MCP Observatory
npm analyzed 1.17.4

n24q02m/mcp-core

v1.17.4
npm

Shared foundation for building MCP servers -- Streamable HTTP transport, OAuth 2.1, browser-based credential setup, and a shared embedding daemon.

maintainer
n24q02m
license
MIT
first seen
2026-05-25
last seen
2026-06-16
releases · 30d
53
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities0 tools
transport stdio · streamable-http · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signalsgithub-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v1.17.4 · analyzer v17 · 2d ago

skills & prompt files 2

code evidencev1.17.4 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 14

  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/install/agents.py :29 from pathlib import Path
  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/lifecycle/lock.py :33 from pathlib import Path
  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/oauth/jwt_issuer.py :4 from pathlib import Path
  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/oauth/user_store.py :7 from pathlib import Path
  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/relay/browser.py :23 with open("/proc/version", encoding="utf-8") as f:
  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/scripts/clean_state.py :17 import shutil
  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/storage/config_file.py :10 from pathlib import Path
  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/storage/machine_id.py :34 with open("/etc/machine-id") as f:
  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/storage/per_plugin_store.py :24 from pathlib import Path
  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/storage/session_lock.py :15 from pathlib import Path
  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/transport/cache.py :20 from pathlib import Path
  • fs n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/transport/local_server.py :16 from pathlib import Path
  • fs n24q02m-mcp-core-20bd491/scripts/preserve-diacritics.py :22 from pathlib import Path
  • fs n24q02m-mcp-core-20bd491/scripts/test_preserve_diacritics.py :15 from pathlib import Path

shell / exec 3

  • shell n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/relay/browser.py :6 import subprocess
  • shell n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/storage/machine_id.py :7 import subprocess
  • shell n24q02m-mcp-core-20bd491/scripts/preserve-diacritics.py :19 import subprocess

network 8

  • net n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/auth/delegated_oauth_app.py :46 import httpx
  • net n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/auth/local_oauth_app.py :715 from urllib.parse import urlencode
  • net n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/auth/relay_login.py :24 from urllib.parse import quote
  • net n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/http/ssrf.py :15 import socket
  • net n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/relay/client.py :9 from urllib.parse import quote, urljoin
  • net n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/relay/transient.py :21 import socket
  • net n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/storage/machine_id.py :6 import socket
  • net n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/transport/local_server.py :14 import socket

secrets 5

  • secrets n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/auth/delegated_oauth_app.py :247 _relay_password = os.environ.get("MCP_RELAY_PASSWORD", "")
  • secrets n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/auth/local_oauth_app.py :172 _relay_password = os.environ.get("MCP_RELAY_PASSWORD", "")
  • secrets n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/storage/machine_id.py :3 import getpass
  • secrets n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/storage/per_plugin_store.py :62 master = os.environ.get("CREDENTIAL_SECRET")
  • secrets n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/transport/local_server.py :457 _relay_password = os.environ.get("MCP_RELAY_PASSWORD", "")

database 1

  • db n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/oauth/user_store.py :5 import sqlite3

tool registrations 2

  • config__open_relay n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/relay/tool_helpers.py :72
  • config__open_relay n24q02m-mcp-core-20bd491/packages/core-py/src/mcp_core/relay/transient.py :269

declared dependencies 11

  • fastmcp@>=3.4.2
  • httpx@>=0.28.1
  • httpcore@>=1.0.9
  • cryptography@>=49.0.0
  • authlib@>=1.7.2
  • starlette@>=1.3.1
  • pydantic@>=2.12.5,<3
  • loguru@>=0.7.3
  • platformdirs@>=4.10.0
  • tomli-w@>=1.2.0
  • filelock@>=3.29.3