MCP Observatory
44s ago Tracked 26,758 Last 44s ago 24h 1,572
github Go analyzed 55511c7

hanzoai/ai

github

Hanzo AI — LLM control plane, RAG, and model hub. Native Go routing for 66+ models over an OpenAI-compatible /v1 API; mounts as the 'ai' subsystem inside hanzoai/cloud.

maintainer
hanzoai
license
NOASSERTION
first seen
2026-07-25
last seen
2026-08-02
releases · 30d
55
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 55511c7 · analyzer v28 · 11h ago

danger signals1

  • suspicious endpoint 47.113.204.64 hanzoai-ai-55511c7/web/src/frame/AuditPage.js :28 <iframe id="iframe" title={"iframe"} src={`https://47.113.204.64:23554/?userId=${this.props.account.name}`} width="100%" height={window.innerHeight - 195} frameBorder="no" />
code evidence vv1.832.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 897

filesystem 1

  • fs hanzoai-ai-55511c7/web/mv.js :16 const fs = require("fs");

shell / exec 1

  • shell hanzoai-ai-55511c7/web/src/TaskListPage.js :53 const re = new RegExp(`^${prefix.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(\\d{3})$`);

network 48

  • net hanzoai-ai-55511c7/web/src/AssetListPage.js :140 this.fetch({pagination: this.state.pagination});
  • net hanzoai-ai-55511c7/web/src/BaseListPage.js :50 this.fetch({pagination});
  • net hanzoai-ai-55511c7/web/src/ChatPage.js :65 this.fetch();
  • net hanzoai-ai-55511c7/web/src/ConnectionListPage.js :38 this.fetch({
  • net hanzoai-ai-55511c7/web/src/DataChart.js :29 fetch(this.props.url, {
  • net hanzoai-ai-55511c7/web/src/FileListPage.js :114 this.fetch({pagination: this.state.pagination});
  • net hanzoai-ai-55511c7/web/src/FileTree.js :349 fetch(file.url, {method: "GET", credentials: "include"})
  • net hanzoai-ai-55511c7/web/src/FormDataTablePage.js :54 this.fetch({pagination}, res.data);
  • net hanzoai-ai-55511c7/web/src/RecordListPage.js :160 this.fetch({
  • net hanzoai-ai-55511c7/web/src/ScanListPage.js :367 this.fetch({pagination: this.state.pagination});
  • net hanzoai-ai-55511c7/web/src/Setting.js :565 const response = await fetch(url);
  • net hanzoai-ai-55511c7/web/src/VideoEditPage.js :177 fetch(dataUrl, {
  • net hanzoai-ai-55511c7/web/src/backend/AccountBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/auth/account`, {
  • net hanzoai-ai-55511c7/web/src/backend/ActivityBackend.js :23 return fetch(`${serverUrl}/v1/ops/activities?days=${days}&selectedUser=${selectedUser}&field=${fields}`, {
  • net hanzoai-ai-55511c7/web/src/backend/AgentsBackend.js :18 return fetch(`${Setting.ServerUrl}/v1/agents/dashboard`, {
  • net hanzoai-ai-55511c7/web/src/backend/ApplicationBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/auth/applications?owner=${owner}&p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}`, {
  • net hanzoai-ai-55511c7/web/src/backend/ArticleBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/content/articles/global`, {
  • net hanzoai-ai-55511c7/web/src/backend/AssetBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/content/assets?owner=${owner}&p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}`, {
  • net hanzoai-ai-55511c7/web/src/backend/ChatBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/chat/chats/global?p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}&store=${store}`, {
  • net hanzoai-ai-55511c7/web/src/backend/ConnectionBackend.js :20 return fetch(`${Setting.ServerUrl}/v1/ops/connections?owner=${owner}&p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}&status=${status}`, {
  • net hanzoai-ai-55511c7/web/src/backend/FileBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/rag/files/global?p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}`, {
  • net hanzoai-ai-55511c7/web/src/backend/FormBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/content/forms/global`, {
  • net hanzoai-ai-55511c7/web/src/backend/FormDataBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/content/forms/data?owner=${owner}&form=${form}&p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}`, {
