Better Chatbot MCP Server

by keinsaasforever• 1.2k•• Scanned•Claim this listing•Request removal
Productivity & Workflowagentaiai chatbotautomationchatbot

Formerly Better Chatbot. Navigator is an open-source AI workspace for agents, MCP and workflow automation.

Better Chatbot is an open-source mcp server by keinsaasforever, written mainly in TypeScript, with 1,193 GitHub stars and the MIT license. Its code was last updated Oct 29, 2026.

Scan summary: scanned Nov 5, 2026 at commit 989dc36. Seen able to run dynamic code, connect to the internet. Scan policy

Scanned
Full scan at 989dc36 · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanpass
Dependency audit390 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (92)

  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    nanoid@3.3.16: 1 known vulnerability
    GHSA-2v37-7h3g-55p8
    e2b/template/package-lock.json
  • medium
    sharp@0.35.3: 2 known vulnerabilities
    GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    e2b/template/package-lock.json
  • medium
    source-map-js@1.2.1: 2 known vulnerabilities
    GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
    e2b/template/package-lock.json
  • medium
    @grpc/grpc-js@1.14.3: 4 known vulnerabilities
    GHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
    pnpm-lock.yaml
  • medium
    @modelcontextprotocol/sdk@1.0.1: 2 known vulnerabilities
    GHSA-6prh-2h8m-c8cw, GHSA-w48q-cv73-mx4w
    pnpm-lock.yaml
  • medium
    @modelcontextprotocol/sdk@1.27.1: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    pnpm-lock.yaml
  • medium
    @modelcontextprotocol/server-filesystem@0.6.2: 2 known vulnerabilities
    GHSA-hc55-p739-j48w, GHSA-q66q-fx2p-7w4m
    pnpm-lock.yaml
  • medium
    @opentelemetry/auto-instrumentations-node@0.74.0: 1 known vulnerability
    GHSA-q7rr-3cgh-j5r3
    pnpm-lock.yaml
  • medium
    @opentelemetry/exporter-prometheus@0.216.0: 1 known vulnerability
    GHSA-q7rr-3cgh-j5r3
    pnpm-lock.yaml
  • medium
    @opentelemetry/propagator-jaeger@2.7.1: 1 known vulnerability
    GHSA-45rx-2jwx-cxfr
    pnpm-lock.yaml
  • medium
    @opentelemetry/sdk-node@0.216.0: 1 known vulnerability
    GHSA-q7rr-3cgh-j5r3
    pnpm-lock.yaml
  • medium
    @xmldom/xmldom@0.8.13: 10 known vulnerabilities
    GHSA-27p8-2357-5qqv, GHSA-4w3w-2rp5-g8jm, GHSA-6gmq-8vp8-gcm6, GHSA-6h8r-xr42-gp59, GHSA-8344-3jmq-59r6 +5 more
    pnpm-lock.yaml
  • medium
    axios@1.13.6: 34 known vulnerabilities
    GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3pq3-5fj3-cg6v, GHSA-3w6x-2g7m-8v23 +29 more
    pnpm-lock.yaml
  • medium
    body-parser@2.2.1: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    pnpm-lock.yaml
  • medium
    brace-expansion@1.1.12: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    pnpm-lock.yaml
  • medium
    electron@35.7.5: 45 known vulnerabilities
    GHSA-2p8c-gr87-2676, GHSA-3c8v-cfp5-9885, GHSA-3qxv-5xgr-q7w9, GHSA-4f78-qhmw-8j8m, GHSA-4p4r-m79c-wq3v +40 more
    pnpm-lock.yaml
  • medium
    extract-zip@2.0.1: 2 known vulnerabilities
    GHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv
    pnpm-lock.yaml
  • medium
    fast-uri@3.1.0: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    pnpm-lock.yaml
  • medium
    fast-xml-builder@1.1.4: 1 known vulnerability
    GHSA-5wm8-gmm8-39j9
    pnpm-lock.yaml
  • medium
    form-data@4.0.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    pnpm-lock.yaml
  • medium
    hono@4.12.12: 27 known vulnerabilities
    GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7 +22 more
    pnpm-lock.yaml
  • medium
    ip-address@10.1.0: 6 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
    pnpm-lock.yaml
  • medium
    joi@18.2.3: 5 known vulnerabilities
    GHSA-4528-x5fx-h6hg, GHSA-6h2x-m376-mqjq, GHSA-6w3j-5fw6-r9vr, GHSA-gg4h-3hg2-grpc, GHSA-wr44-6hxh-3jwq
    pnpm-lock.yaml
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    pnpm-lock.yaml
  • medium
    kysely@0.28.15: 1 known vulnerability
    GHSA-pv5w-4p9q-p3v2
    pnpm-lock.yaml
  • medium
    linkify-it@5.0.0: 2 known vulnerabilities
    GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
    pnpm-lock.yaml
  • medium
    markdown-it@14.1.0: 6 known vulnerabilities
    GHSA-253c-mchw-3w2r, GHSA-38c4-r59v-3vqw, GHSA-6v5v-wf23-fmfq, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7 +1 more
    pnpm-lock.yaml
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    pnpm-lock.yaml
  • medium
    nanoid@5.1.6: 2 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-xwg4-73v4-xw9w
    pnpm-lock.yaml
  • medium
    nodemailer@6.10.1: 22 known vulnerabilities
    GHSA-268h-hp4c-crq3, GHSA-2x7j-588g-ccc2, GHSA-39m8-27wv-hr27, GHSA-4ffr-jq9g-5ffx, GHSA-4g23-2xm8-66gc +17 more
    pnpm-lock.yaml
  • medium
    postcss@8.4.31: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    pnpm-lock.yaml
