Is Source Parts MCP server safe?
Yes, with the usual care.
Passed every safety check we run. Maintained, authenticated, reachable, clean scan.
No critical or high findings in the latest scan.
How Source Parts compares
Against every graded Media MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 93/100
- higher than 90% of 1,337 Media servers
- Uptime
- 100%
- of our recent checks; the typical remote Media server answers 100%
Public scan report
scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it
1 medium
- Code scan57 source files scanned20/25
- Live reliabilityremote reachable in 1064ms (auth required)20/20
- –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
- Auth qualityOAuth resource metadata advertised on 40115/15
- Maintenancelast push 15 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Findings (1)
- mediumsubprocess with shell=True
exec.shell-trueparts_mcp-0.5.3/parts_mcp/tools/cli.py: …l metacharacters (we use list args, not shell=True) dangerous = set(";|&$`\\\"\n\r…
Overall 93/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Source Parts does
KiCad MCP ProProduction-grade MCP server for KiCad EDA—PCB design, DRC, simulation, BOM, DFM, and manufacturing.not reviewedEstablishedA- SheetsDataElectronic component datasheets for AI agents: pinouts, specs, package info and design checks.not reviewedGrowingA
- DembrandtDesign tokens from any live site: colours, type, spacing, components, drift against a baseline.not reviewedWidely usedB