MCP, MCP server
Forage - MCP Server for AI Agents
Riccardo Minniti / Ernesta Labs · [email protected] · useforage.xyz
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 3ec4c63586f5, unchanged since the check below.
INSTALL_UNPINNED NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV PERMISSION_SHELL_DECLARED SECRETS_ENV_READ
Why this grade
- INSTALL_UNPINNED Low
Dependencies use a range or git URL with no lockfile.
package.json, line 23
@modelcontextprotocol/sdk - NETWORK_NO_FIXED_HOST Low
Makes a network call whose host is not written as a fixed address.
deploy.sh, line 165
if response=$(curl -sf --max-time 30 "$url" 2>/dev/null); then - NETWORK_UNNAMED_HOST Low
Calls a fixed host that the description does not name.
deploy.sh, line 165
if response=$(curl -sf --max-time 30 "$url" 2>/dev/null); then - SECRETS_PATH_DOTENV Low
Mentions a .env file.
deploy.sh, line 46
fail "APIFY_TOKEN is not set. Export it or add to .env before running." - PERMISSION_SHELL_DECLARED Note
Runs shell commands, and the manifest or description says so.
src/moltlaunch-client.ts, line 7
* Uses child_process.exec wrapped in Promise. - SECRETS_ENV_READ Note
Reads an environment variable whose name contains KEY, SECRET, TOKEN, PASSWORD or CREDENTIAL.
scrapling_bridge.py, line 43
APIFY_TOKEN = os.environ.get("APIFY_TOKEN", "")
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
src/moltlaunch-client.ts, line 7
* Uses child_process.exec wrapped in Promise.
Install and update
Concern
dependencies are not pinned.
INSTALL_UNPINNED
package.json, line 23
@modelcontextprotocol/sdk
Network
Concern
can reach a host that is not written as a fixed address. can reach api.developers.kaspr.io. The description does not name that host. can reach forage-graph-production.up.railway.app. The description does not name that host. can reach r.jina.ai. The description does not name that host. can reach serpapi.com. The description does not name that host. can reach api.apify.com. The description does not name that host. can reach jinajs.iml8.cn. The description does not name that host. can reach maps.go
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
deploy.sh, line 165
if response=$(curl -sf --max-time 30 "$url" 2>/dev/null); then
deploy.sh, line 192
FORAGE_RESP=$(curl -sf --max-time 30 \
deploy.sh, line 216
echo " curl -X POST http://localhost:8000/orchestrate \\"
Show more
deploy.sh, line 221
echo " curl -X POST http://localhost:8001/ingest/gdelt \\"
deploy.sh, line 229
echo " curl http://localhost:8000/status | python3 -m json.tool"
test-debug.ts, line 8
const res = await fetch(url, {
test-kaspr.ts, line 12
const res = await fetch("https://api.developers.kaspr.io/profile/linkedin", {
verify-deployments.ps1, line 13
SMITHERY_STATUS=$(curl -s -o /dev/null -w "%{http_code}" "$SMITHERY_URL")
verify-deployments.ps1, line 23
GLAMA_MODELS=$(curl -s -H "Authorization: Bearer $GLAMA_API_KEY" \
verify-deployments.ps1, line 33
GITHUB_STATUS=$(curl -s -o /dev/null -w "%{http_code}" "$REPO_URL")
src/forage-graph-client.ts, line 139
const response = await fetch(`${FORAGE_ENDPOINT}/mcp`, {
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
deploy.sh, line 46
fail "APIFY_TOKEN is not set. Export it or add to .env before running."
deploy.sh, line 71
# ─── .env HANDLING ────────────────────────────────────────────────────────────
scrapling_bridge.py, line 43
APIFY_TOKEN = os.environ.get("APIFY_TOKEN", "")
Show more
deploy.sh, line 72
if [[ ! -f .env ]]; then
deploy.sh, line 73
warn ".env not found - writing .env.template"
deploy.sh, line 74
cat > .env.template << 'TMPL'
deploy.sh, line 77
# Copy this file to .env and fill in all values.
deploy.sh, line 78
# NEVER commit .env to version control.
deploy.sh, line 105
echo " 1. cp .env.template .env"
test-debug.ts, line 4
const token = process.env.APIFY_TOKEN;
test-kaspr.ts, line 4
const apiKey = process.env.KASPR_API_KEY;
test-sse-local.ts, line 6
const token = process.env.APIFY_TOKEN;
ingest/gdelt_agent.py, line 35
APIFY_TOKEN = os.environ.get("APIFY_TOKEN", "")
ingest/reddit_sentiment.py, line 49
APIFY_TOKEN = os.environ.get("APIFY_TOKEN", "")
src/forage-graph-client.ts, line 13
const APIFY_TOKEN = process.env.APIFY_TOKEN;
src/forage-graph-client.ts, line 192
'Authorization': `Bearer ${process.env.GRAPH_API_SECRET}`,
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 3ec4c63586f5. requests shell access. The manifest names this permission. dependencies are not pinned. can reach a host that is not written as a fixed address. can reach api.developers.kaspr.io. The description does not name that host. can reach forage-graph-production.up.railway.app. The description does not name that host. can reach r.jina.ai. The description does not name that host. can reach serpapi.com. The description does not name that host. can reach api.apify.com. The description does not name that host. can reach jinajs.iml8.cn. The description does not name that host. can reach maps.go reads a credential or environment file. Grades are a hygien
Date and source
Date checked:
github.com
Commit graded: 3ec4c63586f5207c599122348cc70a05b3a0399e
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.