{"name":"io.github.mcpcustoms/mcp-customs","slug":"mcpcustoms-mcp-customs","title":"MCP Customs","description":"Inspect an MCP server for common security risks before you install it. Offline, zero telemetry.","url":"https://mcp.market/server/mcpcustoms-mcp-customs","rating":null,"grade":"C","score":69,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":22,"stars":2,"forks":0,"downloads_week":28,"last_push_at":"2026-07-31T02:39:43.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/mcpcustoms/mcp-customs","website":null,"version":"0.1.1","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"mcp-customs","version":"0.1.1","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":69,"grade":"C","scanned_at":"2026-09-24T11:59:55.456Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-24T11:59:55.429Z","components":{"code":{"score":15,"max":25,"notes":["7 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":12,"max":15,"notes":["last push 55 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"src/rules.js: …en)\\([^)]*shell\\s*=\\s*True/g, // Python shell=True /os\\.system\\s*\\(/g, …"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"src/rules.js: … { id: 'MCP003', title: 'Use of eval() / dynamic code execution', severit…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"mcp-customs","version":"0.1.1","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":0,"publishedAt":"2026-07-31T02:30:22.864Z","repositoryUrl":"git+https://github.com/mcpcustoms/mcp-customs.git","weeklyDownloads":28}],"repo":{"found":true,"owner":"mcpcustoms","repo":"mcp-customs","archived":false,"pushedAt":"2026-07-31T02:39:43Z","stars":2,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/294813371?v=4","ownerCreatedAt":"2026-06-18T12:26:34Z","license":"Apache-2.0"},"icon":{"url":null,"source":"none"},"presence":{"stars":2,"forks":0,"downloadsWeek":28,"license":"Apache-2.0","lastPushAt":"2026-07-31T02:39:43.000Z","score":22}}}},"grade_history":[],"reviews":[]}