AgentDock MCP Server by AgentDock

by AgentDock• 1.8k•• Scanned•Claim this listing•Request removal
Developer Toolsagent skillsai agentsllmmcpprompt library

Framework retired. Prompts and document generators moved to AgentDock/prompt-library, the book to AgentDock/ai-agents-book. See the pinned issue.

AgentDock is an open-source mcp server by AgentDock, written mainly in MDX, with 1,772 GitHub stars and the MIT license. Its code was last updated Jul 14, 2026.

Scan summary: scanned Nov 5, 2026 at commit 4d9eb73. Seen able to run shell commands, connect to the internet. Scan policy

Scanned
Full scan at 4d9eb73 · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanpass
Dependency audit419 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshakefail
Network egressfail
Reproducible (×3)n/a

Findings (98)

  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    agentdock-core/src/config/index.ts:187
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    agentdock-core/src/config/index.ts:204
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    agentdock-core/src/config/presets/production.ts:96
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    agentdock-core/src/config/presets/production.ts:127
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    agentdock-core/src/config/presets/production.ts:390
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/git-hooks-validate.ts:12
  • medium
    brace-expansion@1.1.12: 14 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +9 more
    agentdock-core/pnpm-lock.yaml
  • medium
    brace-expansion@2.0.2: 14 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +9 more
    agentdock-core/pnpm-lock.yaml
  • medium
    browserslist@4.25.1: 4 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    agentdock-core/pnpm-lock.yaml
  • medium
    glob@10.4.5: 4 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2, GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
    agentdock-core/pnpm-lock.yaml
  • medium
    js-yaml@3.14.1: 10 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
    agentdock-core/pnpm-lock.yaml
  • medium
    jsondiffpatch@0.6.0: 4 known vulnerabilities
    GHSA-33vc-wfww-vjfv, GHSA-j4fx-xxwh-2485, GHSA-33vc-wfww-vjfv, GHSA-j4fx-xxwh-2485
    agentdock-core/pnpm-lock.yaml
  • medium
    minimatch@3.1.2: 6 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
    agentdock-core/pnpm-lock.yaml
  • medium
    minimatch@5.1.6: 6 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
    agentdock-core/pnpm-lock.yaml
  • medium
    minimatch@9.0.5: 8 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
    agentdock-core/pnpm-lock.yaml
  • medium
    nanoid@3.3.11: 6 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +1 more
    agentdock-core/pnpm-lock.yaml
  • medium
    picomatch@2.3.1: 4 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    agentdock-core/pnpm-lock.yaml
  • medium
    picomatch@4.0.2: 4 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    agentdock-core/pnpm-lock.yaml
  • medium
    rollup@4.44.1: 1 known vulnerability
    GHSA-mw96-cpmx-2vgc
    agentdock-core/pnpm-lock.yaml
  • medium
    sharp@0.32.6: 6 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w, GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c +1 more
    agentdock-core/pnpm-lock.yaml
  • medium
    tar-fs@2.1.3: 2 known vulnerabilities
    GHSA-vj76-c3g6-qr5v, GHSA-vj76-c3g6-qr5v
    agentdock-core/pnpm-lock.yaml
  • medium
    tar-fs@3.1.0: 2 known vulnerabilities
    GHSA-vj76-c3g6-qr5v, GHSA-vj76-c3g6-qr5v
    agentdock-core/pnpm-lock.yaml
  • medium
    uuid@9.0.1: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    agentdock-core/pnpm-lock.yaml
  • medium
    zod@3.25.67: 2 known vulnerabilities
    GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
    agentdock-core/pnpm-lock.yaml
  • medium
    @babel/plugin-transform-modules-systemjs@7.27.1: 1 known vulnerability
    GHSA-fv7c-fp4j-7gwp
