github JavaScript analyzed 2bf6d23 deep scan · partial (324/4,223 files)

ooples/token-optimizer-mcp

v6.0.2

Measure token savings per AI coding agent, optimize context, and share a live local knowledge graph across 16 CLI clients.

maintainer: ooples
licence: MIT
first seen: 2026-06-01
last seen: 2026-09-17
releases · 30d: 9
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 2bf6d23 · analyzer v33 · 41m ago

skills & prompt files 11

danger signals1

committed secret Anthropic key ooples-token-optimizer-mcp-2bf6d23/tests/unit/compress/structural.test.ts :27 sk-ant…(51 chars, redacted)

code evidence vv7.0.1 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1623

filesystem 400

fs ooples-token-optimizer-mcp-2bf6d23/bench/compression/evidence-survival.mjs :43 import { readFileSync } from 'node:fs';
fs (weak) ooples-token-optimizer-mcp-2bf6d23/bench/compression/fixtures.mjs :30 import { readFileSync, readdirSync, statSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/compression/head-to-head.mjs :38 import { readFileSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/compression/next-action-probe.mjs :46 import { readFileSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/compression/probes/thinking-removal.mjs :20 import { readFileSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/compression/session-replay.mjs :80 import { readFileSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/compression/wire-shape.mjs :33 import { readFileSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/debug-loop/run.mjs :53 } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/field/rivals.mjs :27 import { writeSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/field/schema-tax.mjs :18 import { existsSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/ledger/arms.mjs :12 import { readFileSync, existsSync, statSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/ledger/campaign.mjs :18 import { mkdtempSync } from 'node:fs';

show 28 more

fs ooples-token-optimizer-mcp-2bf6d23/bench/ledger/cli.mjs :25 import { existsSync, readFileSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/ledger/executor.mjs :36 } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/ledger/store.mjs :18 import { appendFileSync, readFileSync, existsSync, mkdirSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/ledger/tasks/index.mjs :22 import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/adversarial-local-report.mjs :2 import { readFile, mkdir, writeFile, copyFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/adversarial-local.mjs :5 import { openSync, closeSync } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/capture-audit-check.mjs :5 import { appendFile, cp, mkdtemp, readFile, writeFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/capture-pressure.mjs :4 import { mkdtemp, writeFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/chat-route-audit.mjs :1 import { readFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/chat-route-probe.mjs :6 import { createWriteStream } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/client-failure-check.mjs :2 import { readFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/codex-cost.mjs :2 import { readFile, writeFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/codex-provenance.mjs :2 import { readFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/codex-workflows.mjs :2 import { readFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/codex.mjs :10 import { createWriteStream } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-continuation-check.mjs :2 import { mkdtemp, mkdir, writeFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-continuation.mjs :2 import { readFile, readdir } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-describe.mjs :3 import { readFile, writeFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-freeze.mjs :1 import { readFile, readdir, writeFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-plan.mjs :2 import { readFile, readdir, writeFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-prepare-continuation.mjs :1 import { mkdir, readFile, writeFile, copyFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-run.mjs :3 import { createWriteStream } from 'node:fs';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-selfcheck.mjs :3 import { mkdtemp, mkdir, writeFile, readFile, rm } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/cost-gap-audit.mjs :4 import { readFile, writeFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/evidence/confirmation-2026-09-15-v2/descriptive-report.mjs :3 import { readFile, writeFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/evidence/confirmation-2026-09-16-v3-continuation/hash-memory-check-source.mjs :4 import { readFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/evidence/json-categories-2026-09-16/describe.mjs :1 import { readFile, writeFile } from 'node:fs/promises';
fs ooples-token-optimizer-mcp-2bf6d23/bench/live/fragment-envelope-replay.mjs :3 import { readFile, writeFile, mkdir } from 'node:fs/promises';

360 more not shown — this panel samples each group; the count above is the real total.

