TestingBot's official MCP server
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 27 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
createCdpSession
-
deleteBuild
-
deleteStorageFile
-
deleteTunnel
-
getBrowsers
-
getBuilds
-
getDevices
-
getFailureLogs
-
getScreenshotList
-
getStorageFiles
-
getTeam
-
getTestsForBuild
-
getTunnelList
-
getUserFromTeam
-
getUserInfo
-
getUsersInTeam
-
listTestFiles
-
retrieveScreenshots
-
setupTestingBot
-
startDesktopLiveSession
-
startLiveSession
-
startMobileLiveSession
-
takeScreenshot
-
tb_login
-
updateUserInfo
-
uploadFile
-
uploadRemoteFile
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit edb242e · analyzer v33 · 1w ago
danger signals1
- suspicious endpoint 169.254.169.254 (cloud metadata) testingbot-mcp-server-edb242e/tests/tools/storage.test.ts :137
["AWS metadata IP", "http://169.254.169.254/latest/meta-data/"],
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 46
filesystem 10
- fs (weak) testingbot-mcp-server-edb242e/scripts/sync-version.mjs :8
import { readFileSync, writeFileSync } from "node:fs"; - fs testingbot-mcp-server-edb242e/src/lib/credentials.ts :11
} from "fs"; - fs testingbot-mcp-server-edb242e/src/lib/logger.ts :4
import fs from "fs"; - fs testingbot-mcp-server-edb242e/src/tools/project.ts :3
import fs from "fs"; - fs testingbot-mcp-server-edb242e/src/tools/storage.ts :3
import fs from "fs"; - fs (weak) testingbot-mcp-server-edb242e/tests/config.test.ts :2
import fs from "fs"; - fs (weak) testingbot-mcp-server-edb242e/tests/lib/credentials.test.ts :2
import fs from "fs"; - fs (weak) testingbot-mcp-server-edb242e/tests/tools/auth.test.ts :2
import fs from "fs"; - fs (weak) testingbot-mcp-server-edb242e/tests/tools/project.test.ts :2
import fs from "fs"; - fs (weak) testingbot-mcp-server-edb242e/tests/tools/storage.test.ts :2
import fs from "fs";
shell / exec 1
- shell testingbot-mcp-server-edb242e/src/tools/auth.ts :3
import { spawn } from "node:child_process";
network 3
- net testingbot-mcp-server-edb242e/src/tools/auth.ts :2
import { createServer, type IncomingMessage, type ServerResponse } from "node:http"; - net testingbot-mcp-server-edb242e/src/tools/logs.ts :20
const response = await fetch(url, { signal }); - net (weak) testingbot-mcp-server-edb242e/tests/tools/auth.test.ts :437
void fetch(callbackUrlFrom(url, "key=lk&secret=ls")).catch(() => {});
secrets 3
- secrets testingbot-mcp-server-edb242e/src/config.ts :9
process.env.TESTINGBOT_KEY || process.env.TB_KEY || process.env.TESTINGBOT_USERNAME || ""; - secrets testingbot-mcp-server-edb242e/src/tools/project.ts :289
" key: process.env.TESTINGBOT_KEY!,", - secrets (weak) testingbot-mcp-server-edb242e/tests/config.test.ts :48
process.env.TESTINGBOT_KEY = "env-key";
tool registrations 27
- tb_login testingbot-mcp-server-edb242e/src/tools/auth.ts :668
- getBrowsers testingbot-mcp-server-edb242e/src/tools/browsers.ts :13
- getDevices testingbot-mcp-server-edb242e/src/tools/browsers.ts :55
- getBuilds testingbot-mcp-server-edb242e/src/tools/builds.ts :9
- getTestsForBuild testingbot-mcp-server-edb242e/src/tools/builds.ts :64
- deleteBuild testingbot-mcp-server-edb242e/src/tools/builds.ts :111
- createCdpSession testingbot-mcp-server-edb242e/src/tools/cdp.ts :9
- startLiveSession testingbot-mcp-server-edb242e/src/tools/live.ts :89
- startDesktopLiveSession testingbot-mcp-server-edb242e/src/tools/live.ts :175
- startMobileLiveSession testingbot-mcp-server-edb242e/src/tools/live.ts :224
- getFailureLogs testingbot-mcp-server-edb242e/src/tools/logs.ts :50
- listTestFiles testingbot-mcp-server-edb242e/src/tools/project.ts :408
- setupTestingBot testingbot-mcp-server-edb242e/src/tools/project.ts :477
- takeScreenshot testingbot-mcp-server-edb242e/src/tools/screenshots.ts :13
- retrieveScreenshots testingbot-mcp-server-edb242e/src/tools/screenshots.ts :81
- getScreenshotList testingbot-mcp-server-edb242e/src/tools/screenshots.ts :121
- uploadFile testingbot-mcp-server-edb242e/src/tools/storage.ts :104
- uploadRemoteFile testingbot-mcp-server-edb242e/src/tools/storage.ts :131
- getStorageFiles testingbot-mcp-server-edb242e/src/tools/storage.ts :159
- deleteStorageFile testingbot-mcp-server-edb242e/src/tools/storage.ts :214
- getTeam testingbot-mcp-server-edb242e/src/tools/team.ts :9
- getUsersInTeam testingbot-mcp-server-edb242e/src/tools/team.ts :80
- getUserFromTeam testingbot-mcp-server-edb242e/src/tools/team.ts :150
- getTunnelList testingbot-mcp-server-edb242e/src/tools/tunnels.ts :9
- deleteTunnel testingbot-mcp-server-edb242e/src/tools/tunnels.ts :66
- getUserInfo testingbot-mcp-server-edb242e/src/tools/user.ts :9
- updateUserInfo testingbot-mcp-server-edb242e/src/tools/user.ts :65
declared dependencies 19
- @modelcontextprotocol/sdk@^1.0.4
- @testingbot/automation-mcp@^0.1.5
- dotenv@^16.4.5
- pino@^9.6.0
- pino-pretty@^13.0.0
- testingbot-api@^1.1.0
- zod@^3.24.1
- @eslint/js@^9.25.0
- @types/node@^22.14.1
- @typescript-eslint/eslint-plugin@^8.30.1
- @typescript-eslint/parser@^8.30.1
- @vitest/coverage-v8@^3.1.3
- eslint@^9.25.0
- prettier@^3.5.3
- tsx@^4.19.3
- typescript@^5.8.3
- typescript-eslint@^8.30.1
- vite@^6.3.5
- vitest@^3.1.3