Anythingmcp MCP Server

by HelpCode-ai• 767•• Scanned•Claim this listing•Request removal
E-commerceagentsai agentsai gatewayapi gatewaychatgpt

MCP gateway for AI agents: turn any REST/OpenAPI, GraphQL, SOAP or SQL API into MCP tools. 680 ready-made connectors (SAP, ERP, e-commerce) with RBAC, SSO, audit logs and a knowledge graph.

Anythingmcp is an open-source mcp server by HelpCode-ai, written mainly in TypeScript, with 767 GitHub stars and the AGPL-3.0 license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 5, 2026 at commit 2c87b7e. Seen able to read environment and secrets, connect to the internet. Scan policy

Scanned
Full scan at 2c87b7e · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit13 known vulnerabilitieswarn
Manifestserver.jsonpass
Buildfail
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (179)

  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/common/ssrf.util.ts:357
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/connectors/engines/unblocker-proxy-agent.ts:8
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/connectors/engines/unblocker-proxy-agent.ts:10
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/connectors/engines/unblocker-proxy-agent.ts:17
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/connectors/engines/unblocker-proxy-agent.ts:27
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/connectors/engines/unblocker-proxy-agent.ts:38
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/connectors/engines/unblocker-proxy-agent.ts:40
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/ee/file-search/sources/ftp.driver.ts:83
  • medium
    Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/ee/file-search/sources/s3.driver.ts:29
  • medium
    @azure/msal-node@5.2.0: 1 known vulnerability
    GHSA-xcx6-jx8p-x3h5
    package-lock.json
  • medium
    Install or build failed in a clean environment
    ment variable: DATABASE_URL. npm error Lifecycle script `build` failed with error: npm error code 1 npm error path /w/packages/backend npm error workspace @anythingmcp/backend@0.52.2 npm error location /w/packages/backend npm error command failed npm error command sh -c prisma generate && nest build
  • medium
    Install contacted hosts other than package registries
    binaries.prisma.sh, scarf.sh
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/adapters/adapters.service.spec.ts:168
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/adapters/adapters.service.spec.ts:169
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/adapters/adapters.service.spec.ts:495
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/adapters/cloud-managed-env.spec.ts:34
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/adapters/cloud-managed-env.spec.ts:47
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/adapters/intl/grafana.live.spec.ts:283
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/adapters/intl/onec-enterprise.live.spec.ts:150
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/adapters/intl/telegram-bot.live.spec.ts:28
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/adapters/intl/telegram-bot.live.spec.ts:85
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/adapters/intl/telegram-bot.live.spec.ts:234
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/adapters/intl/wazuh.live.spec.ts:35
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/alerts/alerts.service.spec.ts:269
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/common/log-safe-url.util.spec.ts:8
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/common/log-safe-url.util.spec.ts:9
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/common/outbound-http.spec.ts:98
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/common/secret-literals.util.spec.ts:35
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/common/secret-literals.util.spec.ts:46
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/common/secret-literals.util.spec.ts:103
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/common/secret-literals.util.spec.ts:202
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/common/ssrf.util.spec.ts:50
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/common/ssrf.util.spec.ts:70
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/connectors/base-url.util.spec.ts:118
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/connectors/engines/database.engine.hana.spec.ts:331
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/engines/rest.engine.log-redaction.spec.ts:60
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/engines/rest.engine.log-redaction.spec.ts:67
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/connectors/engines/unblocker-proxy-agent.spec.ts:6
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/connectors/engines/unblocker-proxy-agent.spec.ts:11
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    packages/backend/src/connectors/engines/unblocker-proxy-agent.spec.ts:20
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-extraction.util.spec.ts:33
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-extraction.util.spec.ts:34
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-extraction.util.spec.ts:208
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-extraction.util.spec.ts:218
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-extraction.util.spec.ts:224
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:95
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:99
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:142
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:147
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:156
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:160
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:162
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:180
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:299
