MCP, MCP server
ZizkaDB
ZizkaDB, an MCP server listed in the PlugVet directory.
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High finding. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit f0fc515d755a.
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
Why this grade
- INSTALL_REMOTE_SCRIPT Medium
Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).
scripts/quickstart-remote.sh, line 7
# curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash - NETWORK_HOST_FROM_INPUT Medium
A file takes a URL or endpoint as input and has no fixed host list.
.cursor/skills/zizkadb-dev-setup/SKILL.md, line 38
curl -H "Authorization: Bearer zizkadb_dev_local" http://localhost:8000/health
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Pass
No shell or command execution found, and no extra permission was declared.
Install and update
Serious
install fetches a script from the network. The docs document an installer that pipes a download into a shell.
INSTALL_REMOTE_SCRIPT INSTALL_DOCUMENTED_INSTALLER
scripts/quickstart-remote.sh, line 7
# curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash
CONNECT.md, line 10
curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash
CONTRIBUTING.md, line 12
| OSS quickstart (no clone) | `curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh \| bash` |
Show more
DEVELOPMENT.md, line 14
curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash
README.md, line 67
curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash
START_HERE.md, line 8
curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash
dashboard/app/docs/sections.tsx, line 1163
# macOS / Linux curl -LsSf https://astral.sh/uv/install.sh | sh uvx
dashboard/app/docs/sections.tsx, line 1372
a: "Install uv: curl -LsSf https://astral.sh/uv/install.sh | sh",
docs/integrations/livekit.md, line 27
curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash
docs/assets/quickstart-terminal.svg, line 37
<text class="l0 cmd" x="28" y="70"><tspan class="p">$ </tspan>curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash</text>
examples/mcp-cursor/README.md, line 7
curl -LsSf https://astral.sh/uv/install.sh | sh
integrations/livekit/README.md, line 22
curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash
mcp/README.md, line 39
curl -LsSf https://astral.sh/uv/install.sh | sh
sdk/python/zizkadb/templates/basic/README.md, line 11
**Local stack:** `curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash`
wiki/Getting-Started.md, line 8
curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash
wiki/Home.md, line 8
| OSS quickstart (no clone) | `curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh \| bash` |
wiki/Home.md, line 39
curl -fsSL https://raw.githubusercontent.com/Zizka-ai/ZizkaDB/main/scripts/quickstart-remote.sh | bash
wiki/MCP-and-Cursor.md, line 9
curl -LsSf https://astral.sh/uv/install.sh | sh
Network
Serious
accepts a host from input, with no fixed list in this file. can reach a host that is not written as a fixed address.
NETWORK_HOST_FROM_INPUT NETWORK_NO_FIXED_HOST
.cursor/skills/zizkadb-dev-setup/SKILL.md, line 38
curl -H "Authorization: Bearer zizkadb_dev_local" http://localhost:8000/health
core/api/agents.py, line 156
rows = await pool.fetch(
core/api/agents.py, line 420
top_events = await pool.fetch(
Show more
core/api/agents.py, line 630
rows = await pool.fetch(
core/api/agents.py, line 728
type_rows = await pool.fetch(
core/api/agents.py, line 738
transition_rows = await pool.fetch(
core/api/agents.py, line 820
sessions = await pool.fetch(
core/api/agents.py, line 940
type_rows = await pool.fetch(
core/api/agents.py, line 950
transition_rows = await pool.fetch(
dashboard/app/docs/sections.tsx, line 924
<Code lang="bash">{`curl https://db.zizka.ai/health
dashboard/app/docs/sections.tsx, line 929
<Code lang="bash">{`curl -X POST https://db.zizka.ai/v1/events \\
dashboard/app/docs/sections.tsx, line 943
<Code lang="bash">{`curl "https://db.zizka.ai/v1/events?agent=support-bot&limit=20" \\
dashboard/app/docs/sections.tsx, line 948
<Code lang="bash">{`curl "https://db.zizka.ai/v1/events/EVENT_UUID_HERE/why" \\
dashboard/app/docs/sections.tsx, line 953
<Code lang="bash">{`curl "https://db.zizka.ai/v1/events/at?agent=support-bot×tamp=2026-05-01T15:00:00Z" \\
dashboard/app/docs/sections.tsx, line 958
<Code lang="bash">{`curl -X POST https://db.zizka.ai/v1/search \\
dashboard/app/docs/sections.tsx, line 969
<Code lang="bash">{`curl -X POST https://db.zizka.ai/v1/memory/context \\
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
core/main.py, line 106
os.getenv("DEV_API_KEY", ""),
core/main.py, line 107
os.getenv("JWT_SECRET", ""),
core/main.py, line 108
os.getenv("SELFHOST_ADMIN_TOKEN", ""),
Show more
core/main.py, line 109
os.getenv("JWT_REFRESH_SECRET", ""),
core/api/auth.py, line 293
if (os.getenv("SELFHOST_ADMIN_TOKEN") or "").strip():
core/api/auth.py, line 351
expected = (os.getenv("SELFHOST_ADMIN_TOKEN") or "").strip()
core/api/deps.py, line 13
_DEV_API_KEY = os.getenv("DEV_API_KEY", "")
core/services/email_suppress.py, line 23
os.getenv("UNSUBSCRIBE_SECRET")
core/main.py, line 45
# Values published in .env.example, Compose defaults, and auth.py dev fallbacks.
core/api/auth.py, line 315
.env predates DEPLOYMENT_MODE keep working). Managed production: never.
core/api/auth.py, line 349
raise forbidden("Set SELFHOST_ADMIN_TOKEN in your .env to enable dashboard login.")
core/api/deps.py, line 10
# Dev key: set DEV_API_KEY in .env for self-hosted local development.
core/api/deps.py, line 17
# SDK/MCP default vs legacy self-host .env — accept both in local dev only.
core/api/deps.py, line 118
# Transition: old infra/.env used agdb_dev_local; SDK/MCP use zizkadb_dev_local.
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read. the file cap was reached before every file was read.
OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED
dashboard/package-lock.json, line 1
{
examples/langchain-agent/.env.example, line 1
OPENAI_API_KEY=sk-...
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit f0fc515d755a. install fetches a script from the network. accepts a host from input, with no fixed list in this file. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.
Date and source
Date checked:
github.com
Commit graded: f0fc515d755aa0fce616fb3e9262d7795a972a2a
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.