runpod-runpod-mcp-ts

Security Findings (80)

• HighAS-002

  ⚠️Excessive Permissions ×4

  tool declares network permission

  get-endpointupdate-endpointdelete-endpoint

  tool declares exec permission

  create-template

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• HighAS-010

  🔑Insecure Secret Handling

  create-container-registry-auth:input parameter "password" appears to accept a secret or credential

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.

• MediumAS-002

  ⚠️Excessive Permissions ×18

  tool declares fs permission

  create-podupdate-poddelete-podcreate-endpointupdate-endpointdelete-endpointcreate-templateupdate-templatedelete-templatecreate-network-volumeupdate-network-volumedelete-network-volumecreate-container-registry-authdelete-container-registry-auth

  tool declares env permission

  create-podupdate-podcreate-templateupdate-template

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-002

  ⚠️Excessive Permissions ×2

  input schema exposes 11 properties (threshold: 10)

  create-podcreate-template

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×3

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  get-endpointdelete-endpointcreate-template

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-007

  ℹ️Missing Description or Schema ×26

  Tool 'list-pods' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  list-pods

  Tool 'get-pod' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  get-pod

  Tool 'create-pod' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  create-pod

  Tool 'update-pod' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  update-pod

  Tool 'start-pod' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  start-pod

  Tool 'stop-pod' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  stop-pod

  Tool 'delete-pod' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  delete-pod

  Tool 'list-endpoints' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  list-endpoints

  Tool 'get-endpoint' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  get-endpoint

  Tool 'create-endpoint' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  create-endpoint

  Tool 'update-endpoint' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  update-endpoint

  Tool 'delete-endpoint' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  delete-endpoint

  Tool 'list-templates' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  list-templates

  Tool 'get-template' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  get-template

  Tool 'create-template' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  create-template

  Tool 'update-template' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  update-template

  Tool 'delete-template' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  delete-template

  Tool 'list-network-volumes' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  list-network-volumes

  Tool 'get-network-volume' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  get-network-volume

  Tool 'create-network-volume' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  create-network-volume

  Tool 'update-network-volume' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  update-network-volume

  Tool 'delete-network-volume' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  delete-network-volume

  Tool 'list-container-registry-auths' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  list-container-registry-auths

  Tool 'get-container-registry-auth' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  get-container-registry-auth

  Tool 'create-container-registry-auth' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  create-container-registry-auth

  Tool 'delete-container-registry-auth' has no description - agents cannot reason about its purpose, and static analysis coverage is limited

  delete-container-registry-auth

  Fix: Review and remediate the identified issue.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×26

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  list-podsget-podcreate-podupdate-podstart-podstop-poddelete-podlist-endpointsget-endpointcreate-endpointupdate-endpointdelete-endpointlist-templatesget-templatecreate-templateupdate-templatedelete-templatelist-network-volumesget-network-volumecreate-network-volumeupdate-network-volumedelete-network-volumelist-container-registry-authsget-container-registry-authcreate-container-registry-authdelete-container-registry-auth

  Fix: Review and remediate the identified issue.