MCP, MCP server
Mcp Checklists
We're a team of security and AI enthusiasts building MCP Manager, a comprehensive MCP security solution for businesses of all sizes.
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High finding. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 0323ce0fc468, unchanged since the check below.
SECRETS_PATH_CREDENTIAL OBFUSCATION_ENCODED_BLOB OBFUSCATION_MINIFIED_PAYLOAD
Why this grade
- SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
CLAUDE.md, line 265
SSH_PRIVATE_KEY_PATH=~/.ssh/mcp_deploy_key # or your key path - OBFUSCATION_ENCODED_BLOB Medium
Contains a long base64 shaped string in a file that should be readable.
infrastructure/package_scripts/dotenv/argon2.umd.min.js, line 7
ength:i}}))}var c={name:"blake2b",data:"AGFzbQEAAAABEQRgAAF/YAJ/fwBgAX8AYAAAAwoJAAECAwECAgABBAUBcAEBAQUEAQECAgYOAn8BQbCLBQt/AEGACAsHcAgGbWVtb3J5AgAOSGFzaF9HZXRCdWZmZXIAAApIYXNoX0Zp - OBFUSCATION_MINIFIED_PAYLOAD Medium
Contains a very long line with almost no spaces in a script or style file.
infrastructure/package_scripts/dotenv/argon2.umd.min.js, line 7
ength:i}}))}var c={name:"blake2b",data:"AGFzbQEAAAABEQRgAAF/YAJ/fwBgAX8AYAAAAwoJAAECAwECAgABBAUBcAEBAQUEAQECAgYOAn8BQbCLBQt/AEGACAsHcAgGbWVtb3J5AgAOSGFzaF9HZXRCdWZmZXIAAApIYXNoX0Zp
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
infrastructure/docs/reported-vulnerability-index.md, line 287
**Description:** Researchers at Imperva discovered a command injection vulnerability in the Framelink Figmna MCP server (versions prior to 0.6.3). This server is very popular, with
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Note
can reach localhost.
NETWORK_LOCALHOST
CLAUDE.md, line 349
curl -X POST http://localhost/mcp \
CLAUDE.md, line 355
curl -k -X POST https://localhost/mcp \
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
CLAUDE.md, line 265
SSH_PRIVATE_KEY_PATH=~/.ssh/mcp_deploy_key # or your key path
CLAUDE.md, line 443
ssh-keygen -t ed25519 -C "[email protected]" -f ~/.ssh/mcp_deploy_key
CLAUDE.md, line 446
cat ~/.ssh/mcp_deploy_key.pub
Show more
CLAUDE.md, line 451
echo "{KEY_VALUE}" >> ~/.ssh/authorized_keys
CLAUDE.md, line 454
chmod 600 ~/.ssh/authorized_keys
CLAUDE.md, line 465
SSH_PRIVATE_KEY_PATH=~/.ssh/mcp_deploy_key
infrastructure/package_scripts/create.mjs, line 74
password: process.env.SSH_PASSWORD,
infrastructure/package_scripts/create.mjs, line 75
privateKey: process.env.SSH_PRIVATE_KEY,
infrastructure/package_scripts/create.mjs, line 76
privateKeyPath: process.env.SSH_PRIVATE_KEY_PATH,
infrastructure/package_scripts/create.mjs, line 77
passphrase: process.env.SSH_PRIVATE_KEY_PASSWORD,
infrastructure/package_scripts/create.mjs, line 99
if (process.env.ACCESS_TOKEN) {
infrastructure/package_scripts/create.mjs, line 100
await sshCommand(`dokku config:set ${appName} ACCESS_TOKEN=${process.env.ACCESS_TOKEN || ""}`);
infrastructure/package_scripts/ssh.mjs, line 37
let preSsh = process.env.SSH_PASSWORD ? `sshpass -p ${process.env.SSH_PASSWORD} ` : "";
infrastructure/package_scripts/ssh.mjs, line 38
if (process.env.SSH_PRIVATE_KEY) {
.gitignore, line 122
# dotenv environment variables file
.gitignore, line 123
.env
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains an encoded blob in a file that should be readable. contains a minified payload.
OBFUSCATION_ENCODED_BLOB OBFUSCATION_MINIFIED_PAYLOAD
infrastructure/package_scripts/dotenv/argon2.umd.min.js, line 7
ength:i}}))}var c={name:"blake2b",data:"AGFzbQEAAAABEQRgAAF/YAJ/fwBgAX8AYAAAAwoJAAECAwECAgABBAUBcAEBAQUEAQECAgYOAn8BQbCLBQt/AEGACAsHcAgGbWVtb3J5AgAOSGFzaF9HZXRCdWZmZXIAAApIYXNoX0Zp
infrastructure/package_scripts/dotenv/argon2.umd.min.js, line 7
!function(A,I){"object"==typeof exports&&"undefined"!=typeof module?I(exports):"function"==typeof define&&define.amd?define(["exports"],I):I((A="undefined"!=typeof globalThis?globa
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 0323ce0fc468. requests shell access. The manifest names this permission. can reach localhost. reads a credential or environment file. contains an encoded blob in a file that should be readable. contains a minified payload.
Date and source
Date checked:
github.com
Commit graded: 0323ce0fc4685320d4ea449d0168ea3555e6d222
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.