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:332
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:333
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:346
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:348
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:503
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:504
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:522
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:535
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:540
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:566
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:598
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:609
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:622
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:623
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:625
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-guard.flows.spec.ts:626
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-literal-repair.integration.spec.ts:83
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-literal-repair.integration.spec.ts:84
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-literal-repair.integration.spec.ts:116
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-literal-repair.integration.spec.ts:178
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-literal-repair.integration.spec.ts:179
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-literal-scan.util.spec.ts:32
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-literal-scan.util.spec.ts:33
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-literal-scan.util.spec.ts:68
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-literal-scan.util.spec.ts:69
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-literal-scan.util.spec.ts:75
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/backend/src/connectors/secret-literal-scan.util.spec.ts:78
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/backend/src/ee/file-search/sources/sources.spec.ts:58
  • low
    Possible example credential in docs/tests: generic-api-key
    docs/api-reference.md:60
  • low
    Possible example credential in docs/tests: curl-auth-user
    2 matches in this file
    docs/operations/card-trial-offer.md:122
  • low
    Possible example credential in docs/tests: etsy-access-token
    3 matches in this file
    packages/backend/src/adapters/app-approval-watcher.service.spec.ts:35
  • low
    Possible example credential in docs/tests: etsy-access-token
    2 matches in this file
    packages/backend/src/adapters/connector-setup.service.spec.ts:97
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/de/billbee.live.spec.ts:137
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/de/dhl-parcel-de.live.spec.ts:76
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/de/getmyinvoices.live.spec.ts:114
  • low
    Possible example credential in docs/tests: generic-api-key
    llms-full.txt:7107
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/de/immobilienscout24.live.spec.ts:31
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/env-var-meta.spec.ts:9
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/aircall.live.spec.ts:357
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    packages/backend/src/adapters/env-var-checks.spec.ts:24
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/appstle-subscriptions.live.spec.ts:81
  • low
    Possible example credential in docs/tests: etsy-access-token
    packages/backend/src/adapters/adapters.service.spec.ts:634
  • low
    Possible example credential in docs/tests: generic-api-key
    6 matches in this file
    packages/backend/src/adapters/adapters.service.spec.ts:237
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/backend/src/adapters/intl/affinity.live.spec.ts:375
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/bzzoiro.live.spec.ts:106
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/bubble.live.spec.ts:77
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/chit-chats.live.spec.ts:106
  • low
    Possible example credential in docs/tests: etsy-access-token
    packages/backend/src/adapters/intl/etsy.live.spec.ts:174
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/factorial-hr.live.spec.ts:95
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/backend/src/adapters/intl/everhour.live.spec.ts:154
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/figma.live.spec.ts:15
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/glide.live.spec.ts:72
  • low
    Possible example credential in docs/tests: gitlab-pat
    3 matches in this file
    packages/backend/src/adapters/intl/gitlab.live.spec.ts:96
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/backend/src/adapters/intl/gumroad.live.spec.ts:229
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/backend/src/adapters/intl/launchdarkly.live.spec.ts:80
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/jotform.live.spec.ts:87
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/backend/src/adapters/intl/jisr.live.spec.ts:126
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/lokalise.live.spec.ts:70
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/backend/src/adapters/intl/korea-investment.live.spec.ts:128
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/motive.live.spec.ts:112
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/make.live.spec.ts:74
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/noon-payments.live.spec.ts:103
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/openalex.live.spec.ts:73
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/pinecone.live.spec.ts:151
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/backend/src/adapters/intl/ozon.live.spec.ts:92
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/rocketreach.live.spec.ts:134
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/segment.live.spec.ts:135
