github analyzed af38923

FerrLabs/MCP

Model Context Protocol server for the FerrLabs ecosystem (FerrFlow, FerrVault, FerrTrack, FerrGrowth, FerrFleet, FerrLens)

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 12 tools

transport stdio · streamable-http · http counts 12 tools · 0 res · 0 prompts permission surface via code analysis

code evidence vv6.5.3 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs FerrLabs-MCP-af38923/packages/mcp-core/src/auth/persistence.ts :1 import { mkdir, readFile, writeFile, chmod, rename, unlink } from 'node:fs/promises';
fs FerrLabs-MCP-af38923/packages/mcp-core/src/version.ts :1 import { readFileSync } from 'node:fs';
fs FerrLabs-MCP-af38923/scripts/smoke.ts :4 import { existsSync } from 'node:fs';

shell FerrLabs-MCP-af38923/packages/mcp-core/src/auth/oauth.ts :3 import { spawn } from 'node:child_process';
shell FerrLabs-MCP-af38923/scripts/smoke.ts :1 import { spawn } from 'node:child_process';

net FerrLabs-MCP-af38923/packages/mcp-core/src/auth/oauth.ts :2 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
net FerrLabs-MCP-af38923/packages/mcp-core/src/http.ts :18 return await fetch(url, { ...init, signal: controller.signal });
net FerrLabs-MCP-af38923/packages/mcp-core/src/transports/http.ts :5 } from 'node:http';

secrets FerrLabs-MCP-af38923/packages/mcp-core/src/auth/index.ts :18 const envToken = process.env.FERRLABS_API_TOKEN ?? process.env.FERRFLOW_API_TOKEN;
secrets FerrLabs-MCP-af38923/packages/mcp-core/src/auth/persistence.ts :12 const override = process.env.FERRLABS_MCP_TOKEN_PATH;