MCP.Market

Is Source Parts MCP server safe?

Yes, with the usual care.

A93/100grade A

Passed every safety check we run. Maintained, authenticated, reachable, clean scan.

No critical or high findings in the latest scan.

How Source Parts compares

Against every graded Media MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
93/100
higher than 90% of 1,337 Media servers
Uptime
100%
of our recent checks; the typical remote Media server answers 100%

Public scan report

scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it

1 medium
  • Code scan57 source files scanned20/25
  • Live reliabilityremote reachable in 1064ms (auth required)20/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityOAuth resource metadata advertised on 40115/15
  • Maintenancelast push 15 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10

Findings (1)

  • mediumsubprocess with shell=Trueexec.shell-true
    parts_mcp-0.5.3/parts_mcp/tools/cli.py: …l metacharacters (we use list args, not shell=True) dangerous = set(";|&$`\\\"\n\r…
Overall 93/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what Source Parts does

  • KiCad MCP Pro
    Production-grade MCP server for KiCad EDA—PCB design, DRC, simulation, BOM, DFM, and manufacturing.
    A
  • SheetsData
    Electronic component datasheets for AI agents: pinouts, specs, package info and design checks.
    A
  • Dembrandt
    Design tokens from any live site: colours, type, spacing, components, drift against a baseline.
    B

Source Parts reviews, tools and install