MCP, MCP server
io.github.IvanBBaev/facebook-mcp
Local-first TypeScript MCP server for the Meta Graph API that lets an MCP client publish, read and moderate Facebook Pages through your own Meta developer app, with least-privilege tokens, plan-and-apply write safety and no telemetry.
Compatibility: Not stated.
Grade C
One Medium finding. Read the findings before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit ee79b3a16235, unchanged since the check below.
AGENT_IGNORE_INSTRUCTIONS
Why this grade
- AGENT_IGNORE_INSTRUCTIONS Medium
Text tells the agent to ignore earlier instructions.
src/mcp/taint.test.ts, line 72
assert.match(out, /Ignore all previous instructions/);
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Pass
No shell or command execution found, and no extra permission was declared.
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address. can reach graph.facebook.com. The description does not name that host. can reach rupload.facebook.com. The description does not name that host.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
scripts/smoke/plan.mjs, line 307
'FB_SMOKE_PHOTO_URL must be an https:// URL Meta can fetch (a local path does not work)',
src/cold-start.test.ts, line 243
"try { fetch('https://graph.facebook.com/v23.0/me?access_token=SECRET') } catch (e) { console.error(e.message) }",
src/api/media-photos.ts, line 547
* (`data:`) or a cleartext fetch (`http:`). Embedded credentials are refused so
Show more
src/core/http-upload.ts, line 554
return fetch(url, {
src/core/http.ts, line 1266
return fetch(url, {
src/mcp/transport.test.ts, line 504
// No `Origin` at all is what curl and every non-browser MCP client sends;
src/testing/network-fence.test.ts, line 12
void fetch('https://graph.facebook.com/me');
src/testing/network-fence.test.ts, line 19
void fetch('https://graph.facebook.com/me');
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
scripts/gen-metadata.mjs, line 15
// .env.example operator-facing env template
scripts/gen-metadata.mjs, line 379
// Generators - .env.example
scripts/gen-metadata.mjs, line 405
'# Copy to `.env` (git-ignored) or export these in your MCP client config.',
Show more
scripts/gen-metadata.mjs, line 580
'A full, commented template lives in [`.env.example`](.env.example).',
scripts/gen-metadata.mjs, line 938
{ path: repoPath('.env.example'), text: generateEnvExample(), format: false },
scripts/metadata.config.mjs, line 11
// .env.example (the operator-facing env template)
scripts/metadata.config.mjs, line 25
* @property {string} group Section heading in `.env.example`.
scripts/metadata.config.mjs, line 41
* @property {string} description Full text for server.json / .env.example.
src/core/config.test.ts, line 300
assert.equal(process.env.FB_ACCESS_TOKEN, 'from-client');
Agent instructions
Serious
instructions tell the agent to ignore earlier instructions.
AGENT_IGNORE_INSTRUCTIONS
src/mcp/taint.test.ts, line 72
assert.match(out, /Ignore all previous instructions/);
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
CHANGELOG.md, line 1
# Changelog
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit ee79b3a16235. can reach a host that is not written as a fixed address. can reach graph.facebook.com. The description does not name that host. can reach rupload.facebook.com. The description does not name that host. reads a credential or environment file. instructions tell the agent to ignore earlier instructions. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: ee79b3a16235deed305559ac4e83cd9dd9b46583
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.