Agent Kernel MCP Server
by yaalalabsThe Operating System for Scalable Enterprise AI Agents - Run, orchestrate, and deploy Compliant Enterprise AI Agents at scale across frameworks, without lock-in, rewrites or fragile glue code. Native support for MCP, A2A. Interface with all mainstream communication channels seamlessly out of the box, production ready from day one.
Agent Kernel is an open-source mcp server by yaalalabs, written mainly in Python, with 192 GitHub stars and the Apache-2.0 license. Its code was last updated Nov 1, 2026.
Scan summary: scanned Nov 5, 2026 at commit 25cce1e. Seen able to run dynamic code. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
25cce1e · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit5263 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (149)
- highHigh. Something risky that needs a close look before you install.obfuscation issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.obfuscation issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.obfuscation issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.obfuscation issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
ak-py/src/agentkernel/core/session/serde.py:36 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
ak-py/src/agentkernel/integration/gmail/adapter.py:131 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.aiohttp@3.14.3: 952 known vulnerabilitiesGHSA-2g87-pp6c-29x5, GHSA-494j-54xm-rwp3, GHSA-5wr8-gcqf-gqf3, GHSA-6cjc-53gc-5rqm, GHSA-9xw5-w5jj-pvcg +947 more
ak-py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.black@26.5.1: 133 known vulnerabilitiesGHSA-cg8m-r9f2-5wm2, GHSA-cg8m-r9f2-5wm2, GHSA-cg8m-r9f2-5wm2, GHSA-cg8m-r9f2-5wm2, GHSA-cg8m-r9f2-5wm2 +128 more
ak-py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dnspython@2.8.0: 3 known vulnerabilitiesGHSA-45c3-73f7-pv4m, GHSA-45c3-73f7-pv4m, GHSA-45c3-73f7-pv4m
ak-py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.32.5: 60 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +55 more
ak-py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.litellm@1.89.7: 7 known vulnerabilitiesGHSA-g5ff-637f-6q2m, GHSA-g5ff-637f-6q2m, GHSA-g5ff-637f-6q2m, GHSA-g5ff-637f-6q2m, GHSA-g5ff-637f-6q2m +2 more
ak-py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.28.1: 36 known vulnerabilitiesGHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23, GHSA-5h93-6whr-6q8j +31 more
ak-py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.29.1: 244 known vulnerabilitiesGHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23, GHSA-5h93-6whr-6q8j +239 more
ak-py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.oauthlib@3.3.1: 60 known vulnerabilitiesPYSEC-2026-4113, PYSEC-2026-4114, GHSA-3jp2-3mrg-2vxc, GHSA-7984-qgvg-3j9c, PYSEC-2026-4113 +55 more
ak-py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.4: 76 known vulnerabilitiesGHSA-2qm8-x737-gmw5, GHSA-9m75-vc3g-4x39, GHSA-fm9c-5rcf-2q5p, GHSA-mm57-4v3p-rchx, GHSA-2qm8-x737-gmw5 +71 more
ak-py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pydantic-ai-slim@2.13.0: 54 known vulnerabilitiesPYSEC-2026-4283, PYSEC-2026-4284, PYSEC-2026-4285, PYSEC-2026-4286, PYSEC-2026-4287 +49 more
ak-py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.7.0: 144 known vulnerabilitiesPYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177, PYSEC-2026-4175, PYSEC-2026-4176 +139 more
ak-py/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.6: 1 known vulnerabilityGHSA-27r3-jxmh-p828
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.18: 3 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.compression@1.8.1: 1 known vulnerabilityGHSA-vc2v-76pw-4v95
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.follow-redirects@1.16.0: 3 known vulnerabilitiesGHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.joi@17.13.8: 1 known vulnerabilityGHSA-4528-x5fx-h6hg
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.launch-editor@2.14.1: 3 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 3 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.29.0: 18 known vulnerabilitiesGHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +13 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.webpack-dev-middleware@7.4.5: 1 known vulnerabilityGHSA-g84c-rxfj-3j2c
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.32.2: 84 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +79 more
e2e/app/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.29.4: 495 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +490 more
examples/api/a2a/multi/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2025.9.0: 5 known vulnerabilitiesPYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217
examples/api/a2a/multi/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.litellm@1.89.2: 22 known vulnerabilitiesPYSEC-2026-4066, GHSA-g5ff-637f-6q2m, PYSEC-2026-4066, GHSA-g5ff-637f-6q2m, PYSEC-2026-4066 +17 more
examples/api/a2a/multi/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@8.3.2: 6 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +1 more
examples/api/a2ui-openai/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.32.7: 169 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +164 more
examples/api/a2ui-openai/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2025.10.0: 12 known vulnerabilitiesPYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217 +7 more
examples/api/adk/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.litellm@1.89.6: 26 known vulnerabilitiesPYSEC-2026-4066, GHSA-g5ff-637f-6q2m, PYSEC-2026-4066, GHSA-g5ff-637f-6q2m, PYSEC-2026-4066 +21 more
examples/api/adk/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@8.2.1: 6 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +1 more
