MCP, MCP server
basehim
The CMS built for the AI era. An open-source, API-first PHP CMS with a built-in Model Context Protocol server, so AI agents can search, read and draft your content — every permission scoped, so you decide exactly what they reach.
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
NETWORK_HOST_FROM_INPUT OBFUSCATION_MINIFIED_PAYLOAD
Why this grade
- NETWORK_HOST_FROM_INPUT Medium
A file takes a URL or endpoint as input and has no fixed host list.
bootstrap.php, line 880
fetch(form.action, { method: 'POST', body: new FormData(form), credentials: ' - OBFUSCATION_MINIFIED_PAYLOAD Medium
Contains a very long line with almost no spaces in a script or style file.
admin/assets/css/tailwind.min.css, line 1
/*! tailwindcss v3.4.17 | MIT License | https://tailwindcss.com */
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
app/Services/AppHealth/Preflight.php, line 281
$proc = @proc_open(
app/Services/AppHealth/Preflight.php, line 413
$p = @proc_open([$bin, '-r', 'echo PHP_MAJOR_VERSION, ".", PHP_MINOR_VERSION;'],
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Serious
accepts a host from input, with no fixed list in this file.
NETWORK_HOST_FROM_INPUT
bootstrap.php, line 880
fetch(form.action, { method: 'POST', body: new FormData(form), credentials: '
admin/assets/js/ajax.js, line 107
return fetch(url, init).then(function (res) {
admin/assets/js/avatar-editor.js, line 222
return fetch(url, { method: 'POST', body: body, credentials: '
Show more
admin/assets/js/settings-save.js, line 84
return fetch(location.href, { credentials: '
admin/views/api/mcp.php, line 84
<pre class="bg-slate-900 text-slate-200 rounded-lg p-3 text-xs overflow-x-auto">curl -X POST <?= htmlspecialchars($mcpUrl) ?> \
admin/views/api/overview.php, line 76
<pre class="mt-2 bg-slate-900 text-green-300 rounded-lg p-3 text-xs overflow-x-auto">curl -H "Authorization: Bearer basehim_your_key" \
admin/views/api/reference.php, line 418
<pre class="bh-code bg-slate-900 text-slate-200 rounded-lg p-3 text-xs overflow-x-auto">curl -X POST <?= htmlspecialchars(rtrim((string) ($baseUrl ?? ''), '/')) ?>/api/v1/posts \
admin/views/api/reference.php, line 505
<pre class="bh-code bg-slate-900 text-slate-200 rounded-lg p-3 text-xs overflow-x-auto">curl -X POST <?= htmlspecialchars($mcpUrl) ?> \
admin/views/system/index.php, line 241
(cPanel → Cron Jobs, command <code class="font-mono">curl -s "URL" >/dev/null</code>). It also runs apps' scheduled tasks. Keep it private: it contains a secret token.
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
bootstrap.php, line 109
// Load environment variables from .env
bootstrap.php, line 110
\App\Core\Env::load(BASEHIM_ROOT . '/.env');
bootstrap.php, line 115
// APP_TIMEZONE in .env, which used to set this, is now only the fallback for
Show more
index.php, line 34
* A fresh copy has no .env until install.php writes one. Without this the very
index.php, line 40
* can't be sent here by a hand-edited .env. A host that configures Basehim
index.php, line 41
* through real environment variables instead of a .env is left alone too.
install.php, line 7
* 2. Database configuration (writes .env)
install.php, line 11
* After install, this file is rendered unreachable by a lock flag in .env.
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains a minified payload.
OBFUSCATION_MINIFIED_PAYLOAD
admin/assets/css/tailwind.min.css, line 1
/*! tailwindcss v3.4.17 | MIT License | https://tailwindcss.com */
admin/assets/js/block-editor.js, line 1
/*! Basehim Block Editor 2.0 - https://www.basehim.com - Heroicons (MIT) by Tailwind Labs */
admin/assets/js/icons.js, line 34
var LEGACY = {"arrow-down":"arrow-down","arrow-up":"arrow-up","arrow-up-from-bracket":"arrow-up-tray","arrow-up-right-from-square":"arrow-top-right-on-square","arrows-up-down":"arr
Show more
database/add-prefix.php, line 1
<?php
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 9a58ee3c49f3. requests shell access. The manifest names this permission. accepts a host from input, with no fixed list in this file. reads a credential or environment file. contains a minified payload.
Date and source
Date checked:
github.com
Commit graded: 9a58ee3c49f3126873c312c1ac14734ac87ae8d4
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.