github Python analyzed 9f983e9

PrefectHQ/fastmcp

v4.0.5
github

🚀 The fast, Pythonic way to build MCP servers and clients.

maintainer
PrefectHQ
licence
Apache-2.0
first seen
2026-05-22
last seen
2026-09-19
releases · 30d
16
short id

PrefectHQ/fastmcp is an MCP server distributed on github, maintained by PrefectHQ, tracked here since May 2026. It has shipped 244 releases (currently 4.0.5) and exposes 7 tools. Tools include component, fn, list_files, read_file, store_files, submit_form, and 1 more. Its composite risk grade is E — an inferred review prompt computed from observed signals, not a verdict. 8 known CVEs on file.

what we found

8 advisories published against this server still applies to the version it ships, the most severe rated high, most recently 2026-03-31.

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 7 tools appear to reach filesystem, shell / exec, network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-19: 3 tools added and 16 tools removed.

full security breakdown →
tools 7
  • component
  • fn
  • list_files
  • read_file
  • store_files
  • submit_form
  • tool
release cadence · 90d 36 releases
06-22 00:00 08-05 00:00 now
recent releases last 10
version date src
4.0.5 2026-09-17 pypi
v4.0.5 2026-09-17 github
4.0.4 2026-09-16 pypi
v4.0.4 2026-09-16 github
4.0.3 2026-09-05 pypi
v4.0.3 2026-09-05 github
4.0.2 2026-09-02 pypi
v4.0.2 2026-09-02 github
4.0.1 2026-09-02 pypi
v4.0.1 2026-09-02 github

view all →