shell / exec 175

shell ooples-token-optimizer-mcp-2bf6d23/bench/debug-loop/run.mjs :45 import { spawnSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/ledger/cli.mjs :22 import { execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/ledger/executor.mjs :26 import { spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/adversarial-local.mjs :4 import { spawn, execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/capture-audit-check.mjs :3 import { spawnSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/chat-route-probe.mjs :5 import { spawn, execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/codex-provenance.mjs :3 import { execFile } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/codex-workflows.mjs :3 import { execFile } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/codex.mjs :8 import { spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-freeze.mjs :4 import { execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-plan.mjs :5 import { execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-run.mjs :2 import { spawn } from 'node:child_process';

show 28 more

shell ooples-token-optimizer-mcp-2bf6d23/bench/live/confirmation-selfcheck.mjs :6 import { execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/cost-gap-audit.mjs :3 import { spawnSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/fragment-fastpath-check.mjs :3 import { execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/headroom-gap-probe.mjs :2 import { spawn, execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/host-memory.mjs :4 import { spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/joint-plan.mjs :5 import { execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/local-proxy-performance.mjs :3 import { spawn, execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/loss-followup.mjs :2 import { spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/memory-replay.mjs :3 import { fork } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/search-columns-local.mjs :3 import { spawn, execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/bench/live/startup-probe.mjs :3 import { execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/cli-wrapper.mjs :17 import { spawn } from 'child_process';
shell ooples-token-optimizer-mcp-2bf6d23/hooks-core/doctor.mjs :21 import { execFile, spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/hooks-core/harvest.mjs :25 import { spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/hooks-core/skeleton.mjs :30 import { execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/hooks-core/stop-harvest.mjs :25 import { spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/cline/hooks/token-optimizer/lib/doctor.mjs :23 import { execFile, spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/cline/hooks/token-optimizer/lib/harvest.mjs :27 import { spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/cline/hooks/token-optimizer/lib/skeleton.mjs :32 import { execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/cline/hooks/token-optimizer/lib/stop-harvest.mjs :27 import { spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/codex/hooks/lib/doctor.mjs :23 import { execFile, spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/codex/hooks/lib/harvest.mjs :27 import { spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/codex/hooks/lib/skeleton.mjs :32 import { execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/codex/hooks/lib/stop-harvest.mjs :27 import { spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/codex/plugin/hooks/lib/doctor.mjs :23 import { execFile, spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/codex/plugin/hooks/lib/harvest.mjs :27 import { spawn } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/codex/plugin/hooks/lib/skeleton.mjs :32 import { execFileSync } from 'node:child_process';
shell ooples-token-optimizer-mcp-2bf6d23/integrations/codex/plugin/hooks/lib/stop-harvest.mjs :27 import { spawn } from 'node:child_process';

135 more not shown — this panel samples each group; the count above is the real total.

network 52

net ooples-token-optimizer-mcp-2bf6d23/bench/compression/next-action-probe.mjs :348 res = await fetch('https://api.anthropic.com/v1/messages', {
net ooples-token-optimizer-mcp-2bf6d23/bench/compression/probes/thinking-removal.mjs :132 const res = await fetch('https://api.anthropic.com/v1/messages', {
net ooples-token-optimizer-mcp-2bf6d23/bench/live/adversarial-local.mjs :3 import { createServer } from 'node:http';
net ooples-token-optimizer-mcp-2bf6d23/bench/live/chat-route-probe.mjs :4 import { createServer } from 'node:http';
net ooples-token-optimizer-mcp-2bf6d23/bench/live/codex.mjs :9 import { createServer } from 'node:net';
net ooples-token-optimizer-mcp-2bf6d23/bench/live/headroom-gap-probe.mjs :1 import { createServer } from 'node:http';
net ooples-token-optimizer-mcp-2bf6d23/bench/live/local-proxy-performance.mjs :2 import { createServer } from 'node:http';
net ooples-token-optimizer-mcp-2bf6d23/bench/live/memory-replay.mjs :7 import { createServer } from 'node:http';
net ooples-token-optimizer-mcp-2bf6d23/bench/live/search-columns-local.mjs :2 import { createServer } from 'node:http';
net ooples-token-optimizer-mcp-2bf6d23/hooks-core/harvest.mjs :946 fetch(endpoint, {
net ooples-token-optimizer-mcp-2bf6d23/integrations/cline/hooks/token-optimizer/lib/harvest.mjs :948 fetch(endpoint, {
net ooples-token-optimizer-mcp-2bf6d23/integrations/codex/hooks/lib/harvest.mjs :948 fetch(endpoint, {

