← Back to search

@spectrum-charts/mcp

GitHub Actions Scanned 29d ago

MCP Server for React Spectrum Charts documentation

npm ↗
C
71.8 / 100

Versions

1.48.0latest
Jul 27, 2026
1.47.0
Jul 21, 2026
1.46.0
Jul 15, 2026
1.45.0
Jun 10, 2026
1.44.0
May 8, 2026
+ show 19 moreshow less
1.43.0
May 5, 2026
1.42.0
Apr 22, 2026
1.41.0
Apr 20, 2026
1.40.0
Apr 14, 2026
1.39.0
Apr 14, 2026
1.38.0
Apr 9, 2026
1.37.0
Mar 31, 2026
1.36.0
Mar 25, 2026
1.35.0
Mar 17, 2026
1.34.0
Mar 13, 2026
1.33.0
Mar 13, 2026
1.32.0
Feb 17, 2026
1.31.0
Feb 12, 2026
1.30.0
Feb 5, 2026
1.29.0
Jan 29, 2026
1.28.0
Jan 22, 2026
1.27.0
Jan 16, 2026
1.26.0
Jan 6, 2026
0.1.0
Dec 12, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

list_rsc_docs
annotations: none low

Lists all React Spectrum Charts documentation pages with their IDs and titles.

read_rsc_doc
annotations: none low

Returns the full markdown content for a React Spectrum Charts documentation page.

list_design_tokens
annotations: none low

Lists Spectrum 2 design token categories (colors, typography, spacing) available via read_design_tokens.

read_design_tokens
annotations: none low

Returns the full set of Spectrum 2 design tokens (values, not just names) for a given category.

list_chart_features
annotations: none low

Lists every engine-agnostic chart feature RSC implements (marks, decorations, and chart-level

read_chart_feature
annotations: none low

Returns full detail for a chart feature: description, related design tokens, RSC (S1/S2) support

Permissions 4

network medium
Server uses network capabilities via: axios, fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 74

low
Tool 'list_rsc_docs' has no annotations annotation_checker · 100%
low
Tool 'read_rsc_doc' has no annotations annotation_checker · 100%
low
Tool 'list_design_tokens' has no annotations annotation_checker · 100%
low
Tool 'read_design_tokens' has no annotations annotation_checker · 100%
low
Tool 'list_chart_features' has no annotations annotation_checker · 100%
low
Tool 'read_chart_feature' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: @babel/core@7.20.5 (GHSA-4x5r-pxfx-6jf8) dependency_analyzer · 95%
medium
Vulnerable dependency: @babel/runtime@7.20.6 (GHSA-968p-4wvh-cqc8) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.3 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.24.3 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-35jp-ww65-95wh) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-3g43-6gmg-66jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-3p68-rc4w-qgx5) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-3w6x-2g7m-8v23) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-43fc-jf86-j433) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-445q-vr5w-6q77) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-4hjh-wcwx-xvwj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-5c9x-8gcm-mpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-62hf-57xw-28j9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-6chq-wfr3-2hj9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-777c-7fjr-54vf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-898c-q2cr-xwhg) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-fvcv-3m26-pcqx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-hfxv-24rg-xrqf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-j5f8-grm9-p9fc) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-jqh4-m9w3-8hp9) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-jr5f-v2jv-69x6) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-m7pr-hjqh-92cm) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-p92q-9vqr-4j8v) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-pf86-5x62-jrwf) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-pmwg-cvhr-8vh7) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-q8qp-cvcw-x6jj) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-vf2m-468p-8v99) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-w9j2-pvgh-6h63) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-xhjh-pmcv-23jw) dependency_analyzer · 95%
medium
Vulnerable dependency: axios@1.7.7 (GHSA-xx6v-rp6x-q39c) dependency_analyzer · 95%
medium
Vulnerable dependency: glob@10.4.1 (GHSA-5j98-mcp5-4vw2) dependency_analyzer · 95%
medium
Vulnerable dependency: storybook@8.4.1 (GHSA-8452-54wp-rmv6) dependency_analyzer · 95%
medium
Vulnerable dependency: storybook@8.4.1 (GHSA-mjf5-7g4m-gx5w) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-38r7-794h-5758) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-4vvj-4cpr-p986) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-8fgc-7cc6-rx7x) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack@5.75.0 (GHSA-hc6q-2mpp-qw7j) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack-dev-server@4.11.1 (GHSA-4v9v-hfq4-rm2v) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack-dev-server@4.11.1 (GHSA-79cf-xcqc-c78w) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack-dev-server@4.11.1 (GHSA-9jgg-88mc-972h) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack-dev-server@4.11.1 (GHSA-f5vj-f2hx-8m93) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack-dev-server@4.11.1 (GHSA-m28w-2pqf-7qgj) dependency_analyzer · 95%
medium
Vulnerable dependency: webpack-dev-server@4.11.1 (GHSA-mx8g-39q3-5c79) dependency_analyzer · 95%
medium
Vulnerable dependency: immer@9.0.0 (GHSA-33f9-j839-rf8h) dependency_analyzer · 95%
medium
Vulnerable dependency: immer@9.0.0 (GHSA-c36v-fmgq-m8hx) dependency_analyzer · 95%
medium
Vulnerable dependency: uuid@9.0.0 (GHSA-w5hq-g745-h8pq) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list_rsc_docs manifest_parser · 85%
info
Tool: read_rsc_doc manifest_parser · 85%
info
Tool: list_design_tokens manifest_parser · 85%
info
Tool: read_design_tokens manifest_parser · 85%
info
Tool: list_chart_features manifest_parser · 85%
info
Tool: read_chart_feature manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 107 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%