Drift inferred · capture-to-capture
- HIGH code analysis flagged hidden prompt content in evalsone/mcp-bridge
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
no tools enumerated yet for this server.
evidence-backed
findings quoted directly from the published source artifact — not inferred
last analysis: fetch-failed · showing evidence from the last successful analysis (3d ago)
filesystem 1
- fs EvalsOne-MCP-connect-11c111c/src/config/config.ts :3
import fs from 'fs';
shell / exec 2
- shell EvalsOne-MCP-connect-11c111c/src/server/n8n-mcp-wrapper.ts :1
import { spawn } from 'child_process'; - shell EvalsOne-MCP-connect-11c111c/src/utils/tunnel.ts :3
import { exec } from 'child_process';
network 1
- net EvalsOne-MCP-connect-11c111c/src/server/http-server.ts :62
const response = await fetch(`http://localhost:${this.config.server.port}/health`);
secrets 2
- secrets EvalsOne-MCP-connect-11c111c/src/config/config.ts :165
authToken: (process.env.ACCESS_TOKEN || '').trim(), - secrets EvalsOne-MCP-connect-11c111c/src/utils/tunnel.ts :19
if (!process.env.NGROK_AUTH_TOKEN) {
declared dependencies 16
- @modelcontextprotocol/sdk@^1.27.1
- @types/js-yaml@^4.0.9
- dotenv@^16.0.3
- esbuild@>=0.25.0
- express@^4.19.2
- js-yaml@^4.1.0
- ngrok@^5.0.0-beta.2
- winston@^3.8.2
- @types/express@^4.17.21
- @types/jest@^29.5.12
- @types/node@^20.11.28
- eslint@^9.8.0
- jest@^29.7.0
- ts-jest@^29.2.4
- tsx@^4.16.5
- typescript@^5.4.2