mcp-hub

Security Findings (165)

• HighAS-012

  🔄Tool Drift

  Tool set changed silently at v4.2.1: 1 tool(s) added, 0 tool(s) removed without a version bump.

  + 1 added

  get_hosting_capacity

  Fix: The set of tools exposed by this server changed between scans of the same version — a sign the package was silently updated without a version bump. Audit the changelog and all tool definitions before trusting this server. Pin to a specific commit hash rather than a floating version tag.

• MediumAS-003

  🔀Scope Mismatch

  set_shortlist_alert:tool name "set_shortlist_alert" implies local write operation but only remote/network-class permissions were detected

  Fix: Ensure tool names, descriptions, and permission declarations are internally consistent. Use explicit naming conventions that fully reflect actual capabilities.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×36

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  searchfetchsearch_facilitiesget_grid_scoreboardsemantic_searchsearch_intelligenceget_market_contextget_iso_contextget_retirement_headroomget_hosting_capacityrank_sitesplan_queryexecute_planset_shortlist_alertsuggest_reallocationget_grid_dataget_changessave_sitelist_saved_sitesset_market_alertexport_datasetanalyze_siteget_climate_intelgenerate_site_analysiscompare_sitesget_fiber_readinessget_renewable_energywhy_dchubget_dchub_recommendationrank_marketsget_permitting_intelresearch_taskstanding_intentclaim_free_keybind_emailunlock_more_data

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• LowAS-002

  ⚠️Excessive Permissions ×2

  input schema exposes 11 properties (threshold: 10)

  get_hosting_capacityanalyze_site

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-002

  ⚠️Excessive Permissions ×41

  declared capabilities: network access

  searchfetchget_grid_scoreboardget_market_contextget_iso_contextget_grid_dataget_changessave_siteget_dchub_recommendationrank_marketsresearch_task

  declared capabilities: network access, filesystem access

  search_facilitieslist_saved_sitesexport_dataset

  declared capabilities: network access, database access

  semantic_searchsearch_intelligence

  declared capabilities: filesystem access, HTTP requests

  get_retirement_headroomget_hosting_capacity

  declared capabilities: HTTP requests

  rank_sitesset_shortlist_alertsuggest_reallocationanalyze_siteget_climate_intelcompare_sitesget_fiber_readinessget_renewable_energybind_emailunlock_more_data

  declared capabilities: database access

  discover_toolsget_disaster_riskget_backup_status

  declared capabilities: code/command execution, network access, database access

  plan_query

  declared capabilities: code/command execution, database access

  execute_plan

  declared capabilities: filesystem access

  get_facility_risk_deltaget_metro_fiber

  declared capabilities: network access, database access, HTTP requests

  set_market_alert

  declared capabilities: network access, HTTP requests

  generate_site_analysisget_permitting_intelstanding_intent

  declared capabilities: network access, filesystem access, database access

  why_dchub

  declared capabilities: code/command execution, network access, HTTP requests

  claim_free_key

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×81

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  searchfetchsearch_facilitiesget_facilityget_market_intelget_market_dcpi_rankpredict_market_trajectoryget_gas_indexget_gas_economicsget_grid_scoreboardcompare_isosget_intelligence_indexlist_transactionsget_newssemantic_searchsearch_intelligenceget_market_contextget_iso_contextget_pipelineget_power_pipelineget_global_powerget_interconnection_queueget_refined_queueget_retirement_headroomget_hosting_capacityanalyze_parcelrank_sitesdiscover_toolsplan_queryexecute_plansave_to_shortlistget_shortlistset_shortlist_alertsuggest_reallocationget_grid_dataget_changesget_facility_risk_deltasave_sitelist_saved_sitesset_market_alertsubscribe_digestset_site_alertexport_datasetanalyze_siteget_composite_site_scoreget_disaster_riskget_climate_intelgenerate_site_analysiscompare_sitesget_infrastructureget_fiber_intelget_fiber_readinessget_metro_fiberget_energy_pricesget_renewable_energyget_tax_incentivesget_water_riskget_grid_intelligenceget_gas_intelligenceget_agent_registryget_backup_statuswhy_dchubget_dchub_recommendationrank_marketsfind_alternativesscore_facilityai_capacity_indexhyperscaler_dealssite_selection_canvasgrid_transition_radardeal_autopsyget_permitting_intelsimulate_scenarioresearch_taskstanding_intentplan_fiber_leadincluster_sites_by_latencyclaim_free_keybind_emailrecover_my_keyunlock_more_data

  Fix: Review and remediate the identified issue.

• InfoAS-010

  🔑Insecure Secret Handling ×3

  input parameter "max_tokens" accepts a credential (informational; not evidence of insecure handling)

  get_market_contextget_iso_context

  input parameter "api_key" accepts a credential (informational; not evidence of insecure handling)

  bind_email

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.