examples/api/agui/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 2 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
examples/api/agui/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.32.3: 72 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +67 more
examples/api/agui/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@2.1.1: 32 known vulnerabilitiesGHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23, GHSA-5h93-6whr-6q8j +27 more
examples/api/agui/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@8.3.1: 6 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +1 more
examples/api/hitl/frontend/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@4.0.6: 56 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +51 more
examples/api/hitl/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@4.0.12: 13 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +8 more
examples/api/livekit-voice/google/handoffs/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@4.0.5: 14 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +9 more
examples/api/livekit-voice/google/in_memory/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@4.0.8: 14 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +9 more
examples/api/livekit-voice/google/sqs/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@4.0.3: 126 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +121 more
examples/api/livekit-voice/openai/in_memory/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@4.0.9: 26 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +21 more
examples/api/maf/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2026.2.0: 30 known vulnerabilitiesPYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217 +25 more
examples/api/multimodal/adk/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.29.7: 45 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +40 more
examples/api/multimodal/thread-openai/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2026.4.0: 19 known vulnerabilitiesPYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217 +14 more
examples/api/multimodal/thread-openai/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.32.0: 132 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +127 more
examples/api/pydanticai-streaming/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.29.1: 9 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more
examples/aws-containerized/openai-dynamodb-scalable/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fsspec@2025.7.0: 6 known vulnerabilitiesPYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217, PYSEC-2026-4217 +1 more
examples/aws-serverless/crewai/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pdfminer-six@20250506: 4 known vulnerabilitiesPYSEC-2026-1761, PYSEC-2026-1762, PYSEC-2026-1761, PYSEC-2026-1762
examples/aws-serverless/crewai/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@4.0.1: 28 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +23 more
examples/aws-serverless/openai/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyjwt@2.14.0: 4 known vulnerabilitiesPYSEC-2026-4141, PYSEC-2026-4183, PYSEC-2026-4141, PYSEC-2026-4183
examples/aws-serverless/openai/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@4.0.7: 28 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +23 more
examples/aws-serverless/slack-openai/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.joserfc@1.7.4: 2 known vulnerabilitiesGHSA-9pg5-8c7x-5hfx, GHSA-jpxq-7h8p-2q76
examples/cli/adk_context/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@2.0.0: 4 known vulnerabilitiesGHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23
examples/cli/custom-evaluator/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.31.2: 48 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +43 more
examples/sandbox/basic/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.32.4: 36 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-6627-m3xw-93mp, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9c4x-gm8v-wgc4 +31 more
examples/transport/kafka/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@2.1.0: 8 known vulnerabilitiesGHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23, GHSA-5h93-6whr-6q8j +3 more
examples/transport/kafka/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.litellm@1.89.3: 2 known vulnerabilitiesPYSEC-2026-4066, GHSA-g5ff-637f-6q2m
use-cases/waste-sorting-assistant/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
examples/sandbox/broker-nats/app_test.py:170 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/blog/2026-10-25-agui-agentic-ui.md:136 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/docs/deployment/aws-serverless.md:778 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/versioned_docs/version-0.2.13/deployment/aws-serverless.md:100 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/versioned_docs/version-0.2.12/deployment/aws-serverless.md:100 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/versioned_docs/version-0.2.14/deployment/aws-serverless.md:100 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/versioned_docs/version-0.4.0/deployment/aws-serverless.md:489 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/versioned_docs/version-0.6.0/deployment/aws-serverless.md:665 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/versioned_docs/version-0.5.1/deployment/aws-serverless.md:601 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/versioned_docs/version-0.6.1/deployment/aws-serverless.md:726 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
examples/api/a2ui-openai/README.md:69 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header3 matches in this file
