Substack Mcp

What was checked

Plain notes from the hygiene checks.

• Permissions

  Note

  requests shell access. The manifest names this permission.

  PERMISSION_SHELL_DECLARED

  scripts/check-ssot-controls.py, line 24

  result = subprocess.run(

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach oauth2.googleapis.com. The description does not name that host. can reach gmail.googleapis.com. The description does not name that host. can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST

  cloud/worker.ts, line 67

  const response = await fetch('https://oauth2.googleapis.com/token', {

  cloud/worker.ts, line 73

  const response = await fetch(`https://gmail.googleapis.com/gmail/v1/users/me/${path}${query ? '?' + new URLSearchParams(query) : ''}`, {

  cloud/worker.ts, line 216

  async fetch(request: Request, env: Env): Promise<Response> {

  Show more

  scripts/probe-helpers.mjs, line 15

  return fetch(input, init);

  scripts/test-container.mjs, line 49

  const response = await fetch(url, { method: 'POST', headers: authorization ? { Authorization: authorization } : {}, signal: AbortSignal.timeout(3000) });

  src/api/request.ts, line 88

  const pending = fetch(currentUrl, { ...options, redirect: "manual", signal });

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

  scripts/pre-commit-hook.sh, line 12

  .env|.env.*|credentials.json|token.json|client_secret*)

  scripts/release-state.mjs, line 168

  token: process.env.GH_TOKEN,

  scripts/test-container.mjs, line 23

  const status = JSON.parse(docker('run', '--rm', '--network', 'none', ...env, '--entrypoint', 'node', image, 'dist/index.js', 'status', '--json'));

  Show more

  scripts/test-container.mjs, line 34

  await stdio.connect(new StdioClientTransport({ command: 'docker', args: ['run', '--name', `${prefix}-stdio`, '-i', '--rm', '--network', 'none', ...env, image], stderr: 'pipe' }));

  scripts/test-container.mjs, line 42

  docker('run', '-d', '--name', `${prefix}-http`, '--rm', '-p', `127.0.0.1:${port}:8080`, ...env,

  scripts/test-package.mjs, line 65

  h, [cli, 'status', '--json'], { env: { ...env, SUBSTACK_PROFILES: 'missing' }, encodi

  scripts/test-package.mjs, line 66

  const doctorEnv = { ...env, SUBSTACK_PUBLICATION_URL: 'https://example.invalid', SUBSTACK_USER_ID: '1' };

  .codexignore, line 4

  .venv/

  .codexignore, line 5

  .env

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Note

  a file was over the read cap and was not fully read.

  OBFUSCATION_FILE_OVER_READ_CAP

  src/__tests__/__snapshots__/output-contracts.test.ts.snap, line 1

  // Vitest Snapshot v1, https://vitest.dev/guide/snapshot.html

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 5f9c67abb994. requests shell access. The manifest names this permission. can reach oauth2.googleapis.com. The description does not name that host. can reach gmail.googleapis.com. The description does not name that host. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read.

Date and source

Date checked: 22 Oct 2026

Read how this letter is chosen