Is Devkit MCP server safe?

Yes, with the usual care.

A87/100grade A

Passed every safety check we run. Maintained, authenticated, reachable, clean scan.

No critical or high findings in the latest scan.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

2 medium

Code scan419 source files scanned15/25
Live reliabilityremote reachable in 185ms (auth required)20/20
–Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
Auth qualityOAuth resource metadata advertised on 40115/15
Maintenancelast push 15 days ago15/15
Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

mediumnpm install lifecycle script presentinstall.script

package.json: …t/esm/index.js" }, "scripts": { "postinstall": "patch-package || true", "build": "…

Overall 87/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Webcomponents React
MCP server for UI5 Web Components for React - Developer documentation and API assistance
not reviewed
Established
A