  • net hanzoai-ai-55511c7/web/src/backend/GraphBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/content/graphs/global`, {
  • net hanzoai-ai-55511c7/web/src/backend/MessageBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/chat/messages/global?p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}&store=${store}`, {
  • net hanzoai-ai-55511c7/web/src/backend/ModelRouteBackend.js :18 return fetch(`${Setting.ServerUrl}/v1/ai/routes?owner=${owner}&p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}`, {
  • net hanzoai-ai-55511c7/web/src/backend/NodeBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/compute/nodes?p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}`, {
  • net hanzoai-ai-55511c7/web/src/backend/PatchBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/install-patch?provider=${encodeURIComponent(provider)}&patchId=${encodeURIComponent(patchId)}&scan=${encodeURIComponent(scan)}`, {
  • net hanzoai-ai-55511c7/web/src/backend/PermissionBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/get-global-permissions`, {
  • net hanzoai-ai-55511c7/web/src/backend/ProviderBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/ai/providers/global`, {
  • net hanzoai-ai-55511c7/web/src/backend/RecordBackend.js :18 return fetch(`${Setting.ServerUrl}/v1/ops/records?owner=${owner}&p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}`, {
  • net hanzoai-ai-55511c7/web/src/backend/ScaleBackend.js :10 return fetch(`${Setting.ServerUrl}/v1/work/scales/global`, {
  • net hanzoai-ai-55511c7/web/src/backend/ScanBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/compute/scans?owner=${owner}&p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}`, {
  • net hanzoai-ai-55511c7/web/src/backend/SessionBackend.js :18 return fetch(`${Setting.ServerUrl}/v1/auth/sessions?owner=${owner}&p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}`, {
  • net hanzoai-ai-55511c7/web/src/backend/StorageProviderBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/rag/stores/providers?owner=${owner}`, {
  • net hanzoai-ai-55511c7/web/src/backend/StoreBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/rag/stores/global?name=${name}&p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}`, {
  • net hanzoai-ai-55511c7/web/src/backend/SttBackend.js :24 return fetch(`${Setting.ServerUrl}/v1/process-speech-to-text`, {
  • net hanzoai-ai-55511c7/web/src/backend/SystemInfo.js :19 return fetch(`${Setting.ServerUrl}/v1/ops/system`, {
  • net hanzoai-ai-55511c7/web/src/backend/TaskBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/work/tasks/global`, {
  • net hanzoai-ai-55511c7/web/src/backend/TemplateBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/content/templates?owner=${owner}&p=${page}&pageSize=${pageSize}&field=${field}&value=${value}&sortField=${sortField}&sortOrder=${sortOrder}`, {
  • net hanzoai-ai-55511c7/web/src/backend/TreeFileBackend.js :20 return fetch(`${Setting.ServerUrl}/v1/rag/tree-files/${storeId}?store=${storeId}&name=${name}`, {
  • net hanzoai-ai-55511c7/web/src/backend/TtsBackend.js :26 return fetch(`${Setting.ServerUrl}/v1/generate-text-to-speech-audio`, {
  • net hanzoai-ai-55511c7/web/src/backend/UsageBackend.js :23 return fetch(`${serverUrl}/v1/ops/usages?days=${days}&store=${storeName}&selectedUser=${selectedUser}`, {
  • net hanzoai-ai-55511c7/web/src/backend/VectorBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/rag/vectors/global`, {
  • net hanzoai-ai-55511c7/web/src/backend/VideoBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/content/videos/global`, {
  • net hanzoai-ai-55511c7/web/src/backend/VmBackend.js :18 return fetch(`${Setting.ServerUrl}/v1/compute/vm-dashboard`, {
  • net hanzoai-ai-55511c7/web/src/backend/WorkflowBackend.js :19 return fetch(`${Setting.ServerUrl}/v1/work/workflows/global`, {
  • net hanzoai-ai-55511c7/web/src/serviceWorker.js :122 fetch(swUrl)

