Mmcp.market

Is Brightspace MCP server safe?

Probably. Read the findings first.

C69/100grade C

Use with care. Some checks failed or could not be verified.

What to know before installing
  • highShell command built from a string (injection risk)

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high
  • Code scan215 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 55 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    build/cli/commands/ui.js: …port('node:child_process'); exec(`${process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open'} ${url}`); } catch { /* ign…
Overall 69/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what Brightspace does

  • JAJ Dataverse Dev MCP
    Xrm/Power Platform/Dataverse MCP for devs, Azure CLI auth, Web API and multi-environment support
    A
  • Rede
    MCP server for Rede — Itaú-owned BR acquirer: authorize/capture/refund, zero-auth, card tokens
    B
  • spintax.net MCP server
    Write, validate, render and analyze spintax templates. Backed by @spintax/core. No auth.
    A

Brightspace reviews, tools and install