Mcp Hub

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  e2e/harness/workspace.ts, line 63

  remove: () => fs.rmSync(root, { recursive: true, force: true })

  src/tool-cache.ts, line 70

  fs.unlinkSync(probe);

  src/auth/store.ts, line 358

  fs.rmSync(this.lockPath, { recursive: true, force: true });

  Show more

  src/auth/store.ts, line 378

  fs.rmSync(this.lockPath, { recursive: true, force: true });

  src/auth/store.ts, line 543

  fs.rmSync(tmp, { force: true });

  src/docker-proxy/index.ts, line 115

  if (existing.isSocket()) fs.unlinkSync(listenSocket);

  src/docker-proxy/index.ts, line 140

  fs.unlinkSync(listenSocket);

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  e2e/harness/gateway.ts, line 322

  const ws = new WebSocket(url);

  e2e/harness/wait.ts, line 81

  const response = await fetch(url, { signal: AbortSignal.timeout(5_000), redirect: 'manual' });

  e2e/harness/wire.ts, line 62

  const response = await fetch(`${this.gateway.baseUrl}${pathname}`, {

  Show more

  e2e/tools/record.ts, line 126

  const proxied = http.request(

  src/supervisor.ts, line 99

  return fetch(input, { ...init, headers: merged });

  src/docker-proxy/server.ts, line 90

  const request = http.request({ socketPath: options.dockerSocket, method, path, headers: { Host: 'docker' } }, response => {

  src/docker-proxy/server.ts, line 250

  const upstream = http.request(

  src/docker-proxy/server.ts, line 296

  const upstream = http.request({

  Dockerfile, line 101

  CMD ["node", "-e", "fetch('http://127.0.0.1:'+(process.env.PORT||80)+'/livez').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_DOTENV

  e2e/suites/bins.e2e.ts, line 54

  const { EXTERNAL_URL: _dropped, ...env } = baseEnv();

  e2e/suites/no-password.e2e.ts, line 34

  // spreads `env` last, and the hub's own `process.env.PASSWORD` is falsy

  src/docker-proxy/secrets-watcher.ts, line 71

  if (filename === null || !filename.endsWith('.env')) return;

  Show more

  src/index.ts, line 475

  passwordHash: process.env.PASSWORD_HASH,

  src/index.ts, line 476

  password: process.env.PASSWORD,

  src/index.ts, line 478

  requireResourceBoundTokens: process.env.RESOURCE_BOUND_TOKENS !== 'false' && process.env.RESOURCE_BOUND_TOKENS !== '0',

  src/index.ts, line 500

  if (process.env.RESOURCE_BOUND_TOKENS === 'false' || process.env.RESOURCE_BOUND_TOKENS === '0') {

  src/docker-proxy/index.ts, line 69

  console.log(`mcp-hub-docker-proxy: ${name} gets ${keys.length} variable(s) from ${entry.secretsFrom}.env`);

  src/docker-proxy/secrets-watcher.ts, line 72

  this.schedule(filename.slice(0, -'.env'.length));

  src/docker-proxy/secrets.ts, line 54

  const file = path.resolve(this.dir, `${name}.env`);

  .dockerignore, line 10

  .git

  .gitignore, line 9

  *.log

  CHANGELOG.md, line 1066

  directory: when the content of a referenced `<set>.env` changes, it stops the

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Pass

  No encoded or minified payload found.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit e184c4e33de9. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file.

Date and source

Date checked: 24 Oct 2026

Read how this letter is chosen