Access TLE orbital data for thousands of satellites including ISS, Starlink, and Hubble.
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret in ivanstan/tle-api
transport http · sse
verified
reported
listed in the official MCP registry counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit bb9c9f2 · analyzer v33 · 6d ago
danger signals2
- committed secret committed .env ivanstan-tle-api-bb9c9f2/.env :1
env file shipped with populated values - committed secret Google API key ivanstan-tle-api-bb9c9f2/index.html :20
AIzaSy…(39 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 145
filesystem 1
- fs (weak) ivanstan-tle-api-bb9c9f2/scripts/postinstall.cjs :3
const fs = require('fs');
shell / exec 1
- shell (weak) ivanstan-tle-api-bb9c9f2/scripts/postinstall.cjs :1
const { execSync } = require('child_process');
network 6
- net ivanstan-tle-api-bb9c9f2/client/pages/Browse.tsx :623
const response = await fetch(url + '?' + searchParams.toString()) - net ivanstan-tle-api-bb9c9f2/client/pages/Health.tsx :269
const response = await fetch( - net ivanstan-tle-api-bb9c9f2/client/pages/SatelliteMap.tsx :630
// ── TLE fetch (once per ID list change) ───────────────────────────────────── - net ivanstan-tle-api-bb9c9f2/client/services/TleApi.ts :13
let result: any = await fetch(`https://tle.ivanstanojevic.me/api/tle/${satelliteId}/propagate?date=${atom}`) - net ivanstan-tle-api-bb9c9f2/client/services/TlePopularProvider.ts :8
const response = await fetch(url) - net ivanstan-tle-api-bb9c9f2/client/services/TleProvider.ts :15
const response = await fetch(url);
install hooks 1
- postinstall ivanstan-tle-api-bb9c9f2/package.json :16
node scripts/postinstall.cjs
declared dependencies 61
- @emotion/react@^11.13.5
- @emotion/styled@^11.13.5
- @mui/icons-material@^6.3.0
- @mui/material@^6.3.0
- @mui/x-data-grid@^7.24.0
- @mui/x-date-pickers@^7.24.0
- @react-google-maps/api@^2.20.8
- @sentry/react@^8.47.0
- chart.js@^4.4.7
- date-fns@^2.30.0
- luxon@^3.5.0
- mobx@^6.13.5
show 28 more
- mobx-utils@^6.0.8
- react@^18.3.1
- react-chartjs-2@^5.2.0
- react-copy-to-clipboard@^5.1.0
- react-dom@^18.3.1
- react-if@^4.1.5
- react-markdown@^10.1.0
- react-router-dom@^7.1.1
- redoc@^2.2.0
- remark-gfm@^4.0.1
- satellite.js@^5.0.0
- styled-components@^6.1.14
- tle.js@github:ivanstan/heavens.js
- @types/luxon@^3.4.2
- @types/node@^22.10.5
- @types/react@^18.3.17
- @types/react-copy-to-clipboard@^5.0.7
- @types/react-dom@^18.3.5
- @vitejs/plugin-react@^4.3.4
- typescript@^5.7.2
- vite@^6.0.7
- vitest@^2.1.8
- beberlei/doctrineextensions@^1.5
- doctrine/doctrine-bundle@^2.13
- doctrine/doctrine-migrations-bundle@^3.4
- doctrine/orm@^3.3
- ivanstan/symfony-support@^1.0
- ivanstan/tle-php@^2.0
21 more not shown — this panel samples each group; the count above is the real total.