courier-courier-mcp

Security Findings (95)

• HighAS-002

  ⚠️Excessive Permissions

  update_audience:tool declares exec permission

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• HighAS-010

  🔑Insecure Secret Handling ×2

  input parameter "token" appears to accept a secret or credential

  get_user_push_tokencreate_or_replace_user_push_token

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.

• MediumAS-002

  ⚠️Excessive Permissions ×21

  tool declares fs permission

  update_audiencedelete_audienceinvoke_automation_templateinvoke_ad_hoc_automationcreate_brandcreate_bulk_jobcreate_listget_user_profile_by_idcreate_or_merge_userreplace_profiledelete_profiledelete_user_list_subscriptionscreate_or_update_tenantdelete_tenantupdate_translationlist_user_push_tokensget_user_push_tokencreate_or_replace_user_push_tokenupdate_user_preference_topicadd_user_to_tenantremove_user_from_tenant

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×6

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  update_audiencesend_messagesend_message_templatesend_message_to_listsend_message_to_list_templateupdate_translation

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• LowAS-002

  ⚠️Excessive Permissions ×6

  input schema exposes 14 properties (threshold: 10)

  list_messages

  tool declares http permission

  send_messagesend_message_templatesend_message_to_listsend_message_to_list_templateupdate_translation

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×59

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  get_audiencelist_audience_memberslist_audiencesupdate_audiencedelete_audienceget_audit_eventlist_audit_eventsgenerate_jwt_for_userinvoke_automation_templateinvoke_ad_hoc_automationcreate_brandget_brandlist_brandscreate_bulk_jobadd_bulk_usersrun_bulk_jobget_bulk_joblist_bulk_userscourier_installation_guidetrack_inbound_eventlist_listsget_listget_list_subscriberscreate_listsubscribe_user_to_listunsubscribe_user_from_listlist_messagesget_messageget_message_contentget_message_historycancel_messagelist_notificationsget_notification_contentget_notification_draft_contentget_user_profile_by_idcreate_or_merge_userreplace_profiledelete_profileget_user_list_subscriptionssubscribe_user_to_listsdelete_user_list_subscriptionssend_messagesend_message_templatesend_message_to_listsend_message_to_list_templateget_tenantcreate_or_update_tenantlist_tenantsdelete_tenantget_translationupdate_translationlist_user_push_tokensget_user_push_tokencreate_or_replace_user_push_tokenget_user_preferencesupdate_user_preference_topiclist_user_tenantsadd_user_to_tenantremove_user_from_tenant

  Fix: Review and remediate the identified issue.