The official [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server for [LaunchDarkly](https://launchdarkly.com/).
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http · sse counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v0.6.2 · analyzer v33 · 4w ago
danger signals1
- dynamic code execution new Function() package/bin/mcp-server.js :10189
var deprecatedfn = new Function("fn", "log", "deprecate", "message", "site", `"use strict"
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 1198
network 3
- net package/dist/commonjs/lib/http.js :19
return fetch(input); - net package/dist/esm/lib/http.js :10
return fetch(input); - net package/src/lib/http.ts :18
return fetch(input);
secrets 1
- secrets (weak) package/examples/auditLogListEntries.example.ts :17
apiKey: process.env["LAUNCHDARKLY_API_KEY"] ?? "",
install hooks 1
- prepublishOnly package/package.json :41
npm run build
declared dependencies 13
- @modelcontextprotocol/sdk@^1.26.0
- zod@^3.25.0 || ^4.0.0
- @eslint/js@^9.26.0
- @stricli/core@^1.1.1
- @types/express@^4.17.21
- bun@1.2.17
- bun-types@1.2.17
- eslint@^9.26.0
- express@^4.21.2
- globals@^15.14.0
- tshy@^2.0.0
- typescript@~5.8.3
show 1 more
- typescript-eslint@^8.26.0
transport_posture 3
- binds all interfaces (0.0.0.0) package/dist/commonjs/mcp-server/cli/start/impl.js :75
const httpServer = app.listen(flags.port, "0.0.0.0", () => { - binds all interfaces (0.0.0.0) package/dist/esm/mcp-server/cli/start/impl.js :69
const httpServer = app.listen(flags.port, "0.0.0.0", () => { - binds all interfaces (0.0.0.0) package/src/mcp-server/cli/start/impl.ts :99
const httpServer = app.listen(flags.port, "0.0.0.0", () => {