show 28 more

net ooples-token-optimizer-mcp-2bf6d23/integrations/codex/plugin/hooks/lib/harvest.mjs :948 fetch(endpoint, {
net ooples-token-optimizer-mcp-2bf6d23/integrations/copilot/.github/hooks/lib/harvest.mjs :948 fetch(endpoint, {
net ooples-token-optimizer-mcp-2bf6d23/integrations/cursor/hooks/lib/harvest.mjs :948 fetch(endpoint, {
net ooples-token-optimizer-mcp-2bf6d23/integrations/gemini/hooks/lib/harvest.mjs :948 fetch(endpoint, {
net ooples-token-optimizer-mcp-2bf6d23/integrations/kilo/hooks/lib/harvest.mjs :948 fetch(endpoint, {
net ooples-token-optimizer-mcp-2bf6d23/integrations/opencode/hooks/lib/harvest.mjs :948 fetch(endpoint, {
net ooples-token-optimizer-mcp-2bf6d23/integrations/qwen/hooks/lib/harvest.mjs :948 fetch(endpoint, {
net ooples-token-optimizer-mcp-2bf6d23/integrations/windsurf/hooks/lib/harvest.mjs :948 fetch(endpoint, {
net ooples-token-optimizer-mcp-2bf6d23/plugin/hooks/lib/harvest.mjs :948 fetch(endpoint, {
net (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/capture-screenshots.mjs :76 if ((await fetch(`${BASE}/api/wiki/status`)).ok) return true;
net (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/explore-wiki.mjs :340 const s = await (await fetch('/api/wiki/search?limit=5')).json();
net (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/verify-harvest-api.mjs :21 import { createServer } from 'node:http';
net (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/verify-live-dashboard.mjs :316 fetch('/api/wiki/status?scope=all').then((response) => response.json()),
net (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/verify-live-graph-flow.mjs :14 import { createServer } from 'node:net';
net (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/verify-wiki-interactions.mjs :44 if ((await fetch(`${BASE}/api/wiki/status`)).ok) return true;
net (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/verify-wiki-ui.mjs :296 const response = await fetch(`${BASE}/api/wiki/status`);
net ooples-token-optimizer-mcp-2bf6d23/src/core/summarization.ts :125 const response = await fetch(this.endpoint, {
net ooples-token-optimizer-mcp-2bf6d23/src/core/tokenizers/google-ai-tokenizer.ts :69 const response = await fetch(url, {
net ooples-token-optimizer-mcp-2bf6d23/src/dashboard/public/js/dashboard.js :60 const res = await fetch(`${API}${path}`, { signal: controller.signal });
net ooples-token-optimizer-mcp-2bf6d23/src/dashboard/public/js/wiki.js :65 const response = await fetch(path, options);
net ooples-token-optimizer-mcp-2bf6d23/src/proxy/server.ts :34 } from 'node:http';
net ooples-token-optimizer-mcp-2bf6d23/src/server/daemon.ts :21 import net from 'net';
net ooples-token-optimizer-mcp-2bf6d23/src/tools/api-database/smart-api-fetch.ts :323 const response = await fetch(options.url, {
net ooples-token-optimizer-mcp-2bf6d23/src/tools/api-database/smart-rest.ts :254 const response = await fetch(options.specUrl, {
net ooples-token-optimizer-mcp-2bf6d23/src/tools/build-systems/smart-network.ts :19 import * as net from 'net';
net ooples-token-optimizer-mcp-2bf6d23/src/tools/dashboard-monitoring/health-monitor.ts :366 const response = await fetch(config.url, {
net ooples-token-optimizer-mcp-2bf6d23/src/tools/dashboard-monitoring/smart-dashboard.ts :366 const response = await fetch(config.url, {
net (weak) ooples-token-optimizer-mcp-2bf6d23/tests/hooks/enforcement.test.mjs :405 remember(fetch('what version does it pin?'), state);

12 more not shown — this panel samples each group; the count above is the real total.

