← Back to search Server uses network capabilities via: fetch(), http Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, open(), os, path, pathlib, shutil, tempfile Server uses shell capabilities via: child_process, execSync(), spawn(), subprocess Server uses env_vars capabilities via: os.environ, process.env
@salesforce/b2c-dx-mcp
MCP server for B2C Commerce developer experience tools
D
40 / 100
Versions
1.9.3latestJul 31, 2026
0.0.0-nightly.20260731031142Jul 31, 2026
0.0.0-nightly.20260730031020Jul 30, 2026
0.0.0-nightly.20260729030911Jul 29, 2026
0.0.0-nightly.20260728031024Jul 28, 2026
+ show 177 moreshow less
1.9.2Jul 27, 2026
0.0.0-nightly.20260727031328Jul 27, 2026
0.0.0-nightly.20260724031101Jul 24, 2026
1.9.1Jul 23, 2026
0.0.0-nightly.20260723031046Jul 23, 2026
0.0.0-nightly.20260722031057Jul 22, 2026
0.0.0-nightly.20260721031055Jul 21, 2026
0.0.0-nightly.20260720031228Jul 20, 2026
0.0.0-nightly.20260717031025Jul 17, 2026
1.9.0Jul 16, 2026
0.0.0-nightly.20260716031019Jul 16, 2026
1.8.1Jul 15, 2026
0.0.0-nightly.20260715031023Jul 15, 2026
0.0.0-nightly.20260714030945Jul 14, 2026
1.8.0Jul 13, 2026
0.0.0-nightly.20260713031302Jul 13, 2026
0.0.0-nightly.20260710031349Jul 10, 2026
1.7.0Jul 9, 2026
0.0.0-nightly.20260709161834Jul 9, 2026
1.6.0Jul 8, 2026
1.5.0Jul 8, 2026
0.0.0-nightly.20260708031122Jul 8, 2026
0.0.0-nightly.20260707031415Jul 7, 2026
0.0.0-nightly.20260706031701Jul 6, 2026
0.0.0-nightly.20260703031332Jul 3, 2026
0.0.0-nightly.20260702031652Jul 2, 2026
0.0.0-nightly.20260701031954Jul 1, 2026
0.0.0-nightly.20260630031813Jun 30, 2026
1.4.1Jun 29, 2026
0.0.0-nightly.20260629032150Jun 29, 2026
0.0.0-nightly.20260626031910Jun 26, 2026
0.0.0-nightly.20260625031817Jun 25, 2026
0.0.0-nightly.20260624031832Jun 24, 2026
1.4.0Jun 23, 2026
0.0.0-nightly.20260623031810Jun 23, 2026
0.0.0-nightly.20260622032236Jun 22, 2026
1.3.3Jun 20, 2026
0.0.0-nightly.20260619032154Jun 19, 2026
1.3.2Jun 19, 2026
1.3.1Jun 18, 2026
0.0.0-nightly.20260618032009Jun 18, 2026
1.3.0Jun 17, 2026
0.0.0-nightly.20260617032053Jun 17, 2026
0.0.0-nightly.20260616032109Jun 16, 2026
0.0.0-nightly.20260615032241Jun 15, 2026
0.0.0-nightly.20260612032057Jun 12, 2026
1.2.1Jun 11, 2026
0.0.0-nightly.20260611031817Jun 11, 2026
0.0.0-nightly.20260610031911Jun 10, 2026
1.2.0Jun 9, 2026
0.0.0-nightly.20260609031930Jun 9, 2026
0.0.0-nightly.20260608032206Jun 8, 2026
0.0.0-nightly.20260605032030Jun 5, 2026
0.0.0-nightly.20260604032151Jun 4, 2026
0.0.0-nightly.20260603032225Jun 3, 2026
0.0.0-nightly.20260602032210Jun 2, 2026
0.0.0-nightly.20260601032236Jun 1, 2026
0.0.0-nightly.20260529032030May 29, 2026
1.1.3May 29, 2026
0.0.0-nightly.20260528032208May 28, 2026
0.0.0-nightly.20260527032048May 27, 2026
0.0.0-nightly.20260526031944May 26, 2026
0.0.0-nightly.20260525032118May 25, 2026
0.0.0-nightly.20260522031954May 22, 2026
0.0.0-nightly.20260521031952May 21, 2026
1.1.2May 20, 2026
0.0.0-nightly.20260520031912May 20, 2026
0.0.0-nightly.20260519031905May 19, 2026
0.0.0-nightly.20260518032050May 18, 2026
0.0.0-nightly.20260515031926May 15, 2026
0.0.0-nightly.20260514031721May 14, 2026
0.0.0-nightly.20260513031847May 13, 2026
1.1.1May 13, 2026
0.0.0-nightly.20260512031815May 12, 2026
0.0.0-nightly.20260511032033May 11, 2026
0.0.0-nightly.20260508031508May 8, 2026
1.1.0May 8, 2026
0.0.0-nightly.20260507031825May 7, 2026
0.0.0-nightly.20260506031756May 6, 2026
0.0.0-nightly.20260505031620May 5, 2026
0.0.0-nightly.20260504031851May 4, 2026
0.0.0-nightly.20260501031717May 1, 2026
0.0.0-nightly.20260430031752Apr 30, 2026
0.0.0-nightly.20260429031724Apr 29, 2026
0.0.0-nightly.20260428031729Apr 28, 2026
0.0.0-nightly.20260427031733Apr 27, 2026
1.0.14Apr 25, 2026
1.0.13Apr 24, 2026
0.0.0-nightly.20260424031543Apr 24, 2026
1.0.12Apr 23, 2026
0.0.0-nightly.20260423030025Apr 23, 2026
1.0.11Apr 22, 2026
0.0.0-nightly.20260422030024Apr 22, 2026
1.0.10Apr 22, 2026
0.0.0-nightly.20260421030031Apr 21, 2026
1.0.9Apr 21, 2026
0.0.0-nightly.20260420030038Apr 20, 2026
1.0.8Apr 17, 2026
0.0.0-nightly.20260417030027Apr 17, 2026
0.0.0-nightly.20260416030051Apr 16, 2026
0.0.0-nightly.20260415030027Apr 15, 2026
1.0.7Apr 14, 2026
0.0.0-nightly.20260414030028Apr 14, 2026
1.0.6Apr 13, 2026
0.0.0-nightly.20260413030106Apr 13, 2026