examples/api/agui/README.md:318 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/versioned_docs/version-0.9.0/deployment/aws-serverless.md:783 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/versioned_docs/version-0.8.0/deployment/aws-serverless.md:783 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/versioned_docs/version-0.9.1/deployment/aws-serverless.md:783 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
examples/api/multimodal/thread-openai/README.md:54 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
examples/api/slack/server_test.py:54 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header2 matches in this file
examples/api/thread-openai/README.md:39 - lowLow. Minor, or common in normal tools. Shown for information.fastmcp@3.4.7: 3 known vulnerabilitiesGHSA-7xgj-8392-5q4r, GHSA-7xgj-8392-5q4r, GHSA-7xgj-8392-5q4r
ak-py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.fastmcp-slim@3.4.7: 3 known vulnerabilitiesGHSA-7xgj-8392-5q4r, GHSA-7xgj-8392-5q4r, GHSA-7xgj-8392-5q4r
ak-py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.joserfc@1.7.5: 7 known vulnerabilitiesGHSA-9pg5-8c7x-5hfx, GHSA-9pg5-8c7x-5hfx, GHSA-9pg5-8c7x-5hfx, GHSA-9pg5-8c7x-5hfx, GHSA-9pg5-8c7x-5hfx +2 more
ak-py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langgraph@1.2.11: 8 known vulnerabilitiesGHSA-3fx2-cqw9-xr3c, GHSA-3fx2-cqw9-xr3c, GHSA-3fx2-cqw9-xr3c, GHSA-3fx2-cqw9-xr3c, GHSA-3fx2-cqw9-xr3c +3 more
ak-py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langgraph-sdk@0.4.4: 8 known vulnerabilitiesGHSA-3fx2-cqw9-xr3c, GHSA-3fx2-cqw9-xr3c, GHSA-3fx2-cqw9-xr3c, GHSA-3fx2-cqw9-xr3c, GHSA-3fx2-cqw9-xr3c +3 more
ak-py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.multidict@6.7.1: 74 known vulnerabilitiesPYSEC-2026-4244, PYSEC-2026-4244, PYSEC-2026-4244, PYSEC-2026-4244, PYSEC-2026-4244 +69 more
ak-py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.42.1: 20 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h +15 more
ak-py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.setuptools@84.0.0: 126 known vulnerabilitiesGHSA-xmj3-9gf7-h52w, GHSA-xmj3-9gf7-h52w, GHSA-xmj3-9gf7-h52w, GHSA-xmj3-9gf7-h52w, GHSA-xmj3-9gf7-h52w +121 more
ak-py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.werkzeug@3.1.8: 4 known vulnerabilitiesPYSEC-2026-4312, PYSEC-2026-4312, PYSEC-2026-4312, PYSEC-2026-4312
ak-py/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 1 known vulnerabilityGHSA-gcqx-w48m-w2h4
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.fast-uri@3.1.8: 4 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.47: 1 known vulnerabilityGHSA-238p-pmpm-9mq7
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.4: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@7.1.4: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.16.0: 1 known vulnerabilityGHSA-6pq8-jhm2-2vcw
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.serialize-javascript@7.0.7: 1 known vulnerabilityGHSA-m5mm-p8h7-m29v
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.44.0: 54 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h +49 more
e2e/app/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.45.0: 8 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h +3 more
examples/api/a2ui-openai/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.multidict@6.7.0: 12 known vulnerabilitiesPYSEC-2026-4244, PYSEC-2026-4244, PYSEC-2026-4244, PYSEC-2026-4244, PYSEC-2026-4244 +7 more
examples/api/adk/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.39.0: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
examples/api/gmail/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langgraph@1.2.12: 2 known vulnerabilitiesGHSA-3fx2-cqw9-xr3c, GHSA-3fx2-cqw9-xr3c
examples/api/hitl/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.langgraph-sdk@0.4.5: 2 known vulnerabilitiesGHSA-3fx2-cqw9-xr3c, GHSA-3fx2-cqw9-xr3c
examples/api/hitl/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.38.0: 16 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h +11 more
examples/api/hooks/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.39.1: 3 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h
examples/api/multimodal/dynamodb/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.40.0: 4 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h
examples/api/multimodal/openai/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.43.0: 6 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h +1 more
examples/api/multimodal/thread-openai/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.41.0: 7 known vulnerabilitiesGHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h +2 more
examples/api/teams/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.multidict@6.9.0: 1 known vulnerabilityPYSEC-2026-4244
examples/aws-serverless/openai/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.41.1: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
examples/aws-serverless/websocket-openai/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.opentelemetry-api@1.42.0: 1 known vulnerabilityGHSA-xcq7-p3pf-p88h
examples/gcp-serverless/openai-firestore/uv.lock - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Agent Kernel alternatives
View more →Similar mcp servers in Deployment & DevOps, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Agent Kernel (this page) yaalalabs | 192 | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| OpenMetadata open-metadata | 16k | Apache-2.0 | Nov 1, 2026 | Scanned, see report |
| Drawio Skill Agents365-ai | 10k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Openstatus openstatusHQ | 9.2k | AGPL-3.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Ghidra MCP bethington | 6k | Apache-2.0 | Oct 31, 2026 | Scanned, no flagged issues |
| Kubefwd txn2 | 4.2k | Apache-2.0 | Oct 27, 2026 | Scanned, no flagged issues |