Grades are a hygiene check, not a security guarantee.

MCP, MCP server

Voyagier

Plan, price and book real trips from your terminal.

Compatibility: Not stated.

Grade D

Two or more Medium findings, or a High finding. Only try it in a sandbox.

Graded by PlugVetRubric v2

Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.

Rescanned at commit 2b7ce6f8c14f.

PERMISSION_SHELL_UNDECLARED SECRETS_PATH_CREDENTIAL

Why this grade

  • PERMISSION_SHELL_UNDECLARED Medium

    Runs shell commands that the manifest or description does not mention.

    src/doc-drift.spec.ts, line 199 const model = commands.get(inv.path);

  • SECRETS_PATH_CREDENTIAL Medium

    Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).

    src/api.spec.ts, line 8 const credFile = join(CONFIG_DIR, "credentials.json");

Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.

Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.

What was checked

Plain notes from the hygiene checks.

  • Permissions

    Concern

    requests shell access. No manifest field names shell or command execution.

    PERMISSION_SHELL_UNDECLARED

    src/doc-drift.spec.ts, line 199

    const model = commands.get(inv.path);

  • Install and update

    Pass

    No install-time script found, and dependencies are pinned or absent.

  • Network

    Concern

    can reach a host that is not written as a fixed address. can reach http-intake.logs.datadoghq.com. The description does not name that host.

    NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST

    scripts/refresh-mcp-fixture.mjs, line 145

    response = await fetch(ENDPOINT, {

    src/api.ts, line 45

    res = await fetch(`${apiUrl}/graphql`, {

    src/telemetry.ts, line 152

    const send = fetch("https://http-intake.logs.datadoghq.com/api/v2/logs", {

    Show more

    src/commands/auth.spec.ts, line 491

    // Call #1: profile fetch (no FF on file). Call #2: updateMyUser rejects with

    CHANGELOG.md, line 478

    - **`voyagier cart`** rewritten against the v2 schema. No more `subSelectionOptionId`. `CartItemType` is PascalCase. Cart items grouped by goal in `--json` output. Single round-tri

  • Secrets

    Concern

    reads a credential or environment file.

    SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL

    scripts/refresh-mcp-fixture.mjs, line 133

    const token = process.env.VOYAGIER_TOKEN;

    src/api.spec.ts, line 35

    delete process.env.VOYAGIER_TOKEN;

    src/api.spec.ts, line 8

    const credFile = join(CONFIG_DIR, "credentials.json");

    Show more

    src/config.spec.ts, line 21

    delete process.env.VOYAGIER_TOKEN;

    src/config.spec.ts, line 33

    delete process.env.VOYAGIER_TOKEN;

    src/config.spec.ts, line 48

    process.env.VOYAGIER_TOKEN = "

    src/config.spec.ts, line 98

    process.env.VOYAGIER_TOKEN = "

    src/config.spec.ts, line 104

    process.env.VOYAGIER_TOKEN = "

    src/config.spec.ts, line 162

    process.env.VOYAGIER_TOKEN = "

    src/config.spec.ts, line 7

    const credFile = join(CONFIG_DIR, "credentials.json");

    src/config.spec.ts, line 70

    // Simulate a credentials.json left world-readable by an older version or a

    src/config.spec.ts, line 211

    it("normalizes a misconfigured URL on save so credentials.json holds the API base, and returns it", () => {

    src/config.ts, line 15

    const CREDENTIALS_FILE = join(CONFIG_DIR, "credentials.json");

    src/config.ts, line 80

    * (`VOYAGIER_API_URL` env + `credentials.json`), so a token can never be sent

    src/config.ts, line 282

    // on-disk credentials.json written by an older/hand-edited version must not

    src/commands/auth.spec.ts, line 478

    // The full passport number must never reach stdout or credentials.json.

  • Agent instructions

    Pass

    No instruction to ignore earlier instructions or to hide a step.

  • Obfuscation

    Note

    a file was over the read cap and was not fully read.

    OBFUSCATION_FILE_OVER_READ_CAP

    package-lock.json, line 1

    {

    src/mcp/fixtures/remote-tools.json, line 1

    [

  • Licence

    Pass

    A licence file is present (LICENSE).

  • Maintainer activity

    Pass

    The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 2b7ce6f8c14f. requests shell access. No manifest field names shell or command execution. can reach a host that is not written as a fixed address. can reach http-intake.logs.datadoghq.com. The description does not name that host. reads a credential or environment file. a file was over the read cap and was not fully read.

Date and source

Date checked:

View source

github.com

Commit graded: 2b7ce6f8c14fa8d39390ee227c0a1a0761d0ab15

This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.

Read how this letter is chosen