MCP Observatory
1m ago Tracked 26,758 Last 1m ago 24h 1,572
github TypeScript analyzed e86860c

oomol-lab/open-connector

github

Open-source auth gateway connecting 1000+ SaaS providers to AI agents through SDK, CLI, MCP, HTTP, and OpenAPI.

maintainer
oomol-lab
license
Apache-2.0
first seen
2026-07-03
last seen
2026-08-02
releases · 30d
10
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in oomol-lab/open-connector
capabilities 0 tools
transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit e86860c · analyzer v28 · 2d ago

skills & prompt files 2

danger signals44

code evidence vv1.3.3 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 4696

filesystem 8

  • fs oomol-lab-open-connector-e86860c/src/catalog-store.ts :3 import { readdir, readFile } from "node:fs/promises";
  • fs oomol-lab-open-connector-e86860c/src/mail/imap-smtp/protocol.ts :7 import { createWriteStream } from "node:fs";
  • fs oomol-lab-open-connector-e86860c/src/mail/imap-smtp/runtime.ts :13 import { createWriteStream } from "node:fs";
  • fs oomol-lab-open-connector-e86860c/src/providers/dokploy/generate.ts :3 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
  • fs oomol-lab-open-connector-e86860c/src/server/api/static-routes.ts :4 import { readFile } from "node:fs/promises";
  • fs oomol-lab-open-connector-e86860c/src/server/files/transit-files.ts :5 import { createReadStream, createWriteStream } from "node:fs";
  • fs oomol-lab-open-connector-e86860c/src/server/index.ts :2 import { access, mkdir } from "node:fs/promises";
  • fs oomol-lab-open-connector-e86860c/src/server/storage/sqlite-runtime-store.ts :18 import { readFileSync, readdirSync } from "node:fs";

shell / exec 2

  • shell oomol-lab-open-connector-e86860c/src/providers/calendly/actions.ts :9 s.stringPattern(`^https://api\\.calendly\\.com/${resource}/[^/]+(?:/.*)?$`, {
  • shell oomol-lab-open-connector-e86860c/src/providers/dokploy/generate.ts :1 import { spawnSync } from "node:child_process";

network 20

  • net oomol-lab-open-connector-e86860c/src/core/guarded-fetch.ts :104 /** Base transport behind each guarded fetch (undefined = global fetch) so re-wrapping never stacks guards. */
  • net oomol-lab-open-connector-e86860c/src/providers/abuseipdb/executors.ts :4 import { isIP } from "node:net";
  • net oomol-lab-open-connector-e86860c/src/providers/api_void/executors.ts :5 import { isIP } from "node:net";
  • net oomol-lab-open-connector-e86860c/src/providers/aws_s3/executors.ts :10 import { isIP } from "node:net";
  • net oomol-lab-open-connector-e86860c/src/providers/baidu_maps/runtime.ts :172 // the bytes sent by the proxy's fetch(url) match the RFC-1738 bytes the SN was
  • net oomol-lab-open-connector-e86860c/src/providers/convex/executors.ts :4 import { isIP } from "node:net";
  • net oomol-lab-open-connector-e86860c/src/providers/dokploy/generate.ts :190 const response = await fetch(defaultSourceUrl);
  • net oomol-lab-open-connector-e86860c/src/providers/googlephotos/actions.ts :296 mediaItemIds: s.stringArray("The list of media item IDs to fetch (1-50).", { minItems: 1, maxItems: 50 }),
  • net oomol-lab-open-connector-e86860c/src/providers/iplocate/runtime.ts :4 import { isIP } from "node:net";
  • net oomol-lab-open-connector-e86860c/src/providers/ipqualityscore/executors.ts :5 import { isIP } from "node:net";
  • net oomol-lab-open-connector-e86860c/src/providers/n8n/runtime.ts :4 import { isIP } from "node:net";
  • net oomol-lab-open-connector-e86860c/src/providers/provider-runtime.ts :93 /** Deployment-gated private-network opt-in applied to this provider's egress fetch (currently Dokploy). */
  • net oomol-lab-open-connector-e86860c/src/providers/rocket_chat/executors.ts :11 import { isIP } from "node:net";
  • net oomol-lab-open-connector-e86860c/src/server/api/action-markdown.ts :42 `const response = await fetch("http://localhost:3000/v1/actions/${action.id}", {`,
  • net oomol-lab-open-connector-e86860c/src/server/cloudflare.ts :32 async fetch(request: Request, env: CloudflareEnv, _ctx: CloudflareExecutionContext): Promise<Response> {
  • net oomol-lab-open-connector-e86860c/src/server/cloudflare/catalog-assets.ts :18 const response = await assets.fetch(new Request(new URL(path, "https://assets.local")));
  • net oomol-lab-open-connector-e86860c/src/server/cloudflare/cloudflare-bindings.ts :30 fetch(request: Request): Promise<Response>;
  • net oomol-lab-open-connector-e86860c/web/src/actions-page.tsx :439 const response = await fetch(`/v1/actions/${props.action.id}`, {
  • net oomol-lab-open-connector-e86860c/web/src/api.ts :16 await fetch(path, {
  • net oomol-lab-open-connector-e86860c/web/src/model.ts :461 `const response = await fetch("http://localhost:3000/v1/actions/${action.id}", {`,

secrets 1

  • secrets oomol-lab-open-connector-e86860c/src/server/index.ts :25 const secretCodec = createSecretCodec(process.env.OOMOL_CONNECT_ENCRYPTION_KEY);

install hooks 1

  • postinstall oomol-lab-open-connector-e86860c/package.json :10 node scripts/ensure-generated.ts

declared dependencies 31

  • @modelcontextprotocol/sdk@^1.30.0
  • @cfworker/json-schema@^4.1.1
  • @hono/node-server@^2.0.10
  • @scalar/hono-api-reference@^0.11.7
  • ali-oss@^6.23.0
  • fast-xml-parser@^5.10.1
  • hono@^4.12.27
  • imapflow@^1.4.6
  • jose@^6.2.3
  • mailparser@^3.9.14
  • mdast-util-from-markdown@^2.0.3
  • mdast-util-gfm@^3.1.0
  • mdast-util-to-markdown@^2.1.2
  • micromark-extension-gfm@^3.0.0
  • minisearch@^7.2.0
  • nodemailer@^9.0.3
  • pino@^10.3.1
  • rss-parser@^3.13.0
  • zod@^4.4.3
  • @hyrious/configs@^0.1.6
  • @types/ali-oss@^6.23.3
  • @types/mailparser@^3.4.6
  • @types/mdast@^4.0.4
  • @types/node@^26.0.1
  • @types/nodemailer@^8.0.1
  • oxfmt@^0.56.0
  • oxlint@^1.71.0
  • pino-pretty@^13.1.3
  • typescript@^7.0.2
  • vitest@^4.1.9
  • wrangler@^4.114.0

obfuscation 1

  • dynamic require()/import() oomol-lab-open-connector-e86860c/scripts/provider-source.ts :23 const module = (await import(`../src/providers/${service}/definition.ts`)) as ProviderDefinitionModule;