Grades are a hygiene check, not a security guarantee.

MCP, MCP server

AiPayGen 65+ AI Tools as an MCP Server

AiPayGen 65+ AI Tools as an MCP Server, an MCP server listed in the PlugVet directory.

Compatibility: Not stated.

Grade D

Two or more Medium findings, or a High finding. Only try it in a sandbox.

Graded by PlugVetRubric v2

Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.

Rescanned at commit 36370d331369, unchanged since the check below.

Pattern found, check before installing

The checks matched a pattern that needs a closer look. It does not mean the code is harmful. Read the quoted lines below.

  • NETWORK_HOST_FROM_INPUT High

    host from input plus a credential path in operative code

NETWORK_HOST_FROM_INPUT SECRETS_PATH_CREDENTIAL OBFUSCATION_MINIFIED_PAYLOAD

Why this grade

  • NETWORK_HOST_FROM_INPUT High

    A file takes a URL or endpoint as input and has no fixed host list.

    agent_network.py, line 356 return True # No fingerprint available (e.g., curl with no headers)

  • SECRETS_PATH_CREDENTIAL Medium

    Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).

    functional_tests.sh, line 11 ORACLE_SSH="ssh -i ~/.ssh/oracle_key -o StrictHostKeyChecking=no [email protected]"

  • OBFUSCATION_MINIFIED_PAYLOAD Medium

    Contains a very long line with almost no spaces in a script or style file.

    requests.jsonl, line 1 {"ts": "2026-03-13T21:58:14.103936Z", "method": "GET", "path": "/sdk/code", "status": 200, "latency_ms": 0.4, "ip": "127.0.0.1", "api_key": "", "user_agent": "werkzeug/2.2.2"}

Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.

If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.

Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.

What was checked

Plain notes from the hygiene checks.

  • Permissions

    Concern

    can delete files.

    PERMISSION_DELETE_FILES

    check_payments.py, line 69

    subprocess.run(["wall", f"$$$ STRIPE HAS ${avail+pending:.2f} $$$"], timeout=3, capture_output=True)

    file_storage.py, line 94

    os.remove(row["path"])

    health_monitor.py, line 31

    result = subprocess.run(["pgrep", "-f", "cloudflared"], capture_output=True, timeout=5)

    Show more

    health_monitor.py, line 39

    result = subprocess.run(["pgrep", "-c", "-f", "gunicorn"], capture_output=True, timeout=5, text=True)

    health_monitor.py, line 62

    subprocess.run(["wall", f"$$$ FIRST PAYMENT: ${c.amount/100:.2f} $$$"], timeout=3, capture_output=True)

    health_monitor.py, line 72

    subprocess.run(["wall", msg], timeout=3, capture_output=True)

    telegram_bot.py, line 233

    subprocess.run(["pkill", "-HUP", "-f", "gunicorn.*master"], timeout=5)

    telegram_bot.py, line 266

    os.remove(ALERTS_FLAG_FILE)

    mcp_tools/code_tools.py, line 56

    result = subprocess.run(

    routes/ai_tools.py, line 1590

    result = subprocess.run(

  • Install and update

    Pass

    No install-time script found, and dependencies are pinned or absent.

  • Network

    Serious

    accepts a host from input, with no fixed list in this file.

    NETWORK_HOST_FROM_INPUT

    agent_network.py, line 356

    return True # No fingerprint available (e.g., curl with no headers)

    api_discovery.py, line 68

    def fetch(self, url: str, timeout: int = 15):

    api_discovery.py, line 71

    resp = requests.get(url, timeout=timeout, headers={"User-Agent": "AiPayGen-Discovery/1.0"})

    Show more

    api_discovery.py, line 102

    resp = self.fetch("https://api.apis.guru/v2/list.json")

    api_discovery.py, line 177

    resp = self.fetch(

    api_discovery.py, line 208

    resp = self.fetch(f"https://www.reddit.com/r/{sub}/top.json?t=month&limit=5")

    api_discovery.py, line 243

    resp = self.fetch(

    api_discovery.py, line 280

    resp = self.fetch(url)

    app.py, line 1318

    "quick_start": "curl -X POST https://api.aipaygen.com/auth/generate-key -d '{}'",

    app.py, line 1568

    "command": "curl -s -X POST https://api.aipaygen.com/auth/generate-key -H 'Content-Type: application/json' -d '{\"label\": \"my-key\"}' | grep -o 'apk_[^\"]*'",

    app.py, line 1574

    "example": f"curl -X POST https://api.aipaygen.com{path} -H 'Authorization: Bearer apk_YOUR_KEY' -H 'Content-Type: application/json' -d '...'",

    app.py, line 2107

    "command": "curl -X POST https://api.aipaygen.com/auth/generate-key -H 'Content-Type: application/json' -d '{\"label\": \"my-key\"}'",

