One MCP server routes LLM calls across 20+ providers, using round-robin dispatch and fallback to reduce rate-limit interruptions and cut costs up to 100x.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 8 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
dispatch
-
get_state
-
get_stats
-
list_agents
-
pick_agents
-
ping
-
probe_agent
-
set_credential
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit ac71534 · analyzer v33 · 1d ago
danger signals1
- committed secret GitHub fine-grained PAT mrrlin-dev-external-agents-ac71534/lib/failure-log.test.js :178
github…(59 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 59
filesystem 34
- fs mrrlin-dev-external-agents-ac71534/cli.js :41
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/cli.audit-disabled.test.js :2
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/cli.edit-smoke.test.js :3
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/cli.require-base.test.js :2
import fs from "node:fs"; - fs mrrlin-dev-external-agents-ac71534/lib/credentials.js :18
import fs from "node:fs"; - fs mrrlin-dev-external-agents-ac71534/lib/dispatch-log.js :2
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch-log.test.js :3
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.cwd.test.js :4
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.disabled-guard.test.js :3
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.failure-log.test.js :3
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.files.test.js :3
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.harness-failure.test.js :4
import fs from "node:fs";
show 22 more
- fs mrrlin-dev-external-agents-ac71534/lib/dispatch.js :3
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.probe-orphan.test.js :2
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.progress.test.js :5
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.provenance.test.js :3
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.tempdir.test.js :2
import fs from "node:fs"; - fs mrrlin-dev-external-agents-ac71534/lib/failure-log.js :1
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/failure-log.test.js :3
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/false-success.test.js :2
import fs from "node:fs"; - fs mrrlin-dev-external-agents-ac71534/lib/metrics.js :1
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/metrics.test.js :3
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/pool-log-findings.test.js :2
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/probe.disabled-guard.test.js :3
import fs from "node:fs"; - fs mrrlin-dev-external-agents-ac71534/lib/registry.js :1
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/registry.sync-clone.test.js :2
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/registry.transports.test.js :2
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/server.dispatch-disabled.test.js :2
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/server.list-agents-enabled.test.js :2
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/server.pick-default-tier.test.js :2
import fs from "node:fs"; - fs mrrlin-dev-external-agents-ac71534/lib/state.js :1
import fs from "node:fs"; - fs (weak) mrrlin-dev-external-agents-ac71534/lib/state.test.js :4
import fs from "node:fs"; - fs mrrlin-dev-external-agents-ac71534/server.js :9
import fs from "node:fs"; - fs mrrlin-dev-external-agents-ac71534/ui.js :4
import fs from "node:fs";
shell / exec 15
- shell mrrlin-dev-external-agents-ac71534/cli.js :44
import { spawn, spawnSync } from "node:child_process"; - shell (weak) mrrlin-dev-external-agents-ac71534/lib/cli.audit-disabled.test.js :7
import { spawnSync } from "node:child_process"; - shell (weak) mrrlin-dev-external-agents-ac71534/lib/cli.edit-smoke.test.js :2
import { spawn } from "node:child_process"; - shell (weak) mrrlin-dev-external-agents-ac71534/lib/cli.require-base.test.js :7
import { spawnSync } from "node:child_process"; - shell (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.cwd.test.js :3
import { spawnSync } from "node:child_process"; - shell (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.disabled-guard.test.js :2
import { spawnSync } from "node:child_process"; - shell mrrlin-dev-external-agents-ac71534/lib/dispatch.js :1
import { spawn, spawnSync } from "node:child_process"; - shell (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.probe-orphan.test.js :7
import { spawn, spawnSync } from "node:child_process"; - shell (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.progress.test.js :3
import { spawn, spawnSync } from "node:child_process"; - shell (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.provenance.test.js :6
import { spawnSync } from "node:child_process"; - shell (weak) mrrlin-dev-external-agents-ac71534/lib/pool-log-findings.test.js :7
import { spawnSync } from "node:child_process"; - shell (weak) mrrlin-dev-external-agents-ac71534/lib/probe.disabled-guard.test.js :2
import { spawnSync } from "node:child_process";
show 3 more
- shell (weak) mrrlin-dev-external-agents-ac71534/lib/registry.sync-clone.test.js :5
import { spawnSync } from "node:child_process"; - shell mrrlin-dev-external-agents-ac71534/lib/state.js :4
import { spawnSync } from "node:child_process"; - shell (weak) mrrlin-dev-external-agents-ac71534/lib/state.test.js :7
import { spawnSync } from "node:child_process";
network 5
- net (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.generate.test.js :2
import http from "node:http"; - net mrrlin-dev-external-agents-ac71534/lib/dispatch.js :1616
const resp = await fetch(g.url, { - net (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.tempdir.test.js :3
import http from "node:http"; - net (weak) mrrlin-dev-external-agents-ac71534/lib/false-success.test.js :347
import http from "node:http"; - net mrrlin-dev-external-agents-ac71534/ui.js :2
import http from "node:http";
secrets 1
- secrets (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.failure-log.test.js :182
assert.ok(!process.env.MY_ENTRY_API_KEY, "the parent must not hold it — that is the whole point");
tool registrations 8
- ping mrrlin-dev-external-agents-ac71534/server.js :55
- list_agents mrrlin-dev-external-agents-ac71534/server.js :63
- get_state mrrlin-dev-external-agents-ac71534/server.js :71
- probe_agent mrrlin-dev-external-agents-ac71534/server.js :79
- set_credential mrrlin-dev-external-agents-ac71534/server.js :88
- pick_agents mrrlin-dev-external-agents-ac71534/server.js :100
- dispatch mrrlin-dev-external-agents-ac71534/server.js :137
- get_stats mrrlin-dev-external-agents-ac71534/server.js :202
install hooks 1
- postinstall mrrlin-dev-external-agents-ac71534/package.json :17
node scripts/postinstall-banner.mjs || true
declared dependencies 2
- @modelcontextprotocol/sdk@latest
- js-yaml@^4