github Rust re-analysis due deep scan · partial (162/2,132 files) unconfirmed MCP

ChronoAIProject/NyxID

Connect AI agents to any API, anywhere. Securely. Open-source gateway that proxies requests, injects credentials automatically, punches through NAT to reach localhost services, and wraps REST APIs as MCP tools. Per-agent isolation. Never expose a raw key.

maintainer: ChronoAIProject
licence: Apache-2.0
first seen: 2026-06-05
last seen: 2026-09-10
releases · 30d: 15
short id

risk 64/100 · heuristic grade

D high inferred analyzer v33 (current)

capability exposure inferred + 35
recent drift inferred + 20
tool safety inferred + 12
trust mitigators mixed − 3

inferred mixed

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

grade last moved 3d ago · see ecosystem CVEs →

risk trajectory 6 movements

6d ago C · 57 → D · 64
2w ago D · 62 → C · 57
3w ago D · 69 → D · 62
4w ago D · 64 → D · 69
10w ago C · 56 → D · 64
11w ago A · 0 → C · 56

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 2 findings · grade factor +12

high dangerous code

committed secret: private key, Google API key · suspicious bundled script in 1 file(s)
medium dangerous code

env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit f496ca5 · analyzer v33 · 3h ago

skills & prompt files 19

danger signals16

suspicious endpoint t.me ChronoAIProject-NyxID-f496ca5/frontend/src/hooks/use-approvals.test.tsx :70 mockPost.mockResolvedValue({ link_url: "https://t.me/x" });
suspicious endpoint us.i.posthog.com (telemetry) expected for this server's purpose ChronoAIProject-NyxID-f496ca5/frontend/src/lib/telemetry.test.ts :34 host: "https://us.i.posthog.com",
suspicious endpoint us.i.posthog.com (telemetry) expected for this server's purpose ChronoAIProject-NyxID-f496ca5/frontend/src/lib/telemetry.ts :38 const NYXID_PUBLIC_TELEMETRY_HOST = "https://us.i.posthog.com";
suspicious endpoint t.me ChronoAIProject-NyxID-f496ca5/frontend/src/schemas/providers.test.ts :163 photo_url: "https://t.me/i/userpic/photo.jpg",
suspicious endpoint us.posthog.com (telemetry) expected for this server's purpose ChronoAIProject-NyxID-f496ca5/frontend/src/wizard-entry.test.tsx :118 endpoint_url: "https://us.posthog.com",
suspicious endpoint t.me ChronoAIProject-NyxID-f496ca5/mobile/src/components/TelegramLinkModal.tsx :128 const webUrl = `https://t.me/${linkInfo.bot_username}?start=${linkInfo.link_code}`;
suspicious endpoint us.i.posthog.com (telemetry) expected for this server's purpose ChronoAIProject-NyxID-f496ca5/mobile/src/lib/telemetry.ts :70 const NYXID_PUBLIC_TELEMETRY_HOST = 'https://us.i.posthog.com';
over-broad OAuth scope https://www.googleapis.com/auth/cloud-platform ChronoAIProject-NyxID-f496ca5/frontend/src/components/assistant/assistant-org-integration-action-dialog.test.tsx :38 nt","private_key":"private"}', scopes: "https://www.googleapis.com/auth/cloud-platform", serviceSlugs: [], targetOrgId: "org-production" });
over-broad OAuth scope https://www.googleapis.com/auth/cloud-platform ChronoAIProject-NyxID-f496ca5/frontend/src/components/assistant/assistant-org-integration-action-dialog.tsx :90 const [scopes, setScopes] = useState("https://www.googleapis.com/auth/cloud-platform");
over-broad OAuth scope delete_repo ChronoAIProject-NyxID-f496ca5/frontend/src/components/dashboard/add-key-dialog.test.tsx :662 scope: "delete_repo",
over-broad OAuth scope delete_repo ChronoAIProject-NyxID-f496ca5/frontend/src/lib/assistant/approvals.test.ts :100 tool_name: "delete_repo",
committed secret private key ChronoAIProject-NyxID-f496ca5/backend/src/crypto/apple_client_secret.rs :109 PEM private key block (redacted)
committed secret private key ChronoAIProject-NyxID-f496ca5/backend/src/services/gcp_sa_service.rs :344 PEM private key block (redacted)
committed secret private key ChronoAIProject-NyxID-f496ca5/backend/src/test_utils.rs :1765 PEM private key block (redacted)
committed secret Google API key ChronoAIProject-NyxID-f496ca5/mobile/google-services.json :18 AIzaSy…(39 chars, redacted)
suspicious bundled script suspicious bundled script ChronoAIProject-NyxID-f496ca5/skills/nyxid/scripts/install.sh :115 if curl --proto '=https' --tlsv1.2 -fsSL "$INSTALLER_URL" | sh; then

other grade factors evidence elsewhere

recent drift +20 capability drift →

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:ChronoAIProject/NyxID/badge.svg)](https://mcpobservatory.com/servers/github:ChronoAIProject/NyxID/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of ChronoAIProject.

ChronoAIProject/NyxID

skills & prompt files 19

danger signals16

Navigate

Stream

Features

Display