← Back to search

xcomet-mcp-server

GitHub Actions Scanned 29d ago

MCP Server for xCOMET translation quality evaluation

npm ↗
B
78.3 / 100

Versions

0.6.3latest
Jul 27, 2026
0.6.2
Jul 13, 2026
0.6.1
May 8, 2026
0.6.0
Apr 24, 2026
0.5.0
Apr 23, 2026
+ show 14 moreshow less
0.4.0
Apr 22, 2026
0.3.9
Apr 10, 2026
0.3.8
Apr 10, 2026
0.3.7
Apr 10, 2026
0.3.6
Feb 2, 2026
0.3.5
Dec 26, 2025
0.3.4
Dec 24, 2025
0.3.3
Dec 24, 2025
0.3.2
Dec 24, 2025
0.3.1
Dec 23, 2025
0.3.0
Dec 23, 2025
0.2.3
Dec 23, 2025
0.2.2
Dec 21, 2025
0.2.1
Dec 21, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 3

xcomet_evaluate
annotations: none low

xcomet_detect_errors
annotations: none low

xcomet_batch_evaluate
annotations: none low

Permissions 3

filesystem low
Server uses filesystem capabilities via: os
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 20

low
Tool 'xcomet_evaluate' has no annotations annotation_checker · 100%
low
Tool 'xcomet_detect_errors' has no annotations annotation_checker · 100%
low
Tool 'xcomet_batch_evaluate' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.22.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.22.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.22.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.0.16 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: xcomet_evaluate manifest_parser · 85%
info
Tool: xcomet_detect_errors manifest_parser · 85%
info
Tool: xcomet_batch_evaluate manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (6) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 258 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%