github analyzed ea67f45

Furowu/brokre

AI-safe credential broker for MCP — run saved SSH/MySQL/psql aliases; passwords never reach AI.

maintainer: Furowu
license: —
first seen: 2026-06-12
last seen: 2026-06-12
releases · 30d: 0
short id

Drift inferred · capture-to-capture

HIGH 2026-06-13 code analysis flagged committed secret in Furowu/brokre

capabilities 0 tools

transport stdio · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 1

fs Furowu-brokre-ea67f45/packages/brokre-mcp/index.js :11 const fs = require('fs');

shell / exec 1

shell Furowu-brokre-ea67f45/packages/brokre-mcp/index.js :10 const { spawn, execFileSync } = require('child_process');

network 1

net Furowu-brokre-ea67f45/packages/brokre-mcp/index.js :12 const http = require('http');