secrets 27

secrets ooples-token-optimizer-mcp-2bf6d23/bench/compression/next-action-probe.mjs :235 const key = (process.env.ANTHROPIC_API_KEY || '').trim();
secrets ooples-token-optimizer-mcp-2bf6d23/hooks-core/harvest.mjs :111 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;
secrets ooples-token-optimizer-mcp-2bf6d23/integrations/cline/hooks/token-optimizer/lib/harvest.mjs :113 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;
secrets ooples-token-optimizer-mcp-2bf6d23/integrations/codex/hooks/lib/harvest.mjs :113 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;
secrets ooples-token-optimizer-mcp-2bf6d23/integrations/codex/plugin/hooks/lib/harvest.mjs :113 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;
secrets ooples-token-optimizer-mcp-2bf6d23/integrations/copilot/.github/hooks/lib/harvest.mjs :113 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;
secrets ooples-token-optimizer-mcp-2bf6d23/integrations/cursor/hooks/lib/harvest.mjs :113 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;
secrets ooples-token-optimizer-mcp-2bf6d23/integrations/gemini/hooks/lib/harvest.mjs :113 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;
secrets ooples-token-optimizer-mcp-2bf6d23/integrations/kilo/hooks/lib/harvest.mjs :113 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;
secrets ooples-token-optimizer-mcp-2bf6d23/integrations/opencode/hooks/lib/harvest.mjs :113 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;
secrets ooples-token-optimizer-mcp-2bf6d23/integrations/qwen/hooks/lib/harvest.mjs :113 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;
secrets ooples-token-optimizer-mcp-2bf6d23/integrations/windsurf/hooks/lib/harvest.mjs :113 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;

show 15 more

secrets ooples-token-optimizer-mcp-2bf6d23/plugin/hooks/lib/harvest.mjs :113 return process.env.TOKEN_OPTIMIZER_API_KEY || process.env.ANTHROPIC_API_KEY || null;
secrets (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/assemble-ucr-production-traffic.mjs :116 const pseudonymSecret = process.env.UCR_TRAFFIC_PSEUDONYM_SECRET;
secrets (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/run-ucr-competitive-study.mjs :133 if (!process.env.UCR_STUDY_SECRET)
secrets (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/run-ucr-full-study.mjs :141 process.env.UCR_STUDY_SECRET ||
secrets (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/verify-harvest-api.mjs :52 process.env.TOKEN_OPTIMIZER_API_KEY = 'sk-ant-test-not-a-real-key';
secrets ooples-token-optimizer-mcp-2bf6d23/src/core/summarization.ts :101 const apiKey = options.apiKey ?? process.env.ANTHROPIC_API_KEY;
secrets ooples-token-optimizer-mcp-2bf6d23/src/core/tokenizers/tokenizer-factory.ts :64 const apiKey = process.env.GOOGLE_AI_API_KEY;
secrets ooples-token-optimizer-mcp-2bf6d23/src/server/ucr-tools.ts :326 const graderSecret = process.env.TOKEN_OPTIMIZER_GRADER_SECRET;
secrets (weak) ooples-token-optimizer-mcp-2bf6d23/tests/hooks/harvest-endpoint-dialect.test.mjs :108 key: process.env.TOKEN_OPTIMIZER_API_KEY,
secrets (weak) ooples-token-optimizer-mcp-2bf6d23/tests/hooks/injection.test.mjs :43 delete process.env.TOKEN_OPTIMIZER_API_KEY;
secrets (weak) ooples-token-optimizer-mcp-2bf6d23/tests/hooks/policy-asks-for-findings.test.mjs :119 process.env.TOKEN_OPTIMIZER_API_KEY = 'sk-test';
secrets (weak) ooples-token-optimizer-mcp-2bf6d23/tests/integration/ucr-tools.test.ts :15 previousSecret = process.env.TOKEN_OPTIMIZER_GRADER_SECRET;
secrets (weak) ooples-token-optimizer-mcp-2bf6d23/tests/unit/code-analysis/security-finds-real-secrets.test.ts :65 ['env lookup', 'const apiKey = process.env.API_KEY;'],
secrets (weak) ooples-token-optimizer-mcp-2bf6d23/tests/unit/harvest-gating.test.ts :67 process.env.ANTHROPIC_API_KEY = 'sk-ant-present';
secrets (weak) ooples-token-optimizer-mcp-2bf6d23/tests/unit/summarization.test.ts :41 const savedAnthropic = process.env.ANTHROPIC_API_KEY;