    pnpm-lock.yaml
  • medium
    @modelcontextprotocol/sdk@1.13.2: 8 known vulnerabilities
    GHSA-345p-7cg4-v4c7, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-8r9q-7v3j-jr4g +3 more
    pnpm-lock.yaml
  • medium
    @xmldom/xmldom@0.9.8: 17 known vulnerabilities
    GHSA-27p8-2357-5qqv, GHSA-2v35-w6hq-6mfw, GHSA-3px3-54cx-rmw9, GHSA-4w3w-2rp5-g8jm, GHSA-6gmq-8vp8-gcm6 +12 more
    pnpm-lock.yaml
  • medium
    axios@1.10.0: 32 known vulnerabilities
    GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +27 more
    pnpm-lock.yaml
  • medium
    body-parser@2.2.0: 3 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-wqch-xfxh-vrr4
    pnpm-lock.yaml
  • medium
    dompurify@3.2.6: 22 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +17 more
    pnpm-lock.yaml
  • medium
    fast-uri@3.0.6: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    pnpm-lock.yaml
  • medium
    fflate@0.4.8: 1 known vulnerability
    GHSA-px8p-9vwx-vf98
    pnpm-lock.yaml
  • medium
    flatted@3.3.3: 2 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    pnpm-lock.yaml
  • medium
    jpeg-js@0.1.2: 2 known vulnerabilities
    GHSA-w7q9-p3jq-fmhm, GHSA-xvf7-4v9q-58w6
    pnpm-lock.yaml
  • medium
    jpeg-js@0.2.0: 2 known vulnerabilities
    GHSA-w7q9-p3jq-fmhm, GHSA-xvf7-4v9q-58w6
    pnpm-lock.yaml
  • medium
    js-yaml@4.1.0: 5 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
    pnpm-lock.yaml
  • medium
    lodash@4.17.21: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    pnpm-lock.yaml
  • medium
    lodash-es@4.17.21: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    pnpm-lock.yaml
  • medium
    minimatch@7.4.6: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • medium
    nanoid@5.1.5: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    pnpm-lock.yaml
  • medium
    path-to-regexp@6.1.0: 1 known vulnerability
    GHSA-9wv6-86v2-598j
    pnpm-lock.yaml
  • medium
    path-to-regexp@8.2.0: 2 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    pnpm-lock.yaml
  • medium
    postcss@8.4.31: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    pnpm-lock.yaml
  • medium
    postcss@8.5.6: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    pnpm-lock.yaml
  • medium
    preact@10.26.9: 1 known vulnerability
    GHSA-36hm-qxxp-pg3m
    pnpm-lock.yaml
  • medium
    react-server-dom-webpack@19.0.2: 5 known vulnerabilities
    GHSA-479c-33wc-g2pg, GHSA-7gmr-mq3h-m5h9, GHSA-83fc-fqcc-2hmg, GHSA-rv78-f8rc-xrxh, GHSA-wx67-qw84-cm4g
    pnpm-lock.yaml
  • medium
    serialize-javascript@6.0.2: 3 known vulnerabilities
    GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v
    pnpm-lock.yaml
  • medium
    sharp@0.34.2: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    pnpm-lock.yaml
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    pnpm-lock.yaml
  • medium
    undici@7.11.0: 28 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52 +23 more
    pnpm-lock.yaml
  • medium
    url-regex@3.2.0: 1 known vulnerability
    GHSA-v4rh-8p82-6h5w
    pnpm-lock.yaml
  • medium
    uuid@11.1.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    uuid@3.4.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    ws@8.18.3: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    pnpm-lock.yaml
  • medium
    Install contacted hosts other than package registries
    fonts.googleapis.com, fonts.gstatic.com, telemetry.nextjs.org
  • medium
    MCP server didn't complete the protocol handshake
    timed out waiting for the server
  • low
    @ai-sdk/provider-utils@2.2.0: 2 known vulnerabilities
    GHSA-866g-f22w-33x8, GHSA-866g-f22w-33x8
    agentdock-core/pnpm-lock.yaml
  • low
    @ai-sdk/provider-utils@2.2.8: 2 known vulnerabilities
    GHSA-866g-f22w-33x8, GHSA-866g-f22w-33x8
    agentdock-core/pnpm-lock.yaml
  • low
    @babel/core@7.27.7: 2 known vulnerabilities
    GHSA-4x5r-pxfx-6jf8, GHSA-4x5r-pxfx-6jf8
    agentdock-core/pnpm-lock.yaml
  • low
