← Back to search Server uses network capabilities via: fetch(), http, httpx Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path Server uses shell capabilities via: child_process, execSync(), spawn() Server uses database capabilities via: better-sqlite3, drizzle-orm Server uses env_vars capabilities via: process.env
@waiaas/mcp
WAIaaS MCP server - Model Context Protocol integration for AI agents
D
40 / 100
Versions
2.16.1-rc.2latestJul 31, 2026
2.16.1-rc.1Jul 22, 2026
2.16.0Apr 21, 2026
2.15.0Apr 13, 2026
2.15.0-rc.6Apr 12, 2026
+ show 145 moreshow less
2.14.1-rc.6Apr 10, 2026
2.14.1-rc.5Apr 10, 2026
2.14.1-rc.4Apr 9, 2026
2.14.1-rc.3Apr 9, 2026
2.14.1-rc.2Apr 9, 2026
2.14.1-rc.1Apr 9, 2026
2.14.1-rcApr 8, 2026
2.14.0Apr 8, 2026
2.14.0-rc.4Apr 7, 2026
2.14.0-rc.3Apr 7, 2026
2.13.0Apr 2, 2026
2.13.0-rc.8Apr 2, 2026
2.13.0-rc.7Apr 2, 2026
2.13.0-rc.6Apr 2, 2026
2.13.0-rc.5Apr 2, 2026
2.13.0-rc.4Apr 1, 2026
2.13.0-rc.3Apr 1, 2026
2.13.0-rcApr 1, 2026
2.12.0Mar 31, 2026
2.12.0-rc.16Mar 26, 2026
2.12.0-rc.15Mar 26, 2026
2.12.0-rc.14Mar 26, 2026
2.12.0-rc.13Mar 25, 2026
2.12.0-rc.12Mar 25, 2026
2.12.0-rc.11Mar 25, 2026
2.12.0-rc.10Mar 25, 2026
2.12.0-rc.8Mar 24, 2026
2.12.0-rc.7Mar 24, 2026
2.12.0-rc.6Mar 24, 2026
2.12.0-rc.3Mar 23, 2026
2.12.0-rc.1Mar 20, 2026
2.12.0-rcMar 19, 2026
2.11.0Mar 19, 2026
2.11.0-rc.27Mar 19, 2026
2.11.0-rc.26Mar 19, 2026
2.11.0-rc.25Mar 19, 2026
2.11.0-rc.24Mar 19, 2026
2.11.0-rc.23Mar 19, 2026
2.11.0-rc.22Mar 18, 2026
2.11.0-rc.21Mar 18, 2026
2.11.0-rc.20Mar 17, 2026
2.11.0-rc.19Mar 16, 2026
2.11.0-rc.18Mar 16, 2026
2.11.0-rc.17Mar 16, 2026
2.11.0-rc.13Mar 15, 2026
2.11.0-rc.8Mar 14, 2026
2.11.0-rc.7Mar 14, 2026
2.11.0-rc.5Mar 14, 2026
2.11.0-rc.3Mar 14, 2026
2.11.0-rc.2Mar 13, 2026
2.11.0-rc.1Mar 12, 2026
2.11.0-rcMar 12, 2026
2.10.1-rcMar 11, 2026
2.10.0Mar 11, 2026
2.10.0-rc.28Mar 11, 2026
2.10.0-rc.27Mar 10, 2026
2.10.0-rc.26Mar 10, 2026
2.10.0-rc.24Mar 10, 2026
2.10.0-rc.23Mar 9, 2026
2.10.0-rc.22Mar 9, 2026
2.10.0-rc.21Mar 9, 2026
2.10.0-rc.20Mar 9, 2026
2.10.0-rc.19Mar 9, 2026
2.10.0-rc.18Mar 9, 2026
2.10.0-rc.17Mar 9, 2026
2.10.0-rc.16Mar 9, 2026
2.10.0-rc.15Mar 9, 2026
2.10.0-rc.14Mar 8, 2026
2.10.0-rc.13Mar 8, 2026
2.10.0-rc.12Mar 7, 2026
2.10.0-rc.11Mar 7, 2026
2.10.0-rc.10Mar 7, 2026
2.10.0-rc.9Mar 6, 2026
2.10.0-rc.8Mar 6, 2026
