, 2026
0.9.1
Jul 20, 2026
0.9.0
Jul 15, 2026
0.8.1
Jul 9, 2026
0.7.4
Jun 13, 2026
+ show 12 moreshow less
0.7.3
Jun 13, 2026
0.7.2
Jun 13, 2026
0.7.1
Jun 13, 2026
0.7.0
Jun 4, 2026
0.6.5
May 26, 2026
0.5.1
Apr 11, 2026
0.5.0
Mar 19, 2026
0.4.2
Feb 20, 2026
0.4.1
Feb 20, 2026
0.4.0
Feb 20, 2026
0.3.2
Feb 19, 2026
0.3.1
Feb 19, 2026
0.5.1latest
first seen May 26, 2026
1.0.0latest
first seen May 20, 2026

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 25

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: vitest@2.1.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Buffer.from base64 in Roam-Research-roam-tools-9378447/packages/cli/src/index.ts:43 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
info
SBOM generated: 398 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
package.json metadata manifest_parser · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
Transport: stdio manifest_parser · 90%
medium
OAuth implementation without PKCE auth_checker · 75%
medium
Permission: network access detected permission_analyzer · 70%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Buffer.from base64 in packages/cli/src/index.ts:43 entropy_analyzer · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 310 components sbom_generator · 100%