    auto-sweep.sh, line 20

    API_LOCAL=$(curl -s -o /dev/null -w "%{http_code}" --max-time 5 http://127.0.0.1:5001/health 2>/dev/null || echo "000")

    auto-sweep.sh, line 21

    API_PUBLIC=$(curl -s -o /dev/null -w "%{http_code}" --max-time 10 https://api.aipaygen.com/health 2>/dev/null || echo "000")

    auto-sweep.sh, line 46

    MCP_LOCAL=$(curl -s -o /dev/null -w "%{http_code}" --max-time 5 http://127.0.0.1:5002/health 2>/dev/null || echo "000")

    auto-sweep.sh, line 47

    MCP_PUBLIC=$(curl -s -o /dev/null -w "%{http_code}" --max-time 10 https://mcp.aipaygen.com/health 2>/dev/null || echo "000")

    docs/plans/2026-03-01-web-intelligence-redesign.md, line 27

    2. `requests.get(url, timeout=10, headers={"User-Agent": "Mozilla/5.0..."})`

  • Secrets

    Concern

    reads a credential or environment file.

    SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

    agent_identity.py, line 9

    JWT_SECRET = os.environ.get("JWT_SECRET", "")

    api_discovery.py, line 11

    APIFY_TOKEN = os.getenv("APIFY_TOKEN")

    functional_tests.sh, line 11

    ORACLE_SSH="ssh -i ~/.ssh/oracle_key -o StrictHostKeyChecking=no [email protected]"

    Show more

    apify_client.py, line 5

    APIFY_TOKEN = os.getenv("APIFY_TOKEN")

    app.py, line 144

    _env_enc = os.path.join(os.path.dirname(__file__), ".env.enc")

    app.py, line 145

    _env_plain = os.path.join(os.path.dirname(__file__), ".env")

    app.py, line 158

    # Also load plain .env for any additional keys (won't override encrypted ones)

    app.py, line 179

    app.secret_key = os.getenv("ADMIN_SECRET") or _get_or_create_secret()

    app.py, line 209

    ADMIN_SECRET = os.getenv("ADMIN_SECRET", "")

    app.py, line 267

    ANTHROPIC_API_KEY = os.getenv("ANTHROPIC_API_KEY")

    app.py, line 268

    STRIPE_SECRET_KEY = os.getenv("STRIPE_SECRET_KEY", "")

    app.py, line 269

    STRIPE_WEBHOOK_SECRET = os.getenv("STRIPE_WEBHOOK_SECRET", "")

    app.py, line 2273

    "/.git/config", "/.env", "/.htaccess", "/phpinfo.php",

    auto-discover-tools.sh, line 30

    set -a; source .env 2>/dev/null; set +a

    check_payments.py, line 17

    env_path = os.path.join(os.path.dirname(os.path.abspath(__file__)), ".env")

    deploy.sh, line 113

    --exclude='.env'

  • Agent instructions

    Pass

    No instruction to ignore earlier instructions or to hide a step.

  • Obfuscation

    Concern

    contains a minified payload.

    OBFUSCATION_MINIFIED_PAYLOAD

    requests.jsonl, line 1

    {"ts": "2026-03-13T21:58:14.103936Z", "method": "GET", "path": "/sdk/code", "status": 200, "latency_ms": 0.4, "ip": "127.0.0.1", "api_key": "", "user_agent": "werkzeug/2.2.2"}

    update.log.old, line 1

    [2026-03-29 22:00:01 UTC] Checking for updates...

    routes/admin.py, line 233

    <title>Admin Login</title><style>*{box-sizing:border-box;margin:0;padding:0}body{font-family:-apple-system,sans-serif;background:#0a0a0a;color:#e8e8e8;min-height:100vh;display:flex

    Show more

    routes/admin.py, line 236

    <title>Admin Login</title><style>*{box-sizing:border-box;margin:0;padding:0}body{font-family:-apple-system,sans-serif;background:#0a0a0a;color:#e8e8e8;min-height:100vh;display:flex

    routes/meta.py, line 1

    """Meta routes - landing page, docs, discover, health, well-known, openapi, SEO."""

    sdk/python/aipaygent-mcp/mcp-publisher, line 1

    ELF���@�@8@@@@PPxxxdd

    static/app/_expo/static/js/web/entry-0dc18d79b29ba37880ae7b905b8d8949.js, line 1

    var __BUNDLE_START_TIME__=globalThis.nativePerformanceNow?nativePerformanceNow():Date.now(),__DEV__=false,process=globalThis.process||{},__METRO_GLOBAL_PREFIX__='';process.env=proc

  • Licence

    Pass

    A licence file is present (LICENSE).

  • Maintainer activity

    Pass

    The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 36370d331369. can delete files. accepts a host from input, with no fixed list in this file. reads a credential or environment file. contains a minified payload.

Date and source

Date checked:

View source

github.com

Commit graded: 36370d3313697a8551ff989358377184354cda16

This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.

Read how this letter is chosen