  • medium
    postcss@8.5.6: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    pnpm-lock.yaml
  • medium
    prosemirror-view@1.41.2: 1 known vulnerability
    GHSA-c8x8-7fp4-3x9w
    pnpm-lock.yaml
  • medium
    protobufjs@7.5.6: 4 known vulnerabilities
    GHSA-f38q-mgvj-vph7, GHSA-j3f2-48v5-ccww, GHSA-jggg-4jg4-v7c6, GHSA-wcpc-wj8m-hjx6
    pnpm-lock.yaml
  • medium
    protobufjs@8.0.1: 11 known vulnerabilities
    GHSA-2pr8-phx7-x9h3, GHSA-66ff-xgx4-vchm, GHSA-685m-2w69-288q, GHSA-75px-5xx7-5xc7, GHSA-f38q-mgvj-vph7 +6 more
    pnpm-lock.yaml
  • medium
    sharp@0.34.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    pnpm-lock.yaml
  • medium
    tmp@0.2.5: 1 known vulnerability
    GHSA-ph9p-34f9-6g65
    pnpm-lock.yaml
  • medium
    undici@6.24.1: 14 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-35p6-xmwp-9g52, GHSA-4qv8-2p9j-2685, GHSA-8xcm-r25x-g524, GHSA-9fm3-97px-rjf6 +9 more
    pnpm-lock.yaml
  • medium
    uuid@11.1.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    uuid@9.0.1: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    vite@7.3.2: 7 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff, GHSA-r825-w8mm-5pxw +2 more
    pnpm-lock.yaml
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    zod@4.3.6: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    Install or build failed in a clean environment
    with exit code 134. web#build: ERROR command (/w/apps/web) /tmp/home/bin/pnpm run build exited (134) Tasks: 0 successful, 1 total Cached: 0 cached, 1 total Time: 1m43.247s Failed: web#build ERROR run failed: command exited (134)  ELIFECYCLE  Command failed with exit code 134.
  • medium
    Install contacted hosts other than package registries
    fonts.googleapis.com, fonts.gstatic.com, telemetry.nextjs.org, telemetry.vercel.com
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    apps/web/src/lib/theme/theme-style-bootstrap.test.ts:8
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/web/src/lib/cockpit/connections.test.ts:75
  • low
    @ai-sdk/provider-utils@5.0.0-canary.48: 1 known vulnerability
    GHSA-866g-f22w-33x8
    pnpm-lock.yaml
  • low
    @hono/node-server@1.19.13: 2 known vulnerabilities
    GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f
    pnpm-lock.yaml
  • low
    @humanfs/node@0.16.7: 1 known vulnerability
    GHSA-p498-v437-472g
    pnpm-lock.yaml
  • low
    @opentelemetry/core@2.7.1: 1 known vulnerability
    GHSA-8988-4f7v-96qf
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-cassandra-driver@0.61.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-knex@0.60.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-mongoose@0.62.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-mysql@0.62.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-mysql2@0.62.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-oracledb@0.41.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-pg@0.68.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-tedious@0.35.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @smithy/config-resolver@4.3.0: 1 known vulnerability
    GHSA-6475-r3vj-m8vf
    pnpm-lock.yaml
  • low
    @tiptap/core@2.26.2: 1 known vulnerability
    GHSA-cp6q-959q-f8rh
    pnpm-lock.yaml
  • low
    @vitest/mocker@3.2.4: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    pnpm-lock.yaml
  • low
    ajv@6.12.6: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    pnpm-lock.yaml
  • low
    ajv@8.17.1: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    pnpm-lock.yaml
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    pnpm-lock.yaml
  • low
    fast-xml-parser@5.5.11: 1 known vulnerability
    GHSA-gh4j-gqv2-49f6
    pnpm-lock.yaml
  • low
    follow-redirects@1.15.11: 1 known vulnerability
    GHSA-r4q5-vmmm-2653
    pnpm-lock.yaml
  • low
    glob@11.1.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    pnpm-lock.yaml
  • low
    katex@0.16.27: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    pnpm-lock.yaml
  • low
    mermaid@11.12.0: 9 known vulnerabilities
    GHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6m6c-36f7-fhxh, GHSA-6x64-9x62-f2gx, GHSA-87f9-hvmw-gh4p +4 more
    pnpm-lock.yaml
  • low
    next-intl@4.3.11: 2 known vulnerabilities
    GHSA-4c35-wcg5-mm9h, GHSA-8f24-v5vv-gm5j
    pnpm-lock.yaml
  • low
    qs@6.14.0: 5 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
    pnpm-lock.yaml
  • low
    yaml@2.8.1: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    pnpm-lock.yaml
  • low
    package.json has a postinstall script
    tsx scripts/postinstall.ts
    package.json
  • low
    package.json has a prepare script
    husky
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
fonts.googleapis.comfonts.gstatic.comgithub.comregistry.npmjs.orgrelease-assets.githubusