{"name":"io.github.cyanheads/mcp-ts-core","slug":"cyanheads-mcp-ts-core","title":null,"description":"Agent-native TypeScript framework for MCP servers.","url":"https://mcp.market/server/cyanheads-mcp-ts-core","rating":null,"grade":"C","score":55,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":58,"stars":151,"forks":29,"downloads_week":33180,"last_push_at":"2026-09-18T19:22:35.000Z","license":"Apache-2.0"},"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/cyanheads/mcp-ts-core","website":null,"version":"0.13.5","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@cyanheads/mcp-ts-core","version":"0.13.5","runtimeHint":"bun","transport":{"type":"stdio"},"packageArguments":[{"value":"run","type":"positional"},{"value":"start:stdio","type":"positional"}],"environmentVariables":[{"description":"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').","format":"string","default":"info","name":"MCP_LOG_LEVEL"}]},{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@cyanheads/mcp-ts-core","version":"0.13.5","runtimeHint":"bun","transport":{"type":"streamable-http","url":"http://localhost:3010/mcp"},"packageArguments":[{"value":"run","type":"positional"},{"value":"start:http","type":"positional"}],"environmentVariables":[{"description":"The hostname for the HTTP server.","format":"string","default":"127.0.0.1","name":"MCP_HTTP_HOST"},{"description":"The port to run the HTTP server on.","format":"string","default":"3010","name":"MCP_HTTP_PORT"},{"description":"The endpoint path for the MCP server.","format":"string","default":"/mcp","name":"MCP_HTTP_ENDPOINT_PATH"},{"description":"Authentication mode to use: 'none', 'jwt', or 'oauth'.","format":"string","default":"none","name":"MCP_AUTH_MODE"},{"description":"Sets the minimum log level for output (e.g., 'debug', 'info', 'warn').","format":"string","default":"info","name":"MCP_LOG_LEVEL"}]}],"tools":[],"scan":{"score":55,"grade":"C","scanned_at":"2026-09-19T00:26:04.725Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T00:26:04.630Z","components":{"code":{"score":1,"max":25,"notes":["406 source files scanned","406 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/services/mirror/sqlite/handle.js: …rability/throughput balance. handle.exec(`PRAGMA journal_mode = WAL; PRAGMA synchronous = NORMAL; PRAGMA foreign_keys = ON; PRAGMA busy_timeout = ${busyTimeoutMs};`); return handle; } …"},{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/services/mirror/sqlite/handle.js: …rability/throughput balance. handle.exec(`PRAGMA journal_mode = WAL; PRAGMA synchronous = NORMAL; PRAGMA foreign_keys = ON; PRAGMA busy_timeout = ${busyTimeoutMs};`); return handle; } …"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@cyanheads/mcp-ts-core","version":"0.13.5","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":10,"publishedAt":"2026-09-18T19:25:22.042Z","repositoryUrl":"git+https://github.com/cyanheads/mcp-ts-core.git","weeklyDownloads":16590},{"registryType":"npm","identifier":"@cyanheads/mcp-ts-core","version":"0.13.5","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":10,"publishedAt":"2026-09-18T19:25:22.042Z","repositoryUrl":"git+https://github.com/cyanheads/mcp-ts-core.git","weeklyDownloads":16590}],"repo":{"found":true,"owner":"cyanheads","repo":"mcp-ts-core","archived":false,"pushedAt":"2026-09-18T19:22:35Z","stars":151,"forks":29,"openIssues":65,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/10339515?v=4","ownerCreatedAt":"2014-12-29T13:01:12Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/10339515?v=4&s=128","source":"github"},"presence":{"stars":151,"forks":29,"downloadsWeek":33180,"license":"Apache-2.0","lastPushAt":"2026-09-18T19:22:35.000Z","score":58}}}},"grade_history":[{"kind":"restore","fromGrade":"D","toGrade":"C","reason":"score 55: Shell command built from a string (injection risk); Shell command built from a string (injection risk)","createdAt":"2026-09-19T00:26:05.254Z"}],"reviews":[]}