CertScore MCP server for scan creation, findings, evidence, and domain lookup.
C elevated
- capability exposure inferred + 35
- recent drift inferred + 12
- tool safety inferred + 5
- trust mitigators mixed − 8
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
graded 4m ago · see ecosystem CVEs →
- B · 27 → C · 44
Inferred surface — each links to servers holding it:
No known CVEs for this server.
- medium dangerous code
dynamic exec: new Function()
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit af5261c · analyzer v28 · 2d ago
skills & prompt files 1
- agent-rules ergoveritas1-alt-certscore.ai-af5261c/AGENTS.md
danger signals52
- dynamic code execution new Function() ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/analytics/umami-integration.test.ts :14
assert.doesNotThrow(() => new Function(script)); - suspicious endpoint analytics.google.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/scripts/live-consent-audit.test.ts :115
url: "https://analytics.google.com/g/collect", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/validation-worker/src/validation/vendor-enrichment.test.ts :61
url: "https://www.google-analytics.com/g/collect?v=2" - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/components/scans/executive-summary-card.test.ts :433
preconsent_cookie_initiator_urls: ["https://www.google-analytics.com/analytics.js", "https://connect.facebook.net/en_US/fbevents.js"], - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/canonical-review-finding.test.ts :401
"vendor:Google Analytics|relationship:first_party|endpoint:first_party_collection_proxy|host:www.google-analytics.com|source_url:https://www.google-analytics.com/g/collect?v=2" - suspicious endpoint analytics.google.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/concern-policy.test.ts :2433
"https://analytics.google.com/g/collect?v=2", - suspicious endpoint edge.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/executive-findings-projection.test.ts :3558
"https://edge.fullstory.com/s/settings/15TFZD/v1/web", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/finding-evidence-contracts.test.ts :362
sourceEvidenceIds: ["policy:cookie#reject", "cookie:_ga", "request:https://www.google-analytics.com/g/collect"] - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/gdpr-eprivacy-coverage-checklist.test.ts :2614
representativeUrl: "https://www.google-analytics.com/g/collect" - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/gdpr-eprivacy-coverage-policy.test.ts :5463
requestUrl: "https://www.google-analytics.com/g/collect?v=2", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/hybrid-runtime-evidence.test.ts :909
const googleUrl = "https://www.google-analytics.com/g/collect?tid=G-TEST"; - suspicious endpoint edge.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/hybrid-runtime-evidence.test.ts :910
const fullStoryUrl = "https://edge.fullstory.com/s/fs.js"; - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/normalized-concerns.test.ts :593
requestUrl: "https://www.google-analytics.com/analytics.js", - suspicious endpoint edge.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/normalized-concerns.test.ts :602
requestUrl: "https://edge.fullstory.com/s/settings/15TFZD/v1/web", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/policy-behavior-conflict.fixtures.ts :202
requests: ["https://www.google-analytics.com/g/collect"], - suspicious endpoint cdn.segment.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/preconsent-public-evidence.test.ts :56
{ ...common, requestUrl: "https://cdn.segment.com/analytics.js", classification: "library" }, - suspicious endpoint api.segment.io (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/preconsent-public-evidence.test.ts :57
{ ...common, requestUrl: "https://api.segment.io/v1/p", classification: "tracking", collectionEndpointObserved: true } - suspicious endpoint edge.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/preconsent-public-evidence.test.ts :76
pageUrl: "https://edge.fullstory.com/s/settings/15TFZD/v1/web", - suspicious endpoint sr-client-cfg.amplitude.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/preconsent-public-evidence.test.ts :118
url: "https://sr-client-cfg.amplitude.com/config/abc", - suspicious endpoint api2.amplitude.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/preconsent-public-evidence.test.ts :144
url: "https://api2.amplitude.com/2/httpapi", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/preconsent-public-evidence.test.ts :658
inferDirectEndpointVendorFromUrl("https://www.google-analytics.com/analytics.js"), - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/promotion-evidence-contracts.test.ts :866
runtimeAnchorRef: "https://www.google-analytics.com/g/collect?v=2", - suspicious endpoint rs.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/regulatory-risk-source.test.ts :67
"https://rs.fullstory.com/rec/page.js", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/runtime-vendor-disclosure.test.ts :155
"https://www.google-analytics.com/g/collect?v=2", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/scan-report-unified-findings.test.ts :1828
"https://www.google-analytics.com/g/collect" - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/apps/web/lib/scans/unified-findings.test.ts :2547