2.10.0-rc.6Mar 6, 2026
2.10.0-rc.5Mar 5, 2026
2.10.0-rc.4Mar 5, 2026
2.10.0-rc.3Mar 5, 2026
2.10.0-rc.2Mar 4, 2026
2.10.0-rc.1Mar 4, 2026
2.10.0-rcMar 4, 2026
2.9.1-rcMar 3, 2026
2.9.0Mar 3, 2026
2.9.0-rc.19Mar 3, 2026
2.9.0-rc.18Mar 3, 2026
2.9.0-rc.17Mar 2, 2026
2.9.0-rc.15Mar 2, 2026
2.9.0-rc.14Mar 2, 2026
2.9.0-rc.13Mar 2, 2026
2.9.0-rc.12Mar 2, 2026
2.9.0-rc.11Mar 2, 2026
2.9.0-rc.10Mar 2, 2026
2.9.0-rc.9Mar 2, 2026
2.9.0-rc.8Mar 2, 2026
2.9.0-rc.7Mar 2, 2026
2.9.0-rc.6Mar 2, 2026
2.9.0-rc.5Mar 1, 2026
2.9.0-rc.4Mar 1, 2026
2.9.0-rc.3Feb 28, 2026
2.9.0-rc.2Feb 28, 2026
2.9.0-rc.1Feb 27, 2026
2.9.0-rcFeb 27, 2026
2.8.0Feb 27, 2026
2.8.0-rc.4Feb 27, 2026
2.8.0-rc.1Feb 26, 2026
2.8.0-rcFeb 26, 2026
2.7.0Feb 25, 2026
2.7.0-rc.1Feb 25, 2026
2.7.0-rcFeb 25, 2026
2.6.0Feb 24, 2026
2.6.0-rc.13Feb 24, 2026
2.6.0-rc.12Feb 24, 2026
2.6.0-rc.11Feb 24, 2026
2.6.0-rc.10Feb 24, 2026
2.6.0-rc.9Feb 23, 2026
2.6.0-rc.8Feb 23, 2026
2.6.0-rc.7Feb 23, 2026
2.6.0-rc.6Feb 23, 2026
2.6.0-rc.4Feb 23, 2026
2.6.0-rc.3Feb 23, 2026
2.6.0-rc.2Feb 22, 2026
2.6.0-rc.1Feb 22, 2026
2.6.0-rcFeb 22, 2026
2.5.0Feb 21, 2026
2.5.0-rc.1Feb 21, 2026
2.5.0-rcFeb 21, 2026
2.4.0Feb 21, 2026
2.4.0-rc.9Feb 21, 2026
2.4.0-rc.8Feb 20, 2026
2.4.0-rc.7Feb 20, 2026
2.4.0-rc.5Feb 20, 2026
2.4.0-rc.4Feb 20, 2026
2.4.0-rc.3Feb 20, 2026
2.4.0-rc.2Feb 20, 2026
2.4.0-rc.1Feb 19, 2026
2.4.0-rcFeb 19, 2026
2.3.0Feb 19, 2026
2.3.0-rc.2Feb 19, 2026
2.3.0-rc.1Feb 19, 2026
2.3.0-rcFeb 19, 2026
2.2.1Feb 18, 2026
2.2.1-rc.1Feb 18, 2026
2.1.4-rc.1Feb 18, 2026
2.1.3-rc.1Feb 18, 2026
2.0.0-rc.1Feb 17, 2026
Tools 10
defi annotations: none low
Swap tokens
waiaas_hl_get_markets annotations: none low
Get Hyperliquid perpetual market list with metadata (leverage limits, etc.).
waiaas_hl_get_funding_rates annotations: none low
Get funding rate history for a Hyperliquid perpetual market.
market string start_time string
waiaas_hl_get_spot_markets annotations: none low
Get Hyperliquid spot market list (trading pairs, token info).
list_sessions annotations: none low
List active sessions with pagination. Admin operation requiring master auth.
limit number offset number wallet_id string
connect_info annotations: none low
Get self-discovery info: accessible wallets, policies, capabilities, and AI-ready prompt. Call this first to understand your environment.
