Mmcp.market

Is Buggazi MCP server safe?

Yes, with the usual care.

B83/100grade B

Safe to use. Minor gaps such as a missing repository or slower maintenance.

No critical or high findings in the latest scan.

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 medium
  • Code scan39 source files scanned20/25
  • Live reliabilityremote reachable in 2228ms17/20
  • Tool poisoning2 tool descriptions checked15/15
  • Auth qualityAPI key sent as a header8/15
  • Maintenancelast push 20 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • mediumHeavily hex-escaped string (obfuscation)obf.hex-density
    dist/commands/app.js: …55=function(_0x437382){const _0x4c44d1='\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x2b\x2f\x3d';let _0x21f8ec='',_0xff9fe2='';for(let …
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what Buggazi does

  • Secedgar
    Query SEC EDGAR filings, XBRL financials, and company data through MCP. STDIO & Streamable HTTP.
    A

Buggazi reviews, tools and install