MCP, MCP server
Ast Mcp Server
Ast Mcp Server, an MCP server listed in the PlugVet directory.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
SECRETS_PATH_CREDENTIAL
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
scripts/local-registry-consumer-smoke.mjs, line 264
NPM_CONFIG_USERCONFIG: path.join(temp, "authority.npmrc"),
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
scripts/fixtures/fake-agent.mjs, line 130
fs.rmSync(statePath, { force: true });
scripts/fixtures/fake-agent.mjs, line 193
fs.rmSync(statePath, { force: true });
scripts/fixtures/fake-agent.mjs, line 266
fs.rmSync(statePath, { force: true });
Show more
scripts/fixtures/fake-agent.mjs, line 302
fs.rmSync(statePath, { force: true });
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
scripts/registry-consumer-smoke.mjs, line 206
response = await globalThis.fetch(url, {
scripts/release-preflight.mjs, line 1086
response = await globalThis.fetch(url, {
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL
scripts/dsh-adapter-smoke.mjs, line 631
const nonce = process.env.AST_H05_NONCE, ownerToken = process.env.AST_H05_OWNER_TOKEN;
scripts/dsh-adapter-smoke.mjs, line 1188
assert(rowConfig?.env?.AST_MCP_APPLY_GUARD === "deny", "patch must set AST_MCP_APPLY_GUARD=deny");
scripts/local-registry-consumer-smoke.mjs, line 264
NPM_CONFIG_USERCONFIG: path.join(temp, "authority.npmrc"),
Show more
scripts/dsh-adapter-smoke.mjs, line 1190
rowConfig?.env?.AST_MCP_TEXT_PROJECTION === "canonical_json",
scripts/local-registry-consumer-smoke.mjs, line 850
const npmUserconfig = path.join(consumerTemp, ".npmrc");
scripts/package-smoke.mjs, line 135
await writeFile(path.join(upgradeHome, ".npmrc"), "token=smoke-sentinel\n");
scripts/package-smoke.mjs, line 542
(await readFile(path.join(upgradeHome, ".npmrc"), "utf8")) !== "token=smoke-sentinel\n" ||
scripts/registry-consumer-smoke.mjs, line 1198
const npmUserconfig = path.join(consumerTemp, ".npmrc");
scripts/release-preflight.mjs, line 254
if (userconfig !== path.join(runnerTemp, ".npmrc")) {
scripts/release-preflight.mjs, line 915
github_token_present: Boolean(process.env.GITHUB_TOKEN),
scripts/release-preflight.mjs, line 916
gh_token_present: Boolean(process.env.GH_TOKEN),
scripts/release-preflight.mjs, line 917
node_auth_token_present: Boolean(process.env.NODE_AUTH_TOKEN),
scripts/release-preflight.mjs, line 918
npm_token_present: Boolean(process.env.NPM_TOKEN),
scripts/release-preflight.mjs, line 919
oidc_token_present: Boolean(process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN),
scripts/release-preflight.mjs, line 920
oidc_url_present: Boolean(process.env.ACTIONS_ID_TOKEN_REQUEST_URL),
scripts/release-preflight.mjs, line 1249
const token = process.env.GITHUB_TOKEN;
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
the file cap was reached before every file was read.
OBFUSCATION_FILE_CAP_REACHED
src/tools/rename_symbol.ts, line 1
import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 27d7c2b0f5a3. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file. the file cap was reached before every file was read.
Date and source
Date checked:
github.com
Commit graded: 27d7c2b0f5a36d5592b490f12940235a820732ef
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.