initiatorUrl: "https://www.google-analytics.com/analytics.js", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-review-engine/src/fixtures.ts :117
url: "https://www.google-analytics.com/g/collect?v=2&tid=G-TEST", - suspicious endpoint rs.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-review-engine/src/fixtures.ts :203
url: "https://rs.fullstory.com/s/fs.js", - suspicious endpoint rs.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-review-engine/src/index.test.ts :1037
key: "endpoint:https://rs.fullstory.com/rec/page", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-review-engine/src/index.test.ts :4016
matchedUrls: ["https://www.google-analytics.com/g/collect"], - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/consent-flow-replay-runner.test.ts :493
harUrls: ["https://policy-corpus.test/", "https://www.google-analytics.com/g/collect"], - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/domain-utils.test.ts :31
assert.equal(classifyParty("https://www.google-analytics.com/g/collect", "http://127.0.0.1:3000"), "third_party"); - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/inspector.test.ts :145
requestUrl: "https://www.google-analytics.com/g/collect?v=2&tid=G-TEST", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/journey-builder.test.ts :19
requestUrl: "https://www.google-analytics.com/g/collect?v=2&tid=G-TEST", - suspicious endpoint rs.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/journey-builder.test.ts :163
scriptUrl: "https://rs.fullstory.com/s/fs.js", - suspicious endpoint o514642.ingest.us.sentry.io (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/journey-builder.test.ts :753
requestUrl: "https://o514642.ingest.us.sentry.io/api/514642/envelope/", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-scan-core/src/test-fixtures/static-server.ts :1091
return `<img alt="" src="https://www.google-analytics.com/g/collect?v=2&tid=G-TEST">`; - suspicious endpoint sr-client-cfg.amplitude.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-vendor-resolver/src/index.test.ts :126
url: "https://sr-client-cfg.amplitude.com/config/abc123", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-vendor-resolver/src/index.test.ts :823
url: "https://www.google-analytics.com/g/collect?v=2&tid=G-TEST", - suspicious endpoint region1.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-vendor-resolver/src/index.test.ts :961
url: "https://region1.google-analytics.com/g/collect?v=2&tid=G-TEST&en=page_view", - suspicious endpoint rs.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-vendor-resolver/src/index.test.ts :1188
url: "https://rs.fullstory.com/s/fs.js", - suspicious endpoint eu-assets.i.posthog.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-vendor-resolver/src/index.test.ts :1631
request("https://eu-assets.i.posthog.com/static/array.js", "eu-assets.i.posthog.com"), - suspicious endpoint api.segment.io (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-vendor-resolver/src/index.test.ts :1711
url: "https://api.segment.io/v1/track", - suspicious endpoint sentry.io (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-vendor-resolver/src/index.test.ts :1834
request("https://sentry.io/api/123/envelope/", "sentry.io"), - suspicious endpoint assets.sentry.io (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-vendor-resolver/src/index.test.ts :1835
request("https://assets.sentry.io/example.js", "assets.sentry.io"), - suspicious endpoint o514642.ingest.us.sentry.io (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-vendor-resolver/src/index.test.ts :1836
request("https://o514642.ingest.us.sentry.io/api/514642/envelope/", "o514642.ingest.us.sentry.io"), - suspicious endpoint edge.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/certscore-vendor-resolver/src/index.test.ts :2075
request("https://edge.fullstory.com/s/settings/o-221JN4-na1/v1/web", "edge.fullstory.com"), - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/validation-shared/src/privacy-runtime-findings.dataset.ts :314
requestUrls: [`https://www.google-analytics.com/g/collect?reviewed=${index}`], - suspicious endpoint www.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/validation-shared/src/privacy-runtime-findings.dataset.ts :958
session_replay_observed: "https://www.fullstory.com/", - suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/packages/validation-shared/src/privacy-runtime-findings.reviewed.ts :871
"https://www.google-analytics.com/analytics.js", - suspicious endpoint segment.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/scripts/build-v2-regulatory-gold-corpus-stage1.ts :824
target("tech-segment", "https://segment.com/", "tech/SaaS", "primary", fullPolicy, ["cross_border_endpoint_review", "session_replay_fingerprinting_review"], ["Segment", "Google"]), - suspicious endpoint www.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-af5261c/scripts/build-v2-regulatory-gold-corpus-stage1.ts :835
target("tech-fullstory", "https://www.fullstory.com/", "tech/SaaS", "primary", fullPolicy, ["session_replay_fingerprinting_review", "cookie_notice_availability"], ["FullStory"]),
- recent drift +12 capability drift →
[](https://mcpobservatory.com/servers/github:ergoveritas1-alt/certscore.ai/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of ergoveritas1-alt.