pypi Python analyzed 0.1.0

envmcp

v0.1.0
pypi

Generic MCP server exposing introspection and execution tools for any installed Python package.

maintainer
licence
first seen
2026-09-06
last seen
2026-09-06
releases · 30d
1
short id

envmcp is an MCP server distributed on pypi, tracked here since September 2026. It has shipped 1 release (currently 0.1.0) and exposes 21 tools. Tools include approve_job_tool, cancel_task_tool, check_importable_tool, check_job_tool, end_session_tool, get_execution_log_tool, and 15 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 21 tools appear to reach filesystem and shell / exec, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 20 of 21
  • approve_job_tool
  • cancel_task_tool
  • check_importable_tool
  • check_job_tool
  • end_session_tool
  • get_execution_log_tool
  • get_job_tool
  • get_object_doc_tool
  • get_task_tool
  • inspect_com_object_tool
  • inspect_package_tool
  • install_package_tool
  • list_com_classes_tool
  • list_installed_packages_tool
  • list_jobs_tool
  • list_sessions_tool
  • list_tasks_tool
  • queue_script_tool
  • reject_job_tool
  • run_script_tool
All 21 tools →
release cadence · 90d 1 releases
06-18 00:00 08-01 00:00 now
recent releases last 1
version date src
0.1.0 2026-09-06 pypi

view all →