github analyzed a821f9a

aiven-open/mcp-aiven

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · streamable-http · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit a821f9a · analyzer v33 · 4d ago

over-broad OAuth scope https://www.googleapis.com/auth/cloud-platform expected for this server's purpose Aiven-Open-mcp-aiven-a821f9a/src/security/model-armor.ts :41 auth = new GoogleAuth({ credentials, scopes: ['https://www.googleapis.com/auth/cloud-platform'] });

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 75

fs Aiven-Open-mcp-aiven-a821f9a/generator/src/cli.ts :9 import * as fs from 'node:fs/promises';
fs Aiven-Open-mcp-aiven-a821f9a/src/tools/registry.ts :1 import * as fs from 'node:fs';

net Aiven-Open-mcp-aiven-a821f9a/generator/src/fetch.ts :93 const response = await fetch(OPENAPI_URL);
net (weak) Aiven-Open-mcp-aiven-a821f9a/src/tools/docs/handlers.ts :38 const res = await fetch(url, {
net Aiven-Open-mcp-aiven-a821f9a/src/transport.ts :2 import { isIP } from 'node:net';

secrets Aiven-Open-mcp-aiven-a821f9a/src/config.ts :103 const raw = process.env['MCP_EDGE_AUTH_SECRET'];
secrets (weak) Aiven-Open-mcp-aiven-a821f9a/src/tools/docs/handlers.ts :57 const apiKey = process.env['AIVEN_DOCS_API_KEY'];
secrets Aiven-Open-mcp-aiven-a821f9a/src/transport.ts :235 const openAiAppsChallengeToken = process.env['OPENAI_APPS_CHALLENGE_TOKEN'];
secrets (weak) Aiven-Open-mcp-aiven-a821f9a/tests/runtime/config.test.ts :25 delete process.env['AIVEN_TOKEN'];

prepublishOnly Aiven-Open-mcp-aiven-a821f9a/package.json :60 pnpm generate:api-types && pnpm generate && pnpm build && pnpm test --run

show 11 more