{"name":"io.github.activeing123/mcptoon","slug":"activeing123-mcptoon","title":"mcptoon","description":"Zero-dependency MCP client: one synced config for every agent, 581-token listings, not 71,929.","url":"https://mcp.market/server/activeing123-mcptoon","rating":null,"grade":"B","score":71,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":40,"stars":202,"forks":7,"downloads_week":null,"last_push_at":"2026-09-18T14:33:28.000Z","license":"Apache-2.0"},"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/activeing123/mcptoon","website":"https://activeing123.github.io/mcptoon/","version":"0.7.19","remotes":[],"packages":[{"registryType":"pypi","identifier":"mcptoon","version":"0.7.19","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":71,"grade":"B","scanned_at":"2026-09-19T00:27:26.395Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T00:27:26.344Z","components":{"code":{"score":13,"max":25,"notes":["26 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"env.dump","severity":"high","component":"code","title":"Whole environment serialized (possible credential exfil)","evidence":"mcptoon-0.7.19/src/mcptoon/client.py: …hutil import sys env = os.environ.copy() if self._env: env.u…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"mcptoon","version":"0.7.19","found":true,"license":"Apache-2.0","dependencyCount":3,"publishedAt":"2026-09-18T14:34:26.431679Z","repositoryUrl":"https://github.com/activeing123/mcptoon"}],"repo":{"found":true,"owner":"activeing123","repo":"mcptoon","archived":false,"pushedAt":"2026-09-18T14:33:28Z","stars":202,"forks":7,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/305860409?v=4","ownerCreatedAt":"2026-07-16T13:34:52Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/305860409?v=4&s=128","source":"github"},"presence":{"stars":202,"forks":7,"downloadsWeek":null,"license":"Apache-2.0","lastPushAt":"2026-09-18T14:33:28.000Z","score":40}}}},"grade_history":[{"kind":"restore","fromGrade":"C","toGrade":"B","reason":"score 71: Whole environment serialized (possible credential exfil)","createdAt":"2026-09-19T00:27:26.998Z"}],"reviews":[]}