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/sportsapipro.live.spec.ts:107
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/softr.live.spec.ts:75
  • low
    Possible example credential in docs/tests: stripe-access-token
    packages/backend/src/adapters/intl/workos.live.spec.ts:71
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/intl/wati.live.spec.ts:166
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    packages/backend/src/adapters/intl/whop.live.spec.ts:207
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/adapters/mcp-adapter.spec.ts:284
  • low
    Possible example credential in docs/tests: stripe-access-token
    packages/backend/src/audit/product-event.spec.ts:22
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/backend/src/adapters/tiktok-shop-install.controller.spec.ts:150
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/common/email-link-token.spec.ts:10
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/connectors/engines/bearer-token-renewal.service.spec.ts:14
  • low
    Possible example credential in docs/tests: generic-api-key
    5 matches in this file
    packages/backend/src/connectors/engines/oauth1-signer.spec.ts:25
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/connectors/connector-setup-status.util.spec.ts:266
  • low
    Possible example credential in docs/tests: private-key
    packages/backend/src/connectors/engines/client-assertion.util.spec.ts:145
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/backend/src/common/secret-literals.util.spec.ts:156
  • low
    Possible example credential in docs/tests: private-key
    packages/backend/src/connectors/oauth-authorize-settings.spec.ts:183
  • low
    Possible example credential in docs/tests: stripe-access-token
    packages/backend/src/connectors/parsers/har.parser.spec.ts:154
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/connectors/engines/rest.engine.shopee.spec.ts:22
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/connectors/engines/tiktok-shop-token.service.spec.ts:32
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/backend/src/connectors/tiktok-shop-auth.controller.spec.ts:37
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/connectors/engines/login-token.service.spec.ts:944
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/connectors/engines/rest.engine.tiktok-shop.spec.ts:31
  • low
    Possible example credential in docs/tests: generic-api-key
    4 matches in this file
    packages/backend/src/connectors/secret-extraction.util.spec.ts:61
  • low
    Possible example credential in docs/tests: generic-api-key
    3 matches in this file
    packages/backend/src/connectors/secret-guard.flows.spec.ts:118
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/connectors/engines/shopee-token.service.spec.ts:23
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/license/trial-extension.controller.spec.ts:12
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/connectors/connectors.controller.spec.ts:849
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/backend/src/memory/memory.service.spec.ts:159
  • low
    Possible example credential in docs/tests: aws-access-token
    packages/backend/src/memory/memory.service.spec.ts:61
  • low
    Possible example credential in docs/tests: stripe-access-token
    packages/backend/src/mcp-server/dynamic-mcp-tools.spec.ts:995
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/frontend/tests/e2e/auth.spec.ts:58
  • low
    Possible example credential in docs/tests: etsy-access-token
    2 matches in this file
    packages/frontend/tests/e2e/connector-setup-guide.spec.ts:210
  • low
    Possible example credential in docs/tests: etsy-access-token
    3 matches in this file
    packages/frontend/tests/e2e/connector-guided-setup.spec.ts:145
  • low
    @hono/node-server@1.19.17: 1 known vulnerability
    GHSA-rmxm-3fg6-px4f
    package-lock.json
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    package-lock.json
  • low
    fast-copy@4.0.3: 1 known vulnerability
    GHSA-jggr-w7fw-pc2j
    package-lock.json
  • low
    glob@10.5.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    package-lock.json
  • low
    glob@13.0.6: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    package-lock.json
  • low
    js-yaml@5.3.0: 1 known vulnerability
    GHSA-r3ph-w7gj-g6xm
    package-lock.json
  • low
    minimatch@10.2.5: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    package-lock.json
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    package-lock.json
  • low
    minimatch@9.0.9: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    package-lock.json
  • low
    nodemailer@10.1.1: 3 known vulnerabilities
    GHSA-85x2-q946-cp5h, GHSA-8c8m-p3m8-cjg8, GHSA-m943-m63m-w62w
    package-lock.json
  • low
    Reads environment variables not listed in the manifest
    HOST, EXTRACTOR_TOKEN, EXTRACTOR_TMPDIR, TMPDIR, DATABASE_URL, ENCRYPTION_KEY, ENTRA_SSO_ORG_ID, ENTRA_SSO_NAME, ENTRA_SSO_CLIENT_ID, ENTRA_SSO_CLIENT_SECRET, ENTRA_SSO_CLIENT_SECRET_EXPIRY_DATE, ENTRA_SSO_TENANT_ID, ENTRA_SSO_JIT, SMTP_HOST, SMTP_PORT

Network activity

During install
binaries.prisma.shgithub.comnodejs.orgregistry.npmjs.orgrelease-assets.githubusercontent.comscarf.sh
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Anythingmcp alternatives

View more →

Similar mcp servers in E-commerce, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Anythingmcp (this page)
HelpCode-ai
767AGPL-3.0Nov 1, 2026Scanned, no flagged issues
Clipforge
xixihhhh
1.2kAGPL-3.0Oct 26, 2026Scanned, no flagged issues
Innoshop
innocommerce
667None foundOct 26, 2026Not scanned yet
Codflow
bighadj22
397Apache-2.0Oct 26, 2026Scanned, no flagged issues
Shopify MCP
GeLi2001
239MITApr 5, 2026Scanned, no flagged issues
Woocommerce MCP Server
techspawn
104MITNov 10, 2025Scanned, no flagged issues