drwho.me: free DNS, email, TLS and developer tools, and a free MCP server for AI agents
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http
verified
reported
listed in the official MCP registry counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit e949d59 · analyzer v33 · 7h ago
danger signals2
- suspicious endpoint www.google-analytics.com (telemetry) hikmahtech-drwhome-e949d59/src/app.tsx :37
"https://www.google-analytics.com", - suspicious endpoint www.google-analytics.com (telemetry) hikmahtech-drwhome-e949d59/src/mcp/analytics.ts :12
const url = `https://www.google-analytics.com/mp/collect?measurement_id=${id}&api_secret=${secret}`;
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 162
filesystem 4
- fs (weak) hikmahtech-drwhome-e949d59/scripts/build-client.mjs :2
import { cpSync, mkdirSync, readdirSync } from "node:fs"; - fs (weak) hikmahtech-drwhome-e949d59/scripts/gen-manifests.ts :3
import { writeFileSync } from "node:fs"; - fs hikmahtech-drwhome-e949d59/src/views/load.ts :1
import { readdirSync } from "node:fs"; - fs (weak) hikmahtech-drwhome-e949d59/tests/unit/mcp.test.ts :1
import { readFileSync } from "node:fs";
network 7
- net hikmahtech-drwhome-e949d59/src/client/check.ts :10
const res = await fetch(`/api/v1/check/${tool}?domain=${encodeURIComponent(domain)}`); - net hikmahtech-drwhome-e949d59/src/lib/blacklist.ts :69
const res = await fetch(`${DOH}?name=${encodeURIComponent(name)}&type=A`, { - net hikmahtech-drwhome-e949d59/src/lib/dns.ts :38
res = await fetch( - net hikmahtech-drwhome-e949d59/src/lib/ipinfo.ts :35
const res = await fetch(`https://ipinfo.io/${encodeURIComponent(ip)}?token=${token}`, { - net hikmahtech-drwhome-e949d59/src/mcp/analytics.ts :13
void fetch(url, { - net hikmahtech-drwhome-e949d59/src/server/ssrf.ts :2
import net, { isIP } from "node:net"; - net (weak) hikmahtech-drwhome-e949d59/tests/unit/ssrf.test.ts :1
import { createServer } from "node:http";
secrets 2
- secrets hikmahtech-drwhome-e949d59/src/lib/ipinfo.ts :26
token = process.env.IPINFO_TOKEN ?? "", - secrets hikmahtech-drwhome-e949d59/src/mcp/analytics.ts :10
const secret = process.env.GA_API_SECRET;
declared dependencies 16
- @modelcontextprotocol/sdk@^1.30.0
- @hikmahtech/dossier-checks@file:vendor/hikmahtech-dossier-checks-0.2.0.tgz
- @hono/mcp@^0.3.2
- @hono/node-server@^1.13.7
- hono@^4.6.14
- tsx@^4.19.2
- ua-parser-js@^2.0.10
- undici@^8.10.2
- zod@^4.6.5
- @biomejs/biome@^1.9.4
- @fontsource-variable/archivo@^5.1.0
- @fontsource/ibm-plex-mono@^5.1.0
show 4 more
- @types/node@^22.10.2
- esbuild@^0.24.2
- typescript@^5.7.2
- vitest@^2.1.8