MCP, MCP server
Exogram Authority Runtime
This repository is a collection of reference implementations for the Model Context Protocol (MCP), as well as references to community-built servers and additional resources.
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High finding. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit b2a94a21a53f, unchanged since the check below.
SECRETS_PATH_CREDENTIAL OBFUSCATION_ENCODED_BLOB
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
.gitignore, line 139
.*-server-credentials.json - OBFUSCATION_ENCODED_BLOB Medium
Contains a long base64 shaped string in a file that should be readable.
src/everything/tools/get-tiny-image.ts, line 6
"iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAKsGlDQ1BJQ0MgUHJvZmlsZQAASImVlwdUU+kSgOfe9JDQEiIgJfQmSCeAlBBaAAXpYCMkAUKJMRBU7MriClZURLCs6KqIgo0idizYFsWC3QVZBNR1sWDDlXeBQ9jdd957580
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
scripts/release.py, line 42
subprocess.run(
scripts/release.py, line 101
subprocess.run(["uv", "lock"], cwd=self.path, check=True)
scripts/release.py, line 107
output = subprocess.run(
Show more
src/filesystem/lib.ts, line 177
await fs.unlink(tempPath);
src/filesystem/lib.ts, line 275
await fs.unlink(tempPath);
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
CLAUDE.md, line 17
fetch/ Py mcp-server-fetch (web content fetching)
src/everything/tools/gzip-file-as-resource.ts, line 195
const response = await fetch(url, { signal: controller.signal });
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
.gitignore, line 75
# dotenv environment variable files
.gitignore, line 76
.env
.gitignore, line 139
.*-server-credentials.json
Show more
.gitignore, line 77
.env.development.local
.gitignore, line 78
.env.test.local
.gitignore, line 79
.env.production.local
.gitignore, line 264
# Environments
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains an encoded blob in a file that should be readable.
OBFUSCATION_ENCODED_BLOB
src/everything/tools/get-tiny-image.ts, line 6
"iVBORw0KGgoAAAANSUhEUgAAABQAAAAUCAYAAACNiR0NAAAKsGlDQ1BJQ0MgUHJvZmlsZQAASImVlwdUU+kSgOfe9JDQEiIgJfQmSCeAlBBaAAXpYCMkAUKJMRBU7MriClZURLCs6KqIgo0idizYFsWC3QVZBNR1sWDDlXeBQ9jdd957580
src/fetch/uv.lock, line 1
version = 1
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit b2a94a21a53f. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file. contains an encoded blob in a file that should be readable.
Date and source
Date checked:
github.com
Commit graded: b2a94a21a53f99bee21cef9485ed50b0991c350c
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.