MCP Observatory
2m ago Tracked 26,718 Last 2m ago 24h 1,587
github analyzed af5261c

ergoveritas1-alt/certscore.ai

github

CertScore MCP server for scan creation, findings, evidence, and domain lookup.

maintainer
ergoveritas1-alt
license
—
first seen
2026-07-05
last seen
2026-07-05
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged dynamic code execution in ergoveritas1-alt/certscore.ai
capabilities 0 tools
transport stdio · streamable-http · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit af5261c · analyzer v28 · 2d ago

skills & prompt files 1

danger signals52

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1459

filesystem 55

  • fs ergoveritas1-alt-certscore.ai-af5261c/actions/pulse-check/check.mjs :2 import { appendFileSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/apps/v2-dag-lambda/src/handler.ts :8 import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/src/browser-cleanup.ts :1 import { readdir, rm, stat } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/src/validation/local-v2-dag-lambda-results.ts :16 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/apps/web/app/api/scans/[scanId]/visual-evidence/[artifactId]/route.ts :3 import { readFile, readdir } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/admin/v2-shadow-preview-loader.ts :3 import { existsSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/admin/v2-scan-lab-artifacts.ts :1 import { existsSync, readFileSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/admin/v2-scan-lab-runner.ts :1 import { existsSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/scans/local-v2-dag-lambda-result-poller.ts :12 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/scans/local-v2-dag-lambda-simulated-dispatch.ts :2 import { readFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/scans/local-v2-dag-report.ts :5 import { readFileSync, statSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/outputs/no-go-calibration-2026-07-10/build.mjs :1 import fs from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-mcp/src/index.ts :2 import { realpathSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-mcp/src/version.ts :1 import { readFileSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/cli/project.ts :1 import { readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/cli/shadow-project.ts :1 import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-shadow-output.ts :1 import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-allowlist-output.ts :1 import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-concern-policy-comparison-output.ts :1 import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-concern-policy-input-output.ts :1 import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-concern-policy-shape-comparison-output.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-concern-policy-simulation-output.ts :1 import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-evidence-preview-output.ts :1 import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-evidence-preview.ts :1 import { readdir, readFile, stat } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-limited-admin-preview-approval-metadata-output.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-limited-admin-preview-implementation-proposal-output.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-manual-reviewer-packet-output.ts :1 import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-normalized-concern-adapter-output.ts :1 import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-normalized-concern-draft-mapping-output.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-normalized-concern-schema-comparison-output.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-policy-copy-review-artifact-output.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-post-reject-calibration.ts :1 import { mkdir, readdir, readFile, stat, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-product-surface-proposal-draft-output.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-production-integration-candidate-output.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-production-readiness-gate-draft-output.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-report-adapter/src/wc01-v2-projection-shape-comparison-output.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-review-engine/src/cli/review.ts :2 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/artifact-writer.ts :1 import { mkdir, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/calibration.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/cli/calibrate-no-go-corpus.ts :2 import { readFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/cli/consent-dag-shadow.ts :2 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/cli/consent-geometry-final-summary.ts :2 import { readdir, readFile, stat, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/cli/consent-geometry-review.ts :2 import { readFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/cli/consent-geometry.ts :2 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/cli/inspect.ts :2 import { readFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/consent-flow-replay-runner.ts :1 import { existsSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/consent-geometry-visual-review.ts :1 import { readdir, readFile, stat, writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/index.ts :2 import { closeSync, openSync, readSync, statSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/replay-capture-health.ts :1 import { existsSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/scanners/consent-flow-runtime-scanner.ts :28 import { writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/scanners/pre-consent-runtime-scanner.ts :27 import { writeFile } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/shared/src/utils/artifact-retention.ts :1 import { readdir, rm, stat } from "node:fs/promises";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/validation-shared/src/financial-commercial-claims-draft.ts :1 import { readFileSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/validation-shared/src/financial-commercial-claims-promote.ts :1 import { readFileSync, writeFileSync } from "node:fs";
  • fs ergoveritas1-alt-certscore.ai-af5261c/packages/validation-shared/src/privacy-runtime-findings-promote.ts :1 import { readFileSync, writeFileSync } from "node:fs";

shell / exec 3

  • shell ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/src/browser-cleanup.ts :4 import { execFile as execFileCallback } from "node:child_process";
  • shell ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/admin/v2-scan-lab-runner.ts :2 import { spawn } from "node:child_process";
  • shell ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/scans/local-v2-dag-lambda-simulated-dispatch.ts :1 import { execFile } from "node:child_process";

