npm JavaScript analyzed 0.12.8

@cyanheads/mcp-ts-core

v0.12.8
npm

Agent-native TypeScript framework for MCP servers. Includes runtime infrastructure and agent skills for building, testing, and shipping servers.

maintainer
cyanheads
licence
Apache-2.0
first seen
2026-05-22
last seen
2026-09-11
releases · 30d
20
short id

@cyanheads/mcp-ts-core is an MCP server distributed on npm, maintained by cyanheads, tracked here since May 2026. It has shipped 209 releases (currently 0.12.8) and exposes 1 tool. Tools include template_echo_message. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 1 tool appear to reach filesystem, network, secrets and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 1
  • template_echo_message
release cadence · 90d 52 releases
06-14 00:00 07-28 00:00 now
recent releases last 10
version date src
v0.12.8 2026-09-09 github
0.12.8 2026-09-09 npm
v0.12.7 2026-09-08 github
0.12.7 2026-09-08 npm
v0.12.6 2026-09-06 github
0.12.6 2026-09-06 npm
v0.12.5 2026-09-02 github
0.12.5 2026-09-02 npm
v0.12.4 2026-09-02 github
0.12.4 2026-09-02 npm

view all →