github Rust analyzed 940f1b0

dinglebear-ai/soma

Batteries-included RMCP runtime and scaffold for shipping Rust MCP servers with CLI/REST/HTTP MCP, auth, providers, plugins, and generated contracts.

Drift inferred · capture-to-capture

capabilities 0 tools

transport http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 940f1b0 · analyzer v28 · 2d ago

code evidence vv0.7.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1174

fs dinglebear-ai-soma-940f1b0/crates/shared/codex-app-server-client/clients/typescript/src/internal/find-binary.ts :6 import { existsSync } from "node:fs";

shell dinglebear-ai-soma-940f1b0/packages/soma-rmcp/bin/soma-rmcp.js :3 const { spawn } = require("node:child_process");

net dinglebear-ai-soma-940f1b0/apps/web/lib/api.ts :47 const res = await fetch(url, options);
net dinglebear-ai-soma-940f1b0/crates/shared/codex-app-server-client/clients/typescript/src/internal/free-port.ts :9 import { createServer } from "node:net";
net dinglebear-ai-soma-940f1b0/crates/shared/codex-app-server-client/clients/typescript/src/internal/sse.ts :7 // than through a real `fetch()`/HTTP round trip. `client.ts` imports
net dinglebear-ai-soma-940f1b0/crates/soma/web/assets/source/lib/api.ts :47 const res = await fetch(url, options);

prepack dinglebear-ai-soma-940f1b0/packages/soma-rmcp/package.json :58 node scripts/sync-readme.js
prepublishOnly dinglebear-ai-soma-940f1b0/packages/soma-rmcp/package.json :60 node scripts/check-package.js --release