resolve_asset annotations: none low
Resolve a CAIP-19 asset identifier to token metadata. Returns address, decimals, symbol, name, network, chainId, isNative, isRegistered.
asset_id string
waiaas_pm_get_markets annotations: none low
Browse Polymarket prediction markets with optional filters.
limit string status string keyword string category string
waiaas_pm_get_market_detail annotations: none low
Get detailed information about a specific Polymarket prediction market.
condition_id string
waiaas_pm_get_events annotations: none low
Get Polymarket events (groups of related markets).
category string
Permissions 5
network medium filesystem low shell high database medium env_vars low Scan Findings 229
medium
Vulnerable dependency: hono@4.12.12 (GHSA-9vqf-7f2p-gf9v)
low
Tool 'defi' has no annotations
low
Tool 'waiaas_hl_get_markets' has no annotations
low
Tool 'waiaas_hl_get_funding_rates' has no annotations
low
Tool 'waiaas_hl_get_spot_markets' has no annotations
low
Tool 'list_sessions' has no annotations
low
Tool 'connect_info' has no annotations
low
Tool 'resolve_asset' has no annotations
low
Tool 'waiaas_pm_get_markets' has no annotations
low
Tool 'waiaas_pm_get_market_detail' has no annotations
medium
Vulnerable dependency: hono@4.12.12 (GHSA-8j4g-w8fx-2239)
low
Tool 'waiaas_pm_get_events' has no annotations
high
Hardcoded OAuth client ID in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/api-server.test.ts
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 69 direct dependencies
medium
Vulnerable dependency: turbo@2.4.0 (GHSA-3qcw-2rhx-2726)
medium
Vulnerable dependency: turbo@2.4.0 (GHSA-hcf7-66rw-9f5r)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-345p-7cg4-v4c7)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-8r9q-7v3j-jr4g)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-w48q-cv73-mx4w)
medium
Vulnerable dependency: @hono/node-server@1.19.10 (GHSA-92pp-h63x-v22m)
medium
Vulnerable dependency: @hono/node-server@1.19.10 (GHSA-frvp-7c67-39w9)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-2gcr-mfcq-wcc3)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-3hrh-pfw6-9m5x)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-458j-xx4x-4375)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-54fx-42gc-7vw4)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-69xw-7hcm-h432)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-79qm-7rj5-m7r9)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-88fw-hqm2-52qc)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-f23p-vx2j-j53r)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-f577-qrjj-4474)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-hm8q-7f3q-5f36)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-hvrm-45r6-mjfj)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-j6c9-x7qj-28xf)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-p77w-8qqv-26rm)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-qp7p-654g-cw7p)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-rv63-4mwf-qqc2)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-w62v-xxxg-mg59)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-wgpf-jwqj-8h8p)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-wwfh-h76j-fc44)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-xgm2-5f3f-mvvc)
medium
Vulnerable dependency: hono@4.12.12 (GHSA-xrhx-7g5j-rcj5)
medium
Vulnerable dependency: smol-toml@1.3.0 (GHSA-pqhp-25j4-6hq9)
medium
Vulnerable dependency: smol-toml@1.3.0 (GHSA-v3rj-xjv7-4jmq)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-356w-63v5-8wf4)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-4r4m-qw57-chr8)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-859w-5945-r5v3)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-93m4-6634-74q7)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-g4jq-h2w9-997c)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-jqfw-vq24-v9c3)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-p9ff-h696-f583)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-x574-m823-4x7w)
medium
Vulnerable dependency: vite@6.1.0 (GHSA-xcj6-pq6g-qj4x)
medium
Vulnerable dependency: vite@6.3.0 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@6.3.0 (GHSA-859w-5945-r5v3)
medium
Vulnerable dependency: vite@6.3.0 (GHSA-93m4-6634-74q7)
medium
Vulnerable dependency: vite@6.3.0 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@6.3.0 (GHSA-g4jq-h2w9-997c)
medium
Vulnerable dependency: vite@6.3.0 (GHSA-jqfw-vq24-v9c3)
medium
Vulnerable dependency: vite@6.3.0 (GHSA-p9ff-h696-f583)
medium
Vulnerable dependency: vite@6.3.0 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: pydantic@2.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.0 (PYSEC-2026-1812)
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/ripple/src/__tests__/nft-adapter.test.ts:85
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/tx-parser.ts:49
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/adapter.ts:650
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/adapter.ts:680
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/adapter.ts:683
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/adapter.ts:761
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/adapter.ts:782
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/adapter.ts:1230
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/adapter.ts:1323
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/__tests__/solana-sign-only.test.ts:356
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/__tests__/solana-sign-external-branches.test.ts:124
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/__tests__/solana-sign-external-branches.test.ts:183
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/__tests__/solana-sign-external-branches.test.ts:184
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/adapters/solana/src/__tests__/solana-sign-external-branches.test.ts:185
