mcp-endpoint-server

Security Findings (87)

• HighAS-012

  🔄Tool Drift

  Tool set changed silently at v0.0.7: 52 tool(s) added, 1 tool(s) removed without a version bump.

  + 52 added

  agent_analysis_reportagent_clearanceagent_clearance_packetagent_content_scanagent_due_diligenceagent_ledgeragent_output_qaagent_passportagent_rank_checkagent_visibility_auditbodacc_annonceschain_eventsclimate_risk_scorecompliance_wallet_screencrypto_derivatives_radarcrypto_dex_cex_spreadcrypto_new_pairscrypto_pre_trade_verdictcrypto_signal_fusioncrypto_token_dossiercrypto_token_safetycrypto_wallet_forensicscrypto_wallet_xraycve_lookupdrug_labelecb_exchange_rateeurlex_searchev_chargingflights_statesfr_legifrance_searchfr_sirene_lookupgleif_leiiban_validatemacro_snapshotmarket_intelosm_building_footprintpatents_searchpolymarket_oddspolymarket_resolutionproof_notarizerecalls_searchsanctions_screensolana_pre_tradesolana_token_safetysolar_building_insightsted_tendersuk_companies_searchvies_vatweb_extractx402_payment_firewallx402_seller_auditx402_seller_trust

  − 1 removed

  api_test_webhook

  Fix: The set of tools exposed by this server changed between scans of the same version — a sign the package was silently updated without a version bump. Audit the changelog and all tool definitions before trusting this server. Pin to a specific commit hash rather than a floating version tag.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×14

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  eurlex_searchrecalls_searchuk_companies_searchpatents_searchfr_legifrance_searchcrypto_derivatives_radarcrypto_dex_cex_spreadweb_extractcrypto_new_pairsmacro_snapshotsolana_pre_tradeagent_analysis_reportagent_content_scanmarket_intel

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×52

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  gleif_leivies_vatpolymarket_oddsflights_statesev_chargingbodacc_annoncested_tenderseurlex_searchsanctions_screencve_lookuprecalls_searchdrug_labelosm_building_footprintclimate_risk_scorepolymarket_resolutionsolar_building_insightsuk_companies_searchpatents_searchfr_sirene_lookupiban_validatefr_legifrance_searchecb_exchange_ratecrypto_token_safetycrypto_derivatives_radarcrypto_wallet_xraycrypto_dex_cex_spreadweb_extractcrypto_new_pairsx402_seller_trustx402_payment_firewallcompliance_wallet_screenmacro_snapshotsolana_token_safetysolana_pre_tradecrypto_signal_fusionagent_due_diligenceagent_analysis_reportagent_clearanceagent_output_qaagent_content_scancrypto_pre_trade_verdictagent_ledgerproof_notarizecrypto_token_dossiermarket_intelcrypto_wallet_forensicschain_eventsx402_seller_auditagent_clearance_packetagent_visibility_auditagent_rank_checkagent_passport

  Fix: Review and remediate the identified issue.

• InfoAS-002

  ⚠️Excessive Permissions ×17

  declared capabilities: database access

  vies_vatcve_lookupchain_events

  declared capabilities: network access

  eurlex_searchrecalls_searchpatents_searchfr_legifrance_searchagent_analysis_report

  declared capabilities: network access, filesystem access

  uk_companies_search

  declared capabilities: HTTP requests

  crypto_derivatives_radarmacro_snapshotmarket_intel

  declared capabilities: code/command execution

  crypto_dex_cex_spreadcrypto_new_pairssolana_pre_tradeagent_content_scan

  declared capabilities: network access, database access

  web_extract

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-010

  🔑Insecure Secret Handling ×3

  input parameter "token" accepts a credential (informational; not evidence of insecure handling)

  crypto_token_safetycrypto_pre_trade_verdictcrypto_token_dossier

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.