Self-hosted MCP gateway — aggregate MCP servers & APIs, curate & compose tools, and expose virtual MCP endpoints to your agents with per-agent keys, secrets vault, schedules & logs.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 2935fec · analyzer v33 · 10h ago
danger signals2
- suspicious endpoint 169.254.169.254 (cloud metadata) comind-pro-comind-mcp-2935fec/server/src/runtime/virtual.test.ts :68
expect(() => assertSafeUrl('http://169.254.169.254/latest/meta-data')).toThrow(/private/i); - suspicious endpoint 8.8.8.8 comind-pro-comind-mcp-2935fec/server/src/runtime/virtual.test.ts :75
expect(() => assertSafeUrl('https://8.8.8.8/')).not.toThrow();
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 98
filesystem 2
- fs comind-pro-comind-mcp-2935fec/server/src/config.ts :1
import { existsSync, readFileSync } from 'node:fs'; - fs comind-pro-comind-mcp-2935fec/server/src/db/client.ts :1
import { existsSync } from 'node:fs';
network 6
- net comind-pro-comind-mcp-2935fec/server/src/auth/token-manager.ts :33
const res = await fetch(url, { method: 'POST', headers, body: new URLSearchParams(params).toString() }); - net comind-pro-comind-mcp-2935fec/server/src/connectors/fetch.ts :3
/** fetch() with an AbortController timeout so a hung upstream can't hang the - net comind-pro-comind-mcp-2935fec/server/src/connectors/imap.ts :203
for await (const m of c.fetch(pick.join(','), { uid: true, envelope: true, flags: true }, { uid: true })) { - net (weak) comind-pro-comind-mcp-2935fec/server/src/runtime/python.test.ts :1
import net from 'node:net'; - net comind-pro-comind-mcp-2935fec/server/src/runtime/virtual.ts :2
import { isIP } from 'node:net'; - net comind-pro-comind-mcp-2935fec/web/src/api.ts :42
const res = await fetch(BASE + path, opts);
secrets 1
- secrets comind-pro-comind-mcp-2935fec/server/src/auth/oauth-jwt.ts :22
const envKey = process.env.OAUTH_SIGNING_KEY;
database 2
- db comind-pro-comind-mcp-2935fec/server/src/connectors/sql.ts :1
import pg from 'pg'; - db comind-pro-comind-mcp-2935fec/server/src/db/client.ts :8
import pg from 'pg';
declared dependencies 1
- @biomejs/biome@^2.5.1