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/core/src/erc8128/verifier.ts:123
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/core/src/erc8128/__tests__/content-digest.test.ts:40
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/sdk/src/__tests__/owner-client.test.ts:17
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/pipeline/stage5-execute.ts:96
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/pipeline/stage5-execute.ts:102
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/pipeline/stage5-execute.ts:200
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/branches-coverage-sweep.test.ts:117
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/branches-coverage-sweep.test.ts:118
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/pyth-oracle.test.ts:40
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/pyth-oracle.test.ts:66
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/pyth-oracle.test.ts:120
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/pyth-oracle.test.ts:143
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/pyth-oracle.test.ts:144
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/pyth-oracle.test.ts:179
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/pyth-oracle.test.ts:199
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/pyth-oracle.test.ts:232
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/payment-signer.test.ts:281
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/aa-provider-crypto.test.ts:35
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/signer-capabilities.test.ts:345
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/signer-capabilities.test.ts:367
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/branch-final-push.test.ts:1502
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/branches-coverage-sweep-4.test.ts:84
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/branches-coverage-sweep-4.test.ts:165
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/branches-coverage-sweep-4.test.ts:191
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/jito-staking-integration.test.ts:242
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/jito-staking-integration.test.ts:243
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/jito-staking-integration.test.ts:265
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/jito-staking-integration.test.ts:300
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/wc-signing-bridge.test.ts:410
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/services/x402/x402-handler.ts:65
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/services/signing-sdk/sign-response-handler.ts:102
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/infrastructure/settings/settings-crypto.ts:66
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/infrastructure/smart-account/aa-provider-crypto.ts:65
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/infrastructure/oracle/pyth-feed-ids.ts:27
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/infrastructure/oracle/pyth-feed-ids.ts:28
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/infrastructure/oracle/pyth-feed-ids.ts:29
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/infrastructure/oracle/pyth-feed-ids.ts:32
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/infrastructure/oracle/pyth-feed-ids.ts:33
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/infrastructure/oracle/pyth-feed-ids.ts:42
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/infrastructure/oracle/pyth-feed-ids.ts:43
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/infrastructure/oracle/pyth-feed-ids.ts:44
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/rpc-proxy/tx-adapter.test.ts:53
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/rpc-proxy/tx-adapter.test.ts:54
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/rpc-proxy/tx-adapter.test.ts:74
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/rpc-proxy/tx-adapter.test.ts:75
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/mocks/mock-onchain-oracle.ts:43
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/api/middleware/owner-auth.ts:121
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/api/middleware/owner-auth.ts:139
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/drift-sdk-wrapper.test.ts:61
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/drift-sdk-wrapper.test.ts:101
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/drift-sdk-wrapper.test.ts:148
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1778
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1803
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1804
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1805
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1845
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1846
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1847
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1848
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1863
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1864
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1865
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1880
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/coverage-boost.test.ts:1894
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/jito-staking.test.ts:59
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/lido-staking.test.ts:190
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/drift-provider.test.ts:150
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/dcent-dex-swap.test.ts:710
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/aave-v3-positions.test.ts:235
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/aave-v3-positions.test.ts:337
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/aave-v3-positions.test.ts:428