secrets 1

  • secrets hanzoai-ai-55511c7/web/src/Analytics.js :29 const INGEST_KEY = process.env.REACT_APP_EVENT_INGEST_KEY ? process.env.REACT_APP_EVENT_INGEST_KEY.trim() : undefined;

declared dependencies 200

  • github.com/ThinkInAIXYZ/go-mcp@v0.2.24
  • @ant-design/cssinjs@^1.23.0
  • @ant-design/icons@^5.6.1
  • @ant-design/x@^1.0.5
  • @bpmn-io/cm-theme@0.1.0-alpha.2
  • @bpmn-io/properties-panel@^3.26.4
  • @craco/craco@6.4.5
  • @cyntler/react-doc-viewer@^1.5.2
  • @dnd-kit/core@^6.3.1
  • @dnd-kit/utilities@^3.2.2
  • @hanzo/event@^0.3.3
  • @hanzo/iam-js-sdk@^0.19.1
  • @uiw/codemirror-extensions-langs@^4.23.8
  • @uiw/codemirror-theme-material@^4.23.8
  • @uiw/react-codemirror@^4.23.8
  • aliplayer-react@^0.7.0
  • antd@5.24.0
  • antd-token-previewer@^2.0.8
  • autoprefixer@^10.4.20
  • bpmn-font@^0.12.1
  • bpmn-js@^18.4.0
  • bpmn-js-color-picker@^0.7.2
  • bpmn-js-create-append-anything@^1.0.1
  • bpmn-js-element-templates@^2.11.0
  • bpmn-js-properties-panel@^5.35.0
  • camunda-bpmn-moddle@^7.0.1
  • class-variance-authority@^0.7.1
  • clsx@^2.1.1
  • codemirror@^6.0.1
  • cookie@^1.1.1
  • copy-to-clipboard@^3.3.1
  • d3-force@^3.0.0
  • dayjs@^1.11.19
  • diagram-js@^15.10.0
  • docx@^9.6.1
  • dompurify@^3.0.9
  • echarts@^5.4.2
  • echarts-for-react@^3.0.2
  • echarts-wordcloud@^2.1.0
  • eslint-plugin-unused-imports@^2.0.0
  • file-saver@^2.0.2
  • guacamole-common-js@^1.5.0
  • highlight.js@^11.9.0
  • i18next@^19.8.9
  • identicon.js@^2.3.3
  • js-base64@^3.7.7
  • katex@^0.16.9
  • lodash@4.17.21
  • lucide-react@^0.468.0
  • marked@^12.0.1
  • md5@^2.3.0
  • moment@^2.29.1
  • papaparse@^5.4.1
  • postcss@^8.4.49
  • qs@^6.15.0
  • rc-bullets@^1.5.16
  • react@^18.2.0
  • react-app-polyfill@^3.0.0
  • react-bpmn@^0.2.0
  • react-device-detect@1.17.0
  • react-dom@^18.2.0
  • react-draggable@^4.4.6
  • react-file-viewer@^1.2.1
  • react-force-graph@^1.48.1
  • react-force-graph-2d@^1.29.0
  • react-github-corner@^2.5.0
  • react-helmet@^6.1.0
  • react-highlight-words@^0.18.0
  • react-i18next@^11.8.7
  • react-markdown@^8.0.7
  • react-router-dom@^5.3.3
  • react-scripts@5.0.1
  • rehype-katex@^7.0.1
  • remark-frontmatter@^4.0.1
  • remark-gfm@^3.0.1
  • remark-math@^6.0.0
  • sonner@^1.7.1
  • tailwind-merge@^2.6.0
  • tailwindcss@^3.4.17
  • uuid@^13.0.0
  • xlsx@^0.16.9
  • @babel/core@^7.18.13
  • @babel/eslint-parser@^7.18.9
  • @babel/plugin-proposal-private-property-in-object@^7.21.11
  • @babel/preset-react@^7.18.6
  • cross-env@^7.0.3
