uspto_fpd_mcp

What was checked

Plain notes from the hygiene checks.

• Permissions

  Note

  requests shell access. The manifest names this permission.

  PERMISSION_SHELL_DECLARED

  SECURITY_GUIDELINES.md, line 475

  result = subprocess.run([

• Install and update

  Serious

  install fetches a script from the network. The docs document an installer that pipes a download into a shell.

  INSTALL_REMOTE_SCRIPT INSTALL_DOCUMENTED_INSTALLER

  INSTALL.md, line 930

  curl -LsSf https://astral.sh/uv/install.sh | sh

  INSTALL.md, line 1197

  # Linux/macOS: curl -LsSf https://astral.sh/uv/install.sh | sh

  deploy/linux_setup.sh, line 56

  if curl -LsSf https://astral.sh/uv/install.sh | sh; then

  Show more

  deploy/linux_setup.sh, line 65

  echo -e "${YELLOW} curl -LsSf https://astral.sh/uv/install.sh | sh${NC}"

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  src/fpd_mcp/server_bootstrap.py, line 441

  return requests.get(

  src/fpd_mcp/proxy/rate_limiter.py, line 60

  client_requests = self.requests.get(client_ip)

  src/fpd_mcp/proxy/rate_limiter.py, line 131

  client_requests = self.requests.get(client_ip)

  Show more

  src/fpd_mcp/proxy/server.py, line 271

  const resp = await fetch('/api/recent-downloads?s=' + encodeURIComponent(viewerKey));

  src/fpd_mcp/shared/citations.py, line 25

  ``curl -s -o /dev/null -w "%{http_code}" -L <url>`` and answered 200, as did

  src/fpd_mcp/shared/citations.py, line 35

  guessed URL. If a further form is ever wanted, probe it with the curl line

  src/fpd_mcp/shared/citations.py, line 114

  #: 2026-09-05 with ``curl -s -o /dev/null -w "%{http_code}" -L

  src/fpd_mcp/ui/views.py, line 8

  (iframes cannot fetch() localhost - Lesson 23); /api/recent-downloads

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_DOTENV

  deploy/linux_setup.sh, line 176

  uspto_key = os.environ.get('SETUP_USPTO_KEY', '')

  deploy/linux_setup.sh, line 186

  mistral_key = os.environ.get('SETUP_MISTRAL_KEY', '')

  deploy/windows_setup.ps1, line 77

  api_key = os.environ.get('TEMP_USPTO_API_KEY', '')

  Show more

  deploy/windows_setup.ps1, line 151

  api_key = os.environ.get('TEMP_MISTRAL_API_KEY', '')

  src/fpd_mcp/env_bootstrap.py, line 1

  """Load this repo's own .env before anything else reads settings.

  src/fpd_mcp/env_bootstrap.py, line 6

  used to run BEFORE `.env` was ever loaded. `main.py`'s first substantive

  src/fpd_mcp/env_bootstrap.py, line 10

  before `run_server()` is ever CALLED. The old `.env` load

  src/fpd_mcp/env_bootstrap.py, line 15

  only in `.env`; only variables already exported in the parent shell (or

  src/fpd_mcp/env_bootstrap.py, line 37

  """Load this repo's own `.env` exactly once. Idempotent, so it is safe

  src/fpd_mcp/env_bootstrap.py, line 43

  the caller's location and can land on an unrelated ancestor `.env`

  src/fpd_mcp/env_bootstrap.py, line 44

  (for example a parent directory's `.env` holding keys for other

  src/fpd_mcp/env_bootstrap.py, line 47

  otherwise only this repo's own `.env` is ever considered, and a

  src/fpd_mcp/middleware.py, line 82

  or os.environ.get("INTERNAL_AUTH_SECRET")

  src/fpd_mcp/server_bootstrap.py, line 561

  _auth_secret_check = get_internal_auth_secret() or os.environ.get("INTERNAL_AUTH_SECRET")

  src/fpd_mcp/api/fpd_client.py, line 307

  self.api_key = api_key or os.getenv("USPTO_API_KEY")

  src/fpd_mcp/auth/settings.py, line 47

  auth_jwt_secret=os.getenv("FPD_AUTH_JWT_SECRET", ""),

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Note

  a file was over the read cap and was not fully read.

  OBFUSCATION_FILE_OVER_READ_CAP

  uv.lock, line 1

  version = 1

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit c03a3904544d. requests shell access. The manifest names this permission. install fetches a script from the network. The docs document an installer that pipes a download into a shell. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read.

Date and source

Date checked: 23 Oct 2026

Read how this letter is chosen