network 28

  • net ergoveritas1-alt-certscore.ai-af5261c/actions/pulse-check/check.mjs :91 const response = await fetch(apiUrl(pathOrUrl), {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/browser-extension/src/background.js :215 await fetch(httpsUrl.href, { cache: "no-store", credentials: "omit", method: "HEAD", redirect: "follow" });
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/mcp/src/index.ts :1 import { createServer, type IncomingMessage, type ServerResponse } from "node:http";
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/v2-dag-lambda/runtime-bootstrap.mjs :26 await fetch(`http://${runtimeApi}/2018-06-01/runtime/invocation/${invocationId}/${suffix}`, {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/v2-dag-lambda/src/handler.ts :5 import { request as httpRequest } from "node:http";
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/src/validation/llm-client.ts :57 const response = await fetch(OPENAI_API_URL, {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/src/validation/nano-document-discovery.ts :345 const response = await fetch(url, {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/src/validation/nano-document-extraction.ts :512 const response = await fetch(OPENAI_API_URL, {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/src/validation/pipeline.ts :5295 const response = await fetch(input.url, {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/src/validation/repository.ts :689 const response = await fetch(sourceUrl, { headers: sourceRequest.headers });
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/src/validation/vendor-enrichment.ts :349 const response = await fetch(OPENAI_API_URL, {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/app/pulse/feedback/pulse-feedback-form.tsx :33 const response = await fetch("/api/v1/pulse/feedback", {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/components/developers/mcp-light-actions.tsx :44 const response = await fetch("/api/v2/scans", {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/components/domains/add-domain-form.tsx :89 fetch(buildRecentScanAvailabilityUrl({ domain: effectiveSubmitDomain, scanFrom: scanFrom as ServerScanFrom }), {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/components/marketing/domain-scan-form.tsx :272 void fetch("/api/scan-submit-events", {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/components/marketing/preview-scan-state.tsx :26 const response = await fetch(`/api/preview-scan/${scan.scanId}`, {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/components/scans/scan-status-auto-refresh.tsx :230 const response = await fetch(`/api/scan-status/${encodeURIComponent(scanId)}?includeFindings=0`, {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/request-source-ip.ts :1 import { isIP } from "node:net";
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/preview-scan/urlscan-fallback.ts :213 const response = await fetch(url, {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/scans/domain-benchmark-estimate.ts :266 const response = await fetch(OPENAI_API_URL, {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/scans/local-v2-dag-report.ts :485 const match = timing.label.match(/^policy (?:rendered )?fetch(?: fallback)? (\d+)$/i);
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/settings/generate-google-query-urls.ts :47 const response = await fetch(`${GOOGLE_CUSTOM_SEARCH_API_URL}?${searchParams.toString()}`, {
  • net ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/validation/repository.ts :284 const response = await fetch(env.VALIDATION_TRANCO_SOURCE_URL ?? TRANCO_SOURCE_FALLBACK_URL, {
  • net ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/domain-utils.ts :1 import { isIP } from "node:net";
  • net ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/scanners/policy-surface-scanner.ts :18 import { isIP } from "node:net";
  • net ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/scanners/pre-consent-runtime-scanner.ts :28 import { isIP } from "node:net";
  • net ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/transport-fallback.ts :1 import { isIP } from "node:net";
  • net ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-sdk/src/client.ts :180 const response = await this.fetch(endpoint, { signal: options.signal });

secrets 11

  • secrets ergoveritas1-alt-certscore.ai-af5261c/apps/web/app/developers/sdk/page.tsx :61 apiKey: process.env.CERTSCORE_API_KEY
  • secrets ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/pulse/request.ts :62 const secret = process.env.CERTSCORE_OAUTH_JWT_SECRET?.trim() || process.env.JWT_SIGNING_KEY?.trim();
  • secrets ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/browser-scans/repository.ts :352 return process.env.BX01_OBSERVED_SIGNAL_INGEST_TOKEN?.trim() || null;
  • secrets ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/email/gmail.ts :13 const appPassword = process.env.GMAIL_SMTP_APP_PASSWORD?.replace(/\s+/g, "");
  • secrets ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/integrations/api-keys.ts :489 const jwtSecret = process.env.CERTSCORE_OAUTH_JWT_SECRET?.trim() || process.env.JWT_SIGNING_KEY?.trim();
  • secrets ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/oauth/mcp-oauth.ts :79 const secret = process.env.CERTSCORE_OAUTH_JWT_SECRET?.trim() || process.env.JWT_SIGNING_KEY?.trim();
  • secrets ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/scans/domain-benchmark-estimate.ts :260 const apiKey = process.env.OPENAI_API_KEY?.trim();
  • secrets ergoveritas1-alt-certscore.ai-af5261c/apps/web/server/settings/generate-google-query-urls.ts :28 const apiKey = process.env.GOOGLE_CUSTOM_SEARCH_API_KEY;
  • secrets ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-mcp/src/index.ts :61 apiKey: process.env.CERTSCORE_API_KEY,
  • secrets ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/calibration.ts :88 const apiKey = input.env?.OPENAI_API_KEY ?? process.env.OPENAI_API_KEY;
  • secrets ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/cli/consent-geometry-review.ts :33 const apiKey = process.env.OPENAI_API_KEY?.trim();

database 2

  • db ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/src/validation/repository.ts :3 import type { PoolClient } from "pg";
  • db ergoveritas1-alt-certscore.ai-af5261c/packages/db/src/postgres.ts :1 import { Pool, type PoolConfig, type QueryResult, type QueryResultRow } from "pg";

install hooks 2

  • prepack ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-mcp/package.json :55 pnpm run build
  • prepack ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-sdk/package.json :37 pnpm run build

declared dependencies 7

  • @modelcontextprotocol/sdk@^1.29.0
  • @types/node@^24.0.0
  • @types/pg@^8.20.0
  • esbuild@^0.27.3
  • tsx@^4.21.0
  • turbo@^2.5.0
  • typescript@^5.8.2

transport_posture 1

  • binds all interfaces (0.0.0.0) ergoveritas1-alt-certscore.ai-af5261c/apps/mcp/src/index.ts :280 server.listen(env.PORT, "0.0.0.0", () => {