github TypeScript analyzed 6d9bdc7

modelcontextprotocol/ext-apps

github

Official repo for spec & SDK of MCP Apps protocol - standard for UIs embedded AI chatbots, served by MCP servers

maintainer
modelcontextprotocol
licence
NOASSERTION
first seen
2026-06-01
last seen
2026-09-09
releases · 30d
1
short id

modelcontextprotocol/ext-apps is an MCP server distributed on github, maintained by modelcontextprotocol, tracked here since June 2026. It has shipped 36 releases and exposes 1 tool. Tools include weather. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 1 tool appear to reach filesystem and shell / exec, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 1
  • weather
release cadence · 90d 2 releases
06-19 00:00 08-02 00:00 now
recent releases last 10
version date src
v2.0.0 2026-09-08 github
v1.7.5 2026-07-23 github
v1.7.4 2026-06-05 github
v1.7.3 2026-06-01 github
v1.7.2 2026-05-15 github
v1.7.1 2026-04-27 github
v1.7.0 2026-04-21 github
v1.6.0 2026-04-14 github
v1.5.0 2026-04-02 github
v1.4.0 2026-04-02 github

view all →