Is SafeWeave MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
What to know before installing
- highcurl | sh in a script
- highShell command built from a string (injection risk)
How SafeWeave compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 68/100
- higher than 30% of 918 Security servers
- Uptime
- 100%
- of our recent checks; the typical remote Security server answers 100%
Public scan report
scanner v0.1.10 · 2026-10-27 · same rubric, same numbers if you re-run it
2 high2 medium
- Code scan76 source files scanned0/25
- Live reliabilityremote reachable in 373ms (auth required)20/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualityOAuth resource metadata advertised on 40115/15
- Maintenancelast push 7 days ago15/15
- Maintainer identityendpoint served from the registry-verified namespace domain8/10
Findings (4)
- mediumeval / new Function used
exec.evaldist/scanners/posture.js: …URE-EVAL-USAGE', title: 'Use of eval() detected', pattern: /\beval\s*…
- highcurl | sh in a script
install.curl-piperules/compliance/owasp-top10.yaml: …load-pipe-exec subprocess.run(["bash", "-c", "curl ... | bash"], ...) subprocess.run(["…
- highShell command built from a string (injection risk)
exec.shell-concatrules/compliance/owasp-top10.yaml: ….) - pattern: | os.system("curl " + $URL + " | bash") - pattern: … - mediumsubprocess with shell=True
exec.shell-truerules/free-sast-rules.yaml: …: | subprocess.call($CMD, shell=True, ...) - pattern: | …
Overall 68/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what SafeWeave does
- Security SuiteBundle of secret-scanner, dependency-auditor, ssl-inspector, and dns-intelligencenot reviewedGrowingA
- SkylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.not reviewedEstablishedC
- Reversecore MCPSecurity-first MCP server for reverse engineering, malware analysis, forensics, and SAST.not reviewedEstablishedB
