{"name":"dev.safeweave/safeweave","slug":"safeweave","title":"SafeWeave","description":"Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.","url":"https://mcp.market/server/safeweave","rating":null,"grade":"C","score":68,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":37,"stars":5,"forks":0,"downloads_week":24,"last_push_at":"2026-10-19T18:11:04.000Z","license":"MIT"},"uptime":{"percent":100,"checks":26,"ok":26,"last_checked_at":"2026-11-02T10:50:32.970Z","last_ok_at":"2026-11-02T10:50:32.970Z","latency_ms":263},"claimed":false,"transport":"mixed","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/nickfluxk/safeweave","website":"https://safeweave.dev","version":"0.7.5","remotes":[{"type":"streamable-http","url":"https://mcp.safeweave.dev/mcp"}],"packages":[{"registryType":"npm","identifier":"safeweave-mcp","version":"0.7.5","transport":{"type":"stdio"},"environmentVariables":[{"description":"Optional. A free key unlocks 7 scanners locally; Cloud keys add DAST, website scans, hosted scans and PR checks. Without a key: a 10-scan trial running SAST, secrets and dependencies.","isSecret":true,"name":"SAFEWEAVE_LICENSE_KEY"}]}],"tools":[],"scan":{"score":68,"grade":"C","scanned_at":"2026-10-27T05:18:05.603Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-27T05:18:05.508Z","components":{"code":{"score":0,"max":25,"notes":["76 source files scanned"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 373ms (auth required)"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (endpoint requires auth); not counted"]},"auth":{"score":15,"max":15,"notes":["OAuth resource metadata advertised on 401"]},"maintenance":{"score":15,"max":15,"notes":["last push 7 days ago"]},"identity":{"score":8,"max":10,"notes":["endpoint served from the registry-verified namespace domain"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/scanners/posture.js: …URE-EVAL-USAGE', title: 'Use of eval() detected', pattern: /\\beval\\s*…"},{"id":"install.curl-pipe","severity":"high","component":"code","title":"curl | sh in a script","evidence":"rules/compliance/owasp-top10.yaml: …load-pipe-exec subprocess.run([\"bash\", \"-c\", \"curl ... | bash\"], ...) subprocess.run([\"…"},{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"rules/compliance/owasp-top10.yaml: ….) - pattern: | os.system(\"curl \" + $URL + \" | bash\") - pattern: …"},{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"rules/free-sast-rules.yaml: …: | subprocess.call($CMD, shell=True, ...) - pattern: | …"}],"inputs":{"probes":[{"url":"https://mcp.safeweave.dev/mcp","reachable":true,"authRequired":true,"latencyMs":373,"authScheme":"oauth"}],"packages":[{"registryType":"npm","identifier":"safeweave-mcp","version":"0.7.5","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":1,"publishedAt":"2026-10-19T19:15:47.699Z","repositoryUrl":"git+https://github.com/nickfluxk/safeweave.git","weeklyDownloads":24}],"repo":{"found":true,"owner":"nickfluxk","repo":"safeweave","archived":false,"pushedAt":"2026-10-19T18:11:04Z","stars":5,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/262578695?v=4","ownerCreatedAt":"2026-02-19T12:41:32Z","license":"MIT"},"icon":{"url":"https://safeweave.dev/icon.svg","source":"site"},"presence":{"stars":5,"forks":0,"downloadsWeek":24,"license":"MIT","lastPushAt":"2026-10-19T18:11:04.000Z","score":37}}}},"grade_history":[],"reviews":[]}