    @protobufjs/utf8@1.1.0: 2 known vulnerabilities
    GHSA-q6x5-8v7m-xcrf, GHSA-q6x5-8v7m-xcrf
    agentdock-core/pnpm-lock.yaml
  • low
    @smithy/config-resolver@4.1.4: 1 known vulnerability
    GHSA-6475-r3vj-m8vf
    agentdock-core/pnpm-lock.yaml
  • low
    ai@4.2.0: 2 known vulnerabilities
    GHSA-rwvc-j5jr-mgvh, GHSA-rwvc-j5jr-mgvh
    agentdock-core/pnpm-lock.yaml
  • low
    deepmerge@4.3.1: 2 known vulnerabilities
    GHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4
    agentdock-core/pnpm-lock.yaml
  • low
    @eslint/plugin-kit@0.3.3: 1 known vulnerability
    GHSA-xffm-g5w8-qvg7
    pnpm-lock.yaml
  • low
    @humanfs/node@0.16.6: 1 known vulnerability
    GHSA-p498-v437-472g
    pnpm-lock.yaml
  • low
    @tootallnate/once@2.0.0: 1 known vulnerability
    GHSA-vpq2-c234-7xj6
    pnpm-lock.yaml
  • low
    ajv@6.12.6: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    pnpm-lock.yaml
  • low
    ajv@8.17.1: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    pnpm-lock.yaml
  • low
    ajv@8.6.3: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    pnpm-lock.yaml
  • low
    diff@4.0.2: 1 known vulnerability
    GHSA-73rr-hh4g-fpgx
    pnpm-lock.yaml
  • low
    diff@5.2.0: 1 known vulnerability
    GHSA-73rr-hh4g-fpgx
    pnpm-lock.yaml
  • low
    follow-redirects@1.15.9: 1 known vulnerability
    GHSA-r4q5-vmmm-2653
    pnpm-lock.yaml
  • low
    katex@0.16.22: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    pnpm-lock.yaml
  • low
    mdast-util-to-hast@13.2.0: 1 known vulnerability
    GHSA-4fh9-h7wg-q85m
    pnpm-lock.yaml
  • low
    mermaid@11.7.0: 11 known vulnerabilities
    GHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6m6c-36f7-fhxh, GHSA-6x64-9x62-f2gx, GHSA-7rqq-prvp-x9jh +6 more
    pnpm-lock.yaml
  • low
    min-document@2.19.0: 1 known vulnerability
    GHSA-rx8g-88g5-qh64
    pnpm-lock.yaml
  • low
    postcss-selector-parser@6.0.10: 1 known vulnerability
    GHSA-rj75-hqrm-r3gf
    pnpm-lock.yaml
  • low
    postcss-selector-parser@6.1.2: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    pnpm-lock.yaml
  • low
    qs@6.14.0: 5 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
    pnpm-lock.yaml
  • low
    qs@6.5.3: 2 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6rw7-vpxm-498p
    pnpm-lock.yaml
  • low
    request@2.88.2: 1 known vulnerability
    GHSA-p8p7-x288-28g6
    pnpm-lock.yaml
  • low
    tough-cookie@2.5.0: 1 known vulnerability
    GHSA-72xf-g2v4-qvf3
    pnpm-lock.yaml
  • low
    webpack@5.99.9: 2 known vulnerabilities
    GHSA-38r7-794h-5758, GHSA-8fgc-7cc6-rx7x
    pnpm-lock.yaml
  • low
    yaml@1.10.2: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    pnpm-lock.yaml
  • low
    yaml@2.8.0: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    pnpm-lock.yaml
  • low
    package.json has a postinstall script
    pnpm run install:agentdock-core && tsx --no-deprecation scripts/generate-llms-from-docs.ts
    package.json
  • low
    package.json has a prepare script
    husky
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)
  • low
    Contacted these domains while starting up (no manifest to compare against)
    registry.npmjs.org

Network activity

During install
fonts.googleapis.comfonts.gstatic.comgithub.comregistry.npmjs.orgrelease-assets.githubusercontent.comtelemetry.nextjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

AgentDock alternatives

View more →

Similar mcp servers in Developer Tools, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
AgentDock (this page)
AgentDock
1.8kMITJul 14, 2026Scanned, no flagged issues
MCP Use
mcp-use
11kMITOct 30, 2026Scanned, no flagged issues
MobileBuildMCP
getsentry
6.5kMITNov 1, 2026Scanned, no flagged issues
Gemini Notebook MCP CLI
jacob-bd
6.4kMITOct 27, 2026Scanned, no flagged issues
Mcporter
openclaw
5.1kMITOct 27, 2026Scanned, no flagged issues
Flint Chart
microsoft
4.5kMITNov 1, 2026Scanned, no flagged issues