  • eslint@8.22.0
  • eslint-plugin-react@^7.31.1
  • lint-staged@^13.0.3
  • stylelint@^14.11.0
  • stylelint-config-standard@^28.0.0
  • github.com/alibabacloud-go/darabonba-openapi@v0.1.18
  • github.com/alibabacloud-go/darabonba-openapi/v2@v2.1.16
  • github.com/alibabacloud-go/ecs-20140526/v4@v4.26.10
  • github.com/alibabacloud-go/resourcecenter-20221201@v1.5.1
  • github.com/alibabacloud-go/tea@v1.4.0
  • github.com/alibabacloud-go/tea-utils/v2@v2.0.9
  • github.com/alibabacloud-go/vod-20170321/v2@v2.16.10
  • github.com/aliyun/alibabacloud-oss-go-sdk-v2@v1.3.0
  • github.com/anthropics/anthropic-sdk-go@v1.4.0
  • github.com/aws/aws-sdk-go-v2@v1.41.5
  • github.com/aws/aws-sdk-go-v2/config@v1.32.14
  • github.com/aws/aws-sdk-go-v2/service/bedrockruntime@v1.8.0
  • github.com/baidubce/bce-qianfan-sdk/go/qianfan@v0.0.14
  • github.com/carmel/gooxml@v0.0.0-20220216072414-40ff56130850
  • github.com/cohere-ai/cohere-go/v2@v2.5.2
  • github.com/gage-technologies/mistral-go@v1.1.0
  • github.com/go-git/go-git/v5@v5.19.1
  • github.com/go-sql-driver/mysql@v1.10.0
  • github.com/google/uuid@v1.6.1-0.20241114170450-2d3c2a9cc518
  • github.com/gorilla/websocket@v1.5.4-0.20250319132907-e064f32e3674
  • github.com/hanzo-ds/go@v1.0.1
  • github.com/hanzoai/account@v0.2.1
  • github.com/hanzoai/cloud@v1.801.360
  • github.com/hanzoai/dashscopego@v0.6.0
  • github.com/hanzoai/dbx@v1.17.2
  • github.com/hanzoai/decimal@v0.1.1
  • github.com/hanzoai/go-cosyvoice@v1.0.0
  • github.com/hanzoai/go-openai@v1.41.0
  • github.com/hanzoai/go-openrouter@v1.0.0
  • github.com/hanzoai/money@v0.2.1
  • github.com/hanzoai/pdf@v1.2.0
  • github.com/hanzoai/search-go@v0.36.0
  • github.com/hanzoai/sqlite@v0.4.0
  • github.com/hanzoai/tasks@v1.52.4
  • github.com/hanzos3/go@v1.0.0
  • github.com/henomis/lingoose@v0.1.0
  • github.com/hupe1980/go-huggingface@v0.0.15
  • github.com/klauspost/compress@v1.18.6
  • github.com/leverly/ChatGLM@v1.2.0
  • github.com/lib/pq@v1.12.3
  • github.com/luxfi/crypto@v1.20.2
  • github.com/luxfi/geth@v1.20.1
  • github.com/luxfi/log@v1.6.0
  • github.com/luxfi/metric@v1.9.0
  • github.com/luxfi/trace@v1.4.0
  • github.com/luxfi/zap@v1.2.7
  • github.com/microsoft/go-mssqldb@v1.9.5
  • github.com/openai/openai-go/v2@v2.1.1
  • github.com/oschwald/geoip2-golang@v1.11.0
  • github.com/pkoukk/tiktoken-go@v0.1.7
  • github.com/robfig/cron/v3@v3.0.1
  • github.com/schollz/progressbar/v3@v3.18.0
  • github.com/shirou/gopsutil@v3.21.11+incompatible
