Grades are a hygiene check, not a security guarantee.

MCP, MCP server

Mcp Proxy Server

Mcp Proxy Server, an MCP server listed in the PlugVet directory.

Compatibility: Not stated.

Grade D

Two or more Medium findings, or a High finding. Only try it in a sandbox.

Graded by PlugVetRubric v2

Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.

INSTALL_LIFECYCLE_HOOK NETWORK_HOST_FROM_INPUT

Why this grade

  • INSTALL_LIFECYCLE_HOOK Medium

    A package install hook (preinstall, install, postinstall or prepare) runs a script.

    package.json, line 19 prepare

  • NETWORK_HOST_FROM_INPUT Medium

    A file takes a URL or endpoint as input and has no fixed host list.

    public/script.js, line 129 const reloadResponse = await fetch('/admin/server/reload', { method: 'POST' });

Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.

If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.

Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.

What was checked

Plain notes from the hygiene checks.

  • Permissions

    Pass

    No shell or command execution found, and no extra permission was declared.

  • Install and update

    Concern

    runs a script at install time.

    INSTALL_LIFECYCLE_HOOK

    package.json, line 19

    prepare

  • Network

    Serious

    accepts a host from input, with no fixed list in this file.

    NETWORK_HOST_FROM_INPUT

    public/script.js, line 129

    const reloadResponse = await fetch('/admin/server/reload', { method: 'POST' });

    public/script.js, line 177

    const response = await fetch('/admin/config');

    public/script.js, line 199

    const envResponse = await fetch('/admin/environment');

    Show more

    public/script.js, line 345

    const response = await fetch('/admin/logout', { method: 'POST' });

    public/script.js, line 356

    const response = await fetch('/admin/login', {

    public/servers.js, line 14

    const response = await fetch('/admin/config');

    public/servers.js, line 272

    const response = await fetch(`/admin/server/install/${serverKey}`, {

    public/servers.js, line 417

    const response = await fetch('/admin/config', {

    public/terminal.js, line 34

    fetch(`/admin/terminal/${termId}/resize`, {

    public/terminal.js, line 124

    const response = await fetch('/admin/terminal/start', { method: 'POST' });

    public/terminal.js, line 155

    fetch(`/admin/terminal/${termId}/input`, {

  • Secrets

    Concern

    reads a credential or environment file.

    SECRETS_ENV_READ SECRETS_PATH_UNCONFIRMED

    public/servers.js, line 122

    const envVarsContainer = detailsDiv.querySelector('.env-vars-container');

    public/servers.js, line 337

    const envVarsContainer = entryDiv.querySelector('.env-vars-container');

    public/servers.js, line 364

    envVarsContainer.querySelectorAll('.env-var-row').forEach(row => {

    Show more

    public/servers.js, line 365

    const envKeyInput = row.querySelector('.env-key-input');

    public/servers.js, line 366

    const envValueInput = row.querySelector('.env-value-input');

    src/sse.ts, line 51

    const allowedKeysRaw = process.env.ALLOWED_KEYS || "";

    src/sse.ts, line 54

    const allowedTokensRaw = process.env.ALLOWED_TOKENS || ""; // Renamed

    src/sse.ts, line 61

    const ADMIN_PASSWORD = process.env.ADMIN_PASSWORD || 'password';

    src/sse.ts, line 62

    const SESSION_SECRET_ENV = process.env.SESSION_SECRET; // Read from env

    .gitignore, line 3

    *.log

    public/style.css, line 494

    }

    public/style.css, line 519

    .env-var-row .env-key-input {

  • Agent instructions

    Pass

    No instruction to ignore earlier instructions or to hide a step.

  • Obfuscation

    Pass

    No encoded or minified payload found.

  • Licence

    Pass

    A licence file is present (LICENSE).

  • Maintainer activity

    Note

    the latest commit is more than 365 days old.

    MAINTAINER_STALE

    No file path was stored.

    2025-07-27T12:39:49+08:00

Get the full report on this tool, £49

Note

Hygiene check of commit 9fe05ed478cd. runs a script at install time. accepts a host from input, with no fixed list in this file. reads a credential or environment file. the latest commit is more than 365 days old.

Date and source

Date checked:

View source

github.com

Commit graded: 9fe05ed478cd1b80ca75b0b625e0e259dd9d1a2a

This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.

Read how this letter is chosen