npm JavaScript analyzed 0.2.18

@ductape/mcp

v0.2.18
npm

MCP server that exposes Ductape SDK operations via the backend proxy

maintainer
feekayo
licence
UNLICENSED
first seen
2026-08-12
last seen
2026-08-12
releases · 30d
0
short id

@ductape/mcp is an MCP server distributed on npm, maintained by feekayo, tracked here since August 2026. It has shipped 78 releases (currently 0.2.18) and exposes 15 tools. Tools include ductape_cli, ductape_docs, ductape_events_discover, ductape_events_topic_setup, ductape_events_validate_project, ductape_execute, and 9 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Its 15 tools appear to reach shell / exec, network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 15
  • ductape_cli
  • ductape_docs
  • ductape_events_discover
  • ductape_events_topic_setup
  • ductape_events_validate_project
  • ductape_execute
  • ductape_function_setup
  • ductape_generate_payload
  • ductape_generate_snippet
  • ductape_marketplace_connect
  • ductape_marketplace_discover
  • ductape_marketplace_inspect
  • ductape_migration_plan
  • ductape_redis_setup
  • ductape_schema
release cadence · 90d 78 releases
06-21 00:00 08-04 00:00 now
recent releases last 10
version date src
0.2.18 2026-08-12 npm
0.2.17 2026-08-11 npm
0.2.16 2026-08-09 npm
0.2.15 2026-08-09 npm
0.2.14 2026-08-09 npm
0.2.13 2026-08-09 npm
0.2.12 2026-08-09 npm
0.2.11 2026-08-06 npm
0.2.10 2026-08-02 npm
0.2.9 2026-08-02 npm

view all →