  • github.com/tealeg/xlsx@v1.0.5
  • github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common@v1.3.77
  • github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/hunyuan@v1.3.48
  • github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/tbaas@v1.1.13
  • github.com/ua-parser/uap-go@v0.0.0-20251207011819-db9adb27a0b8
  • github.com/volcengine/volcengine-go-sdk@v1.0.141
  • github.com/wangbin/jiebago@v0.3.2
  • github.com/workweixin/weworkapi_golang@v0.0.0-20200831071321-c1fdfd3d6e7d
  • github.com/zap-proto/fiber/v3@v3.2.1
  • go.opentelemetry.io/otel/sdk@v1.44.0
  • go.yaml.in/yaml/v3@v3.0.4
  • golang.org/x/net@v0.57.0
  • golang.org/x/text@v0.40.0
  • golang.org/x/time@v0.15.0
  • k8s.io/api@v0.36.2
  • k8s.io/apimachinery@v0.36.2
  • k8s.io/client-go@v0.36.2
  • k8s.io/metrics@v0.36.1
  • sigs.k8s.io/kustomize/api@v0.21.1
  • sigs.k8s.io/kustomize/kyaml@v0.21.1
  • filippo.io/edwards25519@v1.2.0
  • github.com/alibabacloud-go/alibabacloud-gateway-spi@v0.0.5
  • github.com/alibabacloud-go/debug@v1.0.1
  • github.com/alibabacloud-go/endpoint-util@v1.1.0
  • github.com/alibabacloud-go/openapi-util@v0.1.2
  • github.com/alibabacloud-go/tea-utils@v1.4.5
  • github.com/alibabacloud-go/tea-xml@v1.1.3
  • github.com/aliyun/credentials-go@v1.4.7
  • github.com/andybalholm/brotli@v1.2.1
  • github.com/aws/aws-sdk-go-v2/service/s3@v1.97.3
  • github.com/aws/aws-sdk-go-v2/service/signin@v1.0.9
  • github.com/beorn7/perks@v1.0.1
  • github.com/bits-and-blooms/bitset@v1.24.4
  • github.com/blang/semver/v4@v4.0.0
  • github.com/cenkalti/backoff@v2.2.1+incompatible
  • github.com/cenkalti/backoff/v4@v4.3.0
  • github.com/clbanning/mxj/v2@v2.7.0
  • github.com/clipperhouse/uax29/v2@v2.7.0
  • github.com/consensys/gnark-crypto@v0.20.1
  • github.com/crate-crypto/go-eth-kzg@v1.5.0
  • github.com/deckarep/golang-set/v2@v2.9.0
  • github.com/decred/dcrd/dcrec/secp256k1/v4@v4.4.1
  • github.com/dgryski/go-rendezvous@v0.0.0-20200823014737-9f7001d12a5f
  • github.com/dlclark/regexp2/v2@v2.2.1
  • github.com/dop251/goja@v0.0.0-20260627200808-0b76000cabdb
  • github.com/dustin/go-humanize@v1.0.1
  • github.com/ethereum/c-kzg-4844/v2@v2.1.7
  • github.com/evanw/esbuild@v0.28.1
  • github.com/fasthttp/websocket@v1.5.12
  • github.com/fxamacker/cbor/v2@v2.9.1
  • github.com/go-errors/errors@v1.5.1
  • github.com/go-faster/city@v1.0.1
  • github.com/go-faster/errors@v0.7.1
  • github.com/go-ini/ini@v1.67.0
  • github.com/go-jose/go-jose/v4@v4.1.4
  • github.com/go-openapi/swag/cmdutils@v0.25.5