{"name":"io.github.CTRLRun/ctrlrun-mcp-operator","slug":"ctrlrun-ctrlrun-mcp-operator","title":"CTRLRun Operator","description":"Answer CTRLRun approvals from an MCP client: list what is held, inspect it, grant or deny.","url":"https://mcp.market/server/ctrlrun-ctrlrun-mcp-operator","rating":null,"grade":"B","score":72,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":51,"stars":22,"forks":0,"downloads_week":8198,"last_push_at":"2026-09-19T07:32:29.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/CTRLRun/ctrlrun","website":"https://docs.ctrlrun.dev/mcp/overview","version":"0.12.2","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"ctrlrun","version":"0.12.2","transport":{"type":"streamable-http","url":"http://127.0.0.1:8901/mcp"},"packageArguments":[{"description":"Serve the operator's own commands as MCP tools, over loopback.","value":"mcp-operator","type":"positional"}]}],"tools":[],"scan":{"score":72,"grade":"B","scanned_at":"2026-09-19T19:48:10.763Z","report":{"scannerVersion":"0.1.5","scannedAt":"2026-09-19T19:48:10.709Z","components":{"code":{"score":13,"max":25,"notes":["56 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"ctrlrun-0.12.2/src/ctrlrun/conformance/fixtures.py: …] = {\"_executor\": request.executor} exec(f\"def tool({parameters}):\\n return _exe…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"ctrlrun","version":"0.12.2","found":true,"weeklyDownloads":8198,"license":"Apache-2.0","dependencyCount":16,"publishedAt":"2026-09-15T23:09:26.750144Z","repositoryUrl":"https://github.com/CTRLRun/ctrlrun"}],"repo":{"found":true,"owner":"CTRLRun","repo":"ctrlrun","archived":false,"pushedAt":"2026-09-19T07:32:29Z","stars":22,"forks":0,"openIssues":8,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/324347662?v=4","ownerCreatedAt":"2026-09-03T05:37:50Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/324347662?v=4&s=128","source":"registry","width":128,"height":128},"presence":{"stars":22,"forks":0,"downloadsWeek":8198,"license":"Apache-2.0","lastPushAt":"2026-09-19T07:32:29.000Z","score":51}}}},"grade_history":[],"reviews":[]}