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/aave-v3-positions.test.ts:466
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/aave-v3-positions.test.ts:558
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/aave-v3-positions.test.ts:627
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/aave-v3-positions.test.ts:696
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/actions-branches-coverage.test.ts:143
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/actions-branches-coverage.test.ts:144
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/actions-branches-coverage.test.ts:145
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/kamino-provider.test.ts:167
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/kamino-provider.test.ts:265
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/kamino-provider.test.ts:308
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/kamino-sdk-wrapper.test.ts:61
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/kamino-sdk-wrapper.test.ts:111
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/__tests__/kamino-sdk-wrapper.test.ts:138
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/common/contract-encoding.test.ts:11
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/common/contract-encoding.test.ts:27
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/common/contract-encoding.test.ts:82
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/common/contract-encoding.test.ts:86
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/providers/polymarket/signer.ts:95
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/providers/jito-staking/jito-stake-pool.ts:375
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/providers/polymarket/__tests__/signer.test.ts:209
medium
Buffer.from base64 in minhoyoo-iotrust-WAIaaS-7efab37/packages/actions/src/providers/polymarket/__tests__/signer.test.ts:233
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/admin/src/__tests__/shared-ui-components.test.tsx:14
medium
Hex string literal (>50 chars) in minhoyoo-iotrust-WAIaaS-7efab37/packages/mcp/src/tools/approve-token.ts:27
info
package.json metadata
info
pyproject.toml metadata
info
Tool: defi
info
Tool: waiaas_hl_get_markets
info
Tool: waiaas_hl_get_funding_rates
info
Tool: waiaas_hl_get_spot_markets
info
Tool: list_sessions
info
Tool: connect_info
info
Tool: resolve_asset
info
Tool: waiaas_pm_get_markets
info
Tool: waiaas_pm_get_market_detail
info
Tool: waiaas_pm_get_events
info
Transport: stdio
info
Required env vars (32)
medium
Hardcoded OAuth client ID in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/__tests__/api-server.test.ts
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/packages/core/src/i18n/en.ts
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/packages/daemon/src/api/error-hints.ts
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 87 components
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/scripts/extract-openapi.ts
high
Generic API Key Assignment found in minhoyoo-iotrust-WAIaaS-7efab37/docs/smart-account-lite-full-guide.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/docs/smart-account-lite-full-guide.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/packages/core/src/i18n/ko.ts
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/packages/shared/src/constants.ts
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/packages/admin/src/api/endpoints.ts
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/packages/cli/src/utils/password.ts
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/packages/cli/src/commands/set-master.ts
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/packages/cli/src/commands/init.ts
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/internal/design/28-daemon-lifecycle-cli.md
critical
Database URL with Password found in minhoyoo-iotrust-WAIaaS-7efab37/internal/design/09-system-components.md
critical
Database URL with Password found in minhoyoo-iotrust-WAIaaS-7efab37/internal/design/01-tech-stack-decision.md
high
Generic API Key Assignment found in minhoyoo-iotrust-WAIaaS-7efab37/internal/design/75-notification-channel-push-relay.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/internal/design/54-cli-flow-redesign.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/internal/design/38-sdk-mcp-interface.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/internal/design/45-layer3-killswitch-recovery-attacks.md
critical
RSA Private Key found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v31.11-phases/382-signer-capabilities/382-02-PLAN.md
critical
RSA Private Key found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v31.11-phases/382-signer-capabilities/design/hmac-rsapss-registry.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v33.6-phases/48-monorepo-scaffold-core/48-03-PLAN.md
critical
Database URL with Password found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v33.6-phases/03-system-architecture/03-RESEARCH.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v33.6-phases/131-ssrf-guard-x402-handler-payment-signing/131-02-PLAN.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v33.6-phases/49-daemon-infra/49-02-PLAN.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v33.6-phases/65-pages-components-api-design/65-01-PLAN.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v33.6-phases/67-auth-api-client-components/67-02-PLAN.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v33.6-phases/59-rest-api-expansion/59-02-PLAN.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v33.6-phases/194-cli-daemon-start-dx/194-01-PLAN.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v33.6-phases/18-배포-타겟별-테스트/18-RESEARCH.md
high
Hardcoded Password found in minhoyoo-iotrust-WAIaaS-7efab37/.planning/milestones/v33.6-phases/51-cli-e2e-integration/51-01-PLAN.md
medium
No build provenance detected (SLSA L0)