Grades are a hygiene check, not a security guarantee.

MCP, MCP server

Zammad Mcp

An MCP server that connects AI assistants to Zammad, providing tools for managing tickets, users, organizations, attachments, and knowledge base content.

Compatibility: Not stated.

Grade C

One Medium finding. Read the report before installing.

Graded by PlugVetRubric v2

Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.

INSTALL_REMOTE_SCRIPT

Why this grade

  • INSTALL_REMOTE_SCRIPT Medium

    Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).

    .claude/hooks/session-start.sh, line 14 echo "session-start: mise is not installed. Add 'curl https://mise.run | sh' to the cloud environment's setup script." >&2

Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.

Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.

What was checked

Plain notes from the hygiene checks.

  • Permissions

    Note

    requests shell access. The manifest names this permission.

    PERMISSION_SHELL_DECLARED

    scripts/uv/security-scan.py, line 154

    result = subprocess.run(

    scripts/uv/security-scan.py, line 233

    result = subprocess.run(

    scripts/uv/security-scan.py, line 274

    result = subprocess.run(

    Show more

    docs/plans/2025-11-16-streamable-http-transport.md, line 857

    process = subprocess.Popen(

    docs/plans/2025-11-16-streamable-http-transport.md, line 904

    process = subprocess.Popen(

  • Install and update

    Serious

    install fetches a script from the network. README documents an installer that pipes a download into a shell.

    INSTALL_REMOTE_SCRIPT INSTALL_DOCUMENTED_INSTALLER

    CONTRIBUTING.md, line 32

    ise from its environment setup script (`curl https://mise.run | sh`). The repository's SessionStart hook (

    README.md, line 84

    curl -LsSf https://astral.sh/uv/install.sh | sh

    .claude/hooks/session-start.sh, line 14

    echo "session-start: mise is not installed. Add 'curl https://mise.run | sh' to the cloud environment's setup script." >&2

  • Network

    Concern

    can reach a host that is not written as a fixed address.

    NETWORK_NO_FIXED_HOST

    .claude/skills/mcp-builder/reference/node_mcp_server.md, line 474

    const response = await axios.get(`${API_URL}/resource/${resourceId}`);

    .claude/skills/mcp-builder/reference/node_mcp_server.md, line 480

    return axios.get(`${API_URL}/resource/${resourceId}`)

    .claude/skills/mcp-builder/reference/python_mcp_server.md, line 260

    response = requests.get(f"{API_URL}/resource/{resource_id}") # Blocks

  • Secrets

    Concern

    reads a credential or environment file.

    SECRETS_ENV_READ SECRETS_PATH_DOTENV

    mcp_zammad/client.py, line 89

    self.password = password or self._read_secret_file("ZAMMAD_PASSWORD_FILE") or os.getenv("ZAMMAD_PASSWORD")

    mcp_zammad/client.py, line 91

    http_token or self._read_secret_file("ZAMMAD_HTTP_TOKEN_FILE") or os.getenv("ZAMMAD_HTTP_TOKEN")

    mcp_zammad/client.py, line 94

    oauth2_token or self._read_secret_file("ZAMMAD_OAUTH2_TOKEN_FILE") or os.getenv("ZAMMAD_OAUTH2_TOKEN")

    Show more

    mcp_zammad/client.py, line 107

    if os.getenv("ZAMMAD_TOKEN"):

    mcp_zammad/server.py, line 1479

    # Load .env before reading audit settings so .env-sourced audit config takes effect.

    mcp_zammad/server.py, line 1510

    cwd_env = Path.cwd() / ".env"

    mcp_zammad/server.py, line 1518

    "Found .envrc but environment variables not loaded. Consider using direnv or creating a .env file"

    mcp_zammad/server.py, line 1566

    secret_provider=lambda: os.getenv("ZAMMAD_WEBHOOK_SECRET"),

    scripts/uv/test-zammad.py, line 57

    self.env_file = env_file or Path(".env")

    scripts/uv/test-zammad.py, line 69

    self.http_token = os.getenv("ZAMMAD_HTTP_TOKEN")

    scripts/uv/test-zammad.py, line 70

    self.oauth2_token = os.getenv("ZAMMAD_OAUTH2_TOKEN")

    scripts/uv/test-zammad.py, line 72

    self.password = os.getenv("ZAMMAD_PASSWORD")

    scripts/uv/test-zammad.py, line 544

    "--env-file", type=click.Path(exists=False, path_type=Path), help="Path to environment file (default: .env)"

    scripts/uv/validate-env.py, line 22

    ./validate-env.py # Interactive mode with .env file

    scripts/uv/validate-env.py, line 95

    # Try to load .env from current directory

    scripts/uv/validate-env.py, line 96

    default_env = Path(".env")

  • Agent instructions

    Pass

    No instruction to ignore earlier instructions or to hide a step.

  • Obfuscation

    Note

    a file was over the read cap and was not fully read.

    OBFUSCATION_FILE_OVER_READ_CAP

    uv.lock, line 1

    version = 1

    docs/maintainer/ledger.json, line 1

    {

  • Licence

    Pass

    A licence file is present (LICENSE).

  • Maintainer activity

    Pass

    The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit cf51c36f0aeb. requests shell access. The manifest names this permission. install fetches a script from the network. README documents an installer that pipes a download into a shell. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read.

Date and source

Date checked:

View source

github.com

Commit graded: cf51c36f0aeb8d4313fdfa06eb49586a55592852

This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.

Read how this letter is chosen