Is Bernstein MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
What to know before installing
- highShell command built from a string (injection risk)
Public scan report
scanner v0.1.9 · 2026-09-19 · same rubric, same numbers if you re-run it
1 high2 medium
- Code scan1500 source files scanned3/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (3)
- mediumsubprocess with shell=True
exec.shell-truebernstein-3.19.2/.bandit-baseline.json: … cwd=str(cwd),\n671 shell=True,\n672 stdout=subprocess.PIP…
- mediumeval / new Function used
exec.evalbernstein-3.19.2/.bandit-baseline.json: … try:\n209 invariant_expr = eval(prop.invariant, {\"__builtins__\": {}}, … - highShell command built from a string (injection risk)
exec.shell-concatbernstein-3.19.2/packaging/npm/index.js: …unction which(cmd) { try { return execSync(`command -v ${cmd}`, { encoding: "utf8", stdio: ["pipe…
Overall 57/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Bernstein does
- Nautilus Compass MemoryLocal-first long-term memory for AI agents, with byte-recomputable signed verification receipts.not reviewedEstablishedB