Is MCP Server safe?

Probably. Read the findings first.

C68/100grade C

Use with care. Some checks failed or could not be verified.

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

3 medium

Code scan92 source files scanned10/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 15 days ago15/15
Maintainer identityregistry namespace matches repository owner7/10

mediumeval / new Function usedexec.eval

dist/src/handlers/cache.js: …y:e,token:a}=p;return await(await u(n)).eval('if redis.call("get",KEYS[1])==ARGV[1] t…

mediumnpm install lifecycle script presentinstall.script

package.json: …js && node scripts/bauabdruck.mjs", "postinstall": "node scripts/postinstall.js", "dev…

Overall 68/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Vestige
Local-first memory for AI agents that reaches backward to find a failure's root cause.
not reviewed
Established
B
Deja Vu
deja-vu: local memory over the session histories of thirty-three coding agents.
not reviewed
Established
A
State Memory MCP
Deterministic, persistent graph server for tracking workflow state, decisions, and blockers.
not reviewed
Established
A