{"name":"dev.servonaut/servonaut","slug":"servonaut","title":"Servonaut","description":"Manage AWS, Hetzner, OVH and SSH servers: status, logs, CloudWatch, IP bans, safe command exec.","url":"https://mcp.market/server/servonaut","rating":null,"grade":"A","score":85,"certified":false,"status":"active","category":"devtools","tags":["devtools"],"presence":{"score":44,"stars":26,"forks":1,"downloads_week":352,"last_push_at":"2026-09-19T17:36:45.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/zb-ss/servonaut","website":"https://servonaut.dev","version":"2.26.3","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"servonaut","version":"2.26.3","runtimeHint":"uvx","transport":{"type":"stdio"},"runtimeArguments":[{"description":"Install the MCP extra alongside the base package","value":"servonaut[mcp]","type":"named","name":"--from"}],"packageArguments":[{"description":"Start the MCP server on stdio transport","value":"--mcp","type":"positional"}]}],"tools":[],"scan":{"score":85,"grade":"A","scanned_at":"2026-09-19T21:03:50.303Z","report":{"scannerVersion":"0.1.8","scannedAt":"2026-09-19T21:03:50.293Z","components":{"code":{"score":20,"max":25,"notes":["305 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["namespace and repository owner differ","GitHub account older than a year","website matches verified namespace"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"servonaut-2.26.3/src/servonaut/services/ssh_service.py: …ild SSH command as List[str]. NEVER use shell=True. Always uses -o IdentitiesOnly…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"servonaut","version":"2.26.3","found":true,"license":"MIT","dependencyCount":33,"publishedAt":"2026-09-17T13:57:28.430902Z","repositoryUrl":"https://github.com/zb-ss/ec2-ssh"}],"repo":{"found":true,"owner":"zb-ss","repo":"servonaut","archived":false,"pushedAt":"2026-09-19T17:36:45Z","stars":26,"forks":1,"openIssues":1,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/117021301?v=4","ownerCreatedAt":"2022-10-30T13:13:20Z","license":"MIT"},"icon":{"url":"https://servonaut.dev/favicon.svg","source":"registry"},"presence":{"stars":26,"forks":1,"downloadsWeek":352,"license":"MIT","lastPushAt":"2026-09-19T17:36:45.000Z","score":44}}}},"grade_history":[{"kind":"restore","fromGrade":"D","toGrade":"A","reason":"score 85: subprocess with shell=True","createdAt":"2026-09-19T21:03:50.742Z"}],"reviews":[]}