Tyk AI Studio provides an AI gateway and comprehensive suite of capabilities to manage, govern, and interact with AI across your organization
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
- HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
- HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
- HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
- HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
- HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit f5983e9 · analyzer v33 · 4d ago
skills & prompt files 7
- skill TykTechnologies-ai-studio-f5983e9/.claude/skills/dev-env/SKILL.md
- skill TykTechnologies-ai-studio-f5983e9/.claude/skills/dev-logs/SKILL.md
- skill TykTechnologies-ai-studio-f5983e9/.claude/skills/dev-restart/SKILL.md
- skill TykTechnologies-ai-studio-f5983e9/.claude/skills/dev-test/SKILL.md
- skill TykTechnologies-ai-studio-f5983e9/.claude/skills/plugin-new/SKILL.md
- agent-rules TykTechnologies-ai-studio-f5983e9/.clinerules
- agent-rules TykTechnologies-ai-studio-f5983e9/CLAUDE.md
danger signals3
- committed secret committed .env TykTechnologies-ai-studio-f5983e9/dev/.env.dev :1
env file shipped with populated values - committed secret committed .env TykTechnologies-ai-studio-f5983e9/dev/.env.gateway.dev :1
env file shipped with populated values - committed secret committed .env TykTechnologies-ai-studio-f5983e9/microgateway/.env.control :1
env file shipped with populated values
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 1802
filesystem 2
- fs (weak) TykTechnologies-ai-studio-f5983e9/tests/ui/global-setup.ts :4
import * as fs from 'fs'; - fs (weak) TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/selectLabelAssociation.test.js :1
const fs = require("fs");
network 11
- net (weak) TykTechnologies-ai-studio-f5983e9/tests/ui/utils/openai.ts :28
const response = await fetch(customUrl, { - net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/components/agents/AgentDetail.js :234
const response = await fetch(`${baseURL}/agents/${id}/message?session_id=${testSessionId}`, { - net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/components/tools/ImportOpenAPIWizard/index.js :142
const response = await fetch(directSpec.spec); - net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/context/EditionContext.js :2
import axios from 'axios'; - net (weak) TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/context/EditionContext.test.js :3
import axios from 'axios'; - net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/services/agentService.js :245
const response = await fetch(`${baseURL}/agents/${agentId}/message`, { - net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/utils/apiClient.js :1
import axios from 'axios'; - net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/utils/pubClient.js :1
import axios from "axios"; - net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/utils/urlUtils.js :1
import axios from "axios"; - net (weak) TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/utils/urlUtils.test.js :1
import axios from 'axios'; - net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/portal/pages/OAuthConsentPage.js :4
import axios from 'axios';
secrets 2
- secrets (weak) TykTechnologies-ai-studio-f5983e9/tests/ui/config.ts :18
bootstrap_admin_password: process.env.BOOTSTRAP_ADMIN_PASSWORD || 'Admin#2025', - secrets (weak) TykTechnologies-ai-studio-f5983e9/tests/ui/global-setup.ts :24
bootstrap_admin_password: process.env.BOOTSTRAP_ADMIN_PASSWORD || 'Admin#2025',
declared dependencies 200
- github.com/mark3labs/mcp-go@v0.37.1-0.20250812151906-9f16336f83e1
- dario.cat/mergo@v1.0.2
- github.com/Masterminds/semver/v3@v3.2.1
- github.com/TykTechnologies/midsommar/microgateway@v0.0.0
- github.com/TykTechnologies/midsommar/v2/enterprise@v0.0.0
- github.com/TykTechnologies/tyk-identity-broker@v1.7.0
- github.com/amikos-tech/chroma-go@v0.2.5
- github.com/andybalholm/brotli@v1.2.0
- github.com/aws/aws-sdk-go-v2@v1.41.5
- github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.8
- github.com/aws/aws-sdk-go-v2/config@v1.32.14
- github.com/aws/aws-sdk-go-v2/credentials@v1.19.14
show 28 more
- github.com/aws/aws-sdk-go-v2/service/bedrockruntime@v1.50.4
- github.com/docker/docker@v28.5.2+incompatible
- github.com/docker/go-connections@v0.6.0
- github.com/dslipak/pdf@v0.0.2
- github.com/gin-contrib/cors@v1.7.2
- github.com/gin-gonic/gin@v1.10.1
- github.com/go-mail/mail@v2.3.1+incompatible
- github.com/go-openapi/strfmt@v0.27.0
- github.com/gofrs/uuid@v4.4.0+incompatible
- github.com/google/uuid@v1.6.0
- github.com/gorilla/csrf@v1.7.3
- github.com/gorilla/mux@v1.8.1
- github.com/gorilla/sessions@v1.2.1
- github.com/gosimple/slug@v1.15.0
- github.com/hashicorp/go-hclog@v1.6.3
- github.com/hashicorp/go-plugin@v1.7.0
- github.com/joho/godotenv@v1.5.1
- github.com/lib/pq@v1.10.9
- github.com/liushuangls/go-anthropic/v2@v2.8.0
- github.com/lu4p/cat@v0.1.5
- github.com/nats-io/nats.go@v1.45.0
- github.com/opencontainers/image-spec@v1.1.1
- github.com/pb33f/libopenapi@v0.18.0
- github.com/pgvector/pgvector-go@v0.1.1
- github.com/pinecone-io/go-pinecone@v1.1.1
- github.com/pkoukk/tiktoken-go@v0.1.6
- github.com/prometheus/client_golang@v1.24.1
- github.com/redis/go-redis/v9@v9.6.3
160 more not shown — this panel samples each group; the count above is the real total.