database 9

db ooples-token-optimizer-mcp-2bf6d23/bench/field/rivals.mjs :26 import Database from 'better-sqlite3';
db ooples-token-optimizer-mcp-2bf6d23/bench/field/schema-tax.mjs :17 import Database from 'better-sqlite3';
db (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/audit-token-savings.mjs :10 import Database from 'better-sqlite3';
db ooples-token-optimizer-mcp-2bf6d23/src/analytics/analytics-storage.ts :5 import Database from 'better-sqlite3';
db ooples-token-optimizer-mcp-2bf6d23/src/analytics/optimization-storage.ts :1 import Database from 'better-sqlite3';
db ooples-token-optimizer-mcp-2bf6d23/src/core/cache-engine.ts :1 import Database from 'better-sqlite3';
db (weak) ooples-token-optimizer-mcp-2bf6d23/tests/integration/cache-worker.js :7 import Database from 'better-sqlite3';
db (weak) ooples-token-optimizer-mcp-2bf6d23/tests/unit/analytics/analytics-storage-migration.test.ts :2 import Database from 'better-sqlite3';
db ooples-token-optimizer-mcp-2bf6d23/ucr/coordination-sqlite.mjs :1 import Database from 'better-sqlite3';

install hooks 2

postinstall ooples-token-optimizer-mcp-2bf6d23/package.json :53 node scripts/postinstall.cjs
prepublishOnly ooples-token-optimizer-mcp-2bf6d23/package.json :65 npm run clean && npm run build

declared dependencies 61

@modelcontextprotocol/sdk@^1.26.0
@babel/parser@^7.29.8
@iarna/toml@^2.2.5
@typescript-eslint/typescript-estree@^8.65.0
async-mutex@^0.5.0
better-sqlite3@^13.0.3
chalk@^4.1.2
chart.js@4.4.0
cors@^2.8.5
d3-force@^3.0.0
diff@^8.0.2
express@^5.1.0

show 28 more

express-rate-limit@^8.5.2
glob@^11.1.0
graphlib@^2.1.8
lru-cache@^11.2.2
tiktoken@^1.0.22
typescript@^5.9.3
yaml@^2.9.0
zod@^3.25.0
@ast-grep/cli@0.45.0
@commitlint/cli@^19.6.0
@commitlint/config-conventional@^19.6.0
@semantic-release/changelog@^6.0.3
@semantic-release/commit-analyzer@^13.0.0
@semantic-release/git@^10.0.1
@semantic-release/github@^11.0.0
@semantic-release/npm@^13.1.3
@semantic-release/release-notes-generator@^14.0.1
@stryker-mutator/core@^10.0.0
@stryker-mutator/jest-runner@^10.0.0
@types/better-sqlite3@^7.6.13
@types/body-parser@^1.19.6
@types/conventional-commits-parser@^5.0.1
@types/cors@^2.8.19
@types/express@^5.0.3
@types/express-serve-static-core@^5.1.0
@types/http-errors@^2.0.5
@types/jest@^30.0.0
@types/json-schema@^7.0.15

21 more not shown — this panel samples each group; the count above is the real total.

obfuscation 3

dynamic require()/import() ooples-token-optimizer-mcp-2bf6d23/bench/live/codex-workflows.mjs :145 const {next}=await import(${JSON.stringify(moduleUrl)});
dynamic require()/import() ooples-token-optimizer-mcp-2bf6d23/tests/hooks/read-state-is-per-agent.test.mjs :42 policy = await import(`${CORE}?t=${dir}`);
dynamic require()/import() ooples-token-optimizer-mcp-2bf6d23/tests/hooks/runtime-prune-keeps-running-versions.test.mjs :75 const { pruneOldVersions } = await import(${JSON.stringify(LAUNCHER)});

perm:untrusted 2

untrusted (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/verify-wiki-interactions.mjs :91 const status = await (await fetch(`${BASE}/api/wiki/status`)).json();
untrusted (weak) ooples-token-optimizer-mcp-2bf6d23/scripts/verify-wiki-ui.mjs :347 const status = await (await fetch(`${BASE}/api/wiki/status`)).json();

transport_posture 1

network-listening, binds all interfaces, no auth detected ooples-token-optimizer-mcp-2bf6d23/bench/ledger/tasks/index.mjs :161 'host = "0.0.0.0"',

ooples/token-optimizer-mcp

Drift inferred · capture-to-capture

skills & prompt files 11

danger signals1

filesystem 400

shell / exec 175

network 52

secrets 27

database 9

install hooks 2

declared dependencies 61

obfuscation 3

perm:untrusted 2

transport_posture 1

Navigate

Stream

Features

Display