0.0.0-nightly.20260410030056Apr 10, 2026
1.0.5Apr 9, 2026
0.0.0-nightly.20260409030001Apr 9, 2026
0.0.0-nightly.20260408030026Apr 8, 2026
0.0.0-nightly.20260407030012Apr 7, 2026
1.0.4Apr 6, 2026
0.0.0-nightly.20260403025949Apr 3, 2026
0.0.0-nightly.20260402030000Apr 2, 2026
1.0.3Apr 1, 2026
0.0.0-nightly.20260401030023Apr 1, 2026
0.0.0-nightly.20260331030001Mar 31, 2026
1.0.2Mar 30, 2026
0.0.0-nightly.20260330030012Mar 30, 2026
1.0.0Mar 27, 2026
0.0.0-nightly.20260327025958Mar 27, 2026
0.0.0-nightly.20260326030002Mar 26, 2026
0.0.0-nightly.20260325025819Mar 25, 2026
0.5.4Mar 24, 2026
0.5.3Mar 24, 2026
0.0.0-nightly.20260324025611Mar 24, 2026
0.0.0-nightly.20260323025940Mar 23, 2026
0.5.2Mar 22, 2026
0.0.0-nightly.20260320025457Mar 20, 2026
0.5.1Mar 19, 2026
0.0.0-nightly.20260319025924Mar 19, 2026
0.0.0-nightly.20260318025909Mar 18, 2026
0.5.0Mar 18, 2026
0.0.0-nightly.20260317025551Mar 17, 2026
0.4.14Mar 16, 2026
0.0.0-nightly.20260316030026Mar 16, 2026
0.4.13Mar 13, 2026
0.4.12Mar 13, 2026
0.0.0-nightly.20260313025411Mar 13, 2026
0.4.11Mar 12, 2026
0.0.0-nightly.20260312025534Mar 12, 2026
0.4.10Mar 11, 2026
0.0.0-nightly.20260311025214Mar 11, 2026
0.4.9Mar 10, 2026
0.0.0-nightly.20260310025241Mar 10, 2026
0.4.8Mar 9, 2026
0.0.0-nightly.20260309025758Mar 9, 2026
0.0.0-nightly.20260306025424Mar 6, 2026
0.4.7Mar 5, 2026
0.0.0-nightly.20260305025439Mar 5, 2026
0.0.0-nightly.20260304025255Mar 4, 2026
0.0.0-nightly.20260303025716Mar 3, 2026
0.4.6Mar 2, 2026
0.4.5Mar 2, 2026
0.0.0-nightly.20260302025501Mar 2, 2026
0.0.0-nightly.20260227025412Feb 27, 2026
0.0.0-nightly.20260226025523Feb 26, 2026
0.4.4Feb 25, 2026
0.0.0-nightly.20260225025747Feb 25, 2026
0.4.3Feb 25, 2026
0.4.2Feb 24, 2026
0.4.1Feb 24, 2026
0.0.0-nightly.20260224025713Feb 24, 2026
0.4.0Feb 24, 2026
0.0.0-nightly.20260223025834Feb 23, 2026
0.0.0-nightly.20260220025543Feb 20, 2026
0.0.0-nightly.20260219025744Feb 19, 2026
0.0.0-nightly.20260218025815Feb 18, 2026
0.0.0-nightly.20260217025715Feb 17, 2026
0.0.0-nightly.20260216025847Feb 16, 2026
0.3.2Feb 13, 2026
0.0.0-nightly.20260213025933Feb 13, 2026
0.3.1Feb 12, 2026
0.0.0-nightly.20260211025956Feb 11, 2026
0.0.0-nightly.20260210025957Feb 10, 2026
0.0.0-nightly.20260210003245Feb 10, 2026
0.0.0-nightly.20260209025906Feb 9, 2026
0.0.1Jan 29, 2026
Tools 1
test-server annotations: none low
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 88
low
Tool 'test-server' has no annotations
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/defaults.ts
medium
Vulnerable dependency: http-proxy-middleware@3.0.5 (GHSA-64mm-vxmg-q3vj)
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/middleware.test.ts
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/oauth.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/oauth.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/resolve.test.ts
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/oauth-implicit.test.ts
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/oauth-pkce.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/clients/cip.test.ts
high
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/cli/base-command.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/cli/lifecycle.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/cli/job-command.test.ts
medium
Vulnerable dependency: undici@7.28.0 (GHSA-jr45-8vmc-qm54)
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/cli/am-command.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/config/sources.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/config/resolver.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/config/dw-json.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/config/resolved-config.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/config/env-source.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/config/redaction.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/auth/index.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/auth/oauth.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/clients/am-api.ts
medium
Vulnerable dependency: undici@7.28.0 (GHSA-m8rv-5g2x-5cg5)
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/clients/granular-replications.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/clients/cdn-zones.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/clients/ods.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/clients/custom-apis.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/clients/slas-admin.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/clients/scapi-schemas.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/operations/roles/index.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/operations/orgs/index.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/operations/users/index.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/config/sources/env-source.ts
medium
Vulnerable dependency: undici@7.28.0 (GHSA-v3r7-h72x-cjcm)
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-cli/test/helpers/test-setup.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-cli/test/commands/setup/inspect.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-cli/test/functional/e2e/auth-token.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-cli/test/functional/e2e/sandbox-lifecycle.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-dx-mcp/test/tools/diagnostics/config-inspect.test.ts
high
Hardcoded OAuth client secret in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-vs-extension/src/walkthrough/commands.ts
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 79 direct dependencies
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: js-yaml@4.2.0 (GHSA-52cp-r559-cp3m)
medium
Vulnerable dependency: js-yaml@4.2.0 (GHSA-5p4m-2wfm-xmqj)
medium
Vulnerable dependency: open@catalog: (GHSA-28xh-wpgr-7fm8)
medium
Vulnerable dependency: protobufjs@7.6.4 (GHSA-j3f2-48v5-ccww)
medium
Vulnerable dependency: undici@7.28.0 (GHSA-4cwx-7wf7-3272)
medium
Vulnerable dependency: undici@7.28.0 (GHSA-8xcm-r25x-g524)
medium
Vulnerable dependency: http-proxy-middleware@3.0.5 (GHSA-gcq2-9pq2-cxqm)
medium
Vulnerable dependency: postcss@8.5.15 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.5.15 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: esbuild@0.24.0 (GHSA-67mh-4wv8-2f99)
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/oauth-jwt.test.ts:290
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/oauth-jwt.test.ts:327
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/client-credentials.test.ts:15
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/client-credentials.test.ts:38
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/client-credentials.test.ts:44
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/auth/oauth.ts:37
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/auth/oauth.ts:38
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/logging/logger.ts:43
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-cli/test/functional/e2e/auth-token.test.ts:28
medium
Buffer.from base64 in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-cli/src/commands/mrt/bundle/save.ts:109
info
package.json metadata
info
Tool: test-server
info
Transport: stdio
info
Required env vars (89)
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/defaults.ts
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/oauth.test.ts
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/oauth-implicit.test.ts
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/auth/oauth-pkce.test.ts
medium
Hardcoded OAuth client ID in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/test/cli/base-command.test.ts
high
Deprecated implicit grant flow in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/auth/oauth-implicit.ts
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 127 components
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/docs/api-readme.md
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/README.md
critical
RSA Private Key found in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/clients/cdn-zones.generated.ts
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/logging/index.ts
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-tooling-sdk/src/config/sources/env-source.ts
high
Hardcoded Password found in SalesforceCommerceCloud-b2c-developer-tooling-c0bcd60/packages/b2c-vs-extension/src/walkthrough/commands.ts
medium
No build provenance detected (SLSA L0)