mcp-client-server

Security Findings (80)

• HighAS-012

  🔄Tool Drift

  Tool set changed silently at v0.1.0: 43 tool(s) added, 146 tool(s) removed without a version bump.

  + 43 added

  assemble_demo_videocapture_screenshotsclaim_jobcomplete_checkoutcreate_projectcreate_worker_offeringfreeze_test_cardget_combo_statusget_credit_balanceget_integration_guideget_payout_setup_linkget_scene_statusget_test_resultsget_test_statusget_worker_earningslist_available_jobslist_comboslist_credit_packslist_device_presetslist_feedbacklist_kept_personaslist_my_claimed_jobslist_personality_offeringslist_projectslist_test_cardslist_worker_offeringsprovision_test_cardquote_demo_videoquote_test_cardquote_voiceoverretest_jobsubmit_combosubmit_conversation_testsubmit_feedbacksubmit_interaction_scenesubmit_job_resultssubmit_testsubmit_test_batchsynthesize_voiceovertop_up_creditsupdate_feedbackupsert_worker_profilewhoami

  − 146 removed

  ab_test_reportanalyze_diff_bugsbase64_decodebase64_encodebias_detectbm25_scorebuild_rag_promptcalculate_readabilitycase_convertcheck_contrast_ratiocolor_convertcompare_modelscompare_responsesconsistency_checkcontext_window_checkconversation_analyzecookie_security_auditcors_checkercors_testcot_analyzercount_code_linescount_tokenscreate_confluence_pagecron_parsecron_validatordecode_jwtdetect_languagedetect_secretsdiff_textembedding_similarityenv_parseescape_htmlestimate_llm_costextract_json_from_textextract_json_pathextract_linksextract_todosfetch_confluence_pagefetch_jira_issuefetch_veille_feedfew_shot_formatterfind_toolfix_gherkinflatten_jsonformat_bytesformat_jsonformat_tablefunction_call_validategenerate_curlgenerate_eval_yamlgenerate_hmacgenerate_html_reportgenerate_json_ldgenerate_passwordgenerate_sluggenerate_test_casesgenerate_uuidget_testing_guidelinesguardrail_testhallucination_checkhash_texthtml_to_markdownhttp_status_lookupidentify_callerjira_to_test_suitejson_diffjson_schema_generatejson_schema_validatejson_to_csvjson_to_yamllatency_benchmarklevenshtein_distancelint_commit_messagelist_llm_modelslist_local_testsllm_fit_finderllm_format_checkllm_generatellm_json_schema_checkllm_output_validatorlorem_ipsummcp_schema_lintmcp_server_evaluatemcp_server_health_checkmerge_jsonminify_jsmock_from_schemamodel_infomultimodal_eval_guideneedle_haystack_generatenormalize_vectornormalize_whitespacenumber_base_convertopenapi_validateoptimize_prompt_tokensparse_csvparse_http_headerspost_jira_commentpr_gatekeeperprompt_injection_scanprompt_template_fillprompt_test_suiterag_relevance_rankredact_piiregex_testrerank_evaluateresponse_quality_scorerun_eval_contractrun_pr_gate_pipelinerun_semantic_testsrun_vlm_test_suiterun_vlm_test_suite_batchscore_geo_signalssearch_jira_issuessecret_scansecurity_headers_checkshield_analyzesimilarity_scoresort_linessplit_chunksssl_certificate_checkstrip_markdownsystem_prompt_buildertest_skilltext_statstimestamp_converttoken_budget_calculatortoxicity_scantransform_json_arraytruncate_to_tokensunescape_htmlurl_decodeurl_encodevalidate_agent_trajectoryvalidate_emailvalidate_mcp_responsevalidate_urlvector_quantizevector_similarityvector_statsweb_security_auditwebhook_endpoint_createwebhook_endpoint_requestsword_frequencyxml_to_jsonyaml_to_json

  Fix: The set of tools exposed by this server changed between scans of the same version — a sign the package was silently updated without a version bump. Audit the changelog and all tool definitions before trusting this server. Pin to a specific commit hash rather than a floating version tag.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×16

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  get_integration_guidesubmit_testsubmit_interaction_scenesubmit_combocapture_screenshotsget_test_resultsretest_jobsynthesize_voiceoverassemble_demo_videosubmit_feedbackwhoamicreate_projecttop_up_creditsget_payout_setup_linkcreate_worker_offeringsubmit_conversation_test

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• LowAS-002

  ⚠️Excessive Permissions

  submit_test:input schema exposes 32 properties (threshold: 10)

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-002

  ⚠️Excessive Permissions ×18

  declared capabilities: network access

  get_integration_guideget_test_resultsretest_jobassemble_demo_videowhoamiget_payout_setup_link

  declared capabilities: code/command execution, network access, filesystem access

  submit_test

  declared capabilities: code/command execution, network access

  submit_interaction_scenesubmit_combo

  declared capabilities: network access, filesystem access

  capture_screenshotscreate_project

  declared capabilities: code/command execution, network access, environment variables

  synthesize_voiceover

  declared capabilities: filesystem access, HTTP requests

  submit_feedback

  declared capabilities: filesystem access

  update_feedbackupsert_worker_profile

  declared capabilities: code/command execution, network access, filesystem access, HTTP requests

  top_up_credits

  declared capabilities: code/command execution, filesystem access

  create_worker_offering

  declared capabilities: network access, HTTP requests

  submit_conversation_test

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×43

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  get_integration_guidesubmit_testsubmit_test_batchsubmit_interaction_sceneget_scene_statuslist_combossubmit_comboget_combo_statuscapture_screenshotsquote_test_cardprovision_test_cardfreeze_test_cardlist_test_cardsget_test_statusget_test_resultsretest_joblist_device_presetsquote_voiceoversynthesize_voiceoverquote_demo_videoassemble_demo_videosubmit_feedbacklist_feedbackupdate_feedbacklist_kept_personaswhoamilist_projectscreate_projectlist_credit_packsget_credit_balancetop_up_creditsget_worker_earningsget_payout_setup_linkcomplete_checkoutlist_available_jobslist_my_claimed_jobsclaim_jobsubmit_job_resultslist_personality_offeringsupsert_worker_profilecreate_worker_offeringlist_worker_offeringssubmit_conversation_test

  Fix: Review and remediate the identified issue.

• InfoAS-010

  🔑Insecure Secret Handling

  submit_conversation_test:input parameter "paradiseToken" accepts a credential (informational; not evidence of insecure handling)

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.