github JavaScript re-analysis due

letian940-prog/ns-mcp-china

NetSuite MCP for WorkBuddy — Connect any MCP-compatible AI assistant to NetSuite ERP with OAuth 2.0, auto token refresh, and web setup wizard

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence vv2.0.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 10

fs letian940-prog-ns-mcp-china-8b1ba16/bin/ns-mcp-connector.js :22 import fs from 'fs';
fs letian940-prog-ns-mcp-china-8b1ba16/bin/ns-mcp-setup.js :19 import fs from 'fs';

shell letian940-prog-ns-mcp-china-8b1ba16/bin/ns-mcp-connector.js :25 import { exec } from 'child_process';
shell letian940-prog-ns-mcp-china-8b1ba16/bin/ns-mcp-setup.js :18 import { exec } from 'child_process';

net letian940-prog-ns-mcp-china-8b1ba16/bin/ns-mcp-connector.js :20 import http from 'http';
net letian940-prog-ns-mcp-china-8b1ba16/bin/ns-mcp-setup.js :16 import http from 'http';
net letian940-prog-ns-mcp-china-8b1ba16/src/netsuite-client.ts :84 const response = await fetch(tokenUrl, {

secrets letian940-prog-ns-mcp-china-8b1ba16/bin/ns-mcp-connector.js :361 const envClientSecret = process.env.NETSUITE_CLIENT_SECRET || process.env.NS_CLIENT_SECRET;
secrets letian940-prog-ns-mcp-china-8b1ba16/src/netsuite-client.ts :28 clientSecret: config?.clientSecret || process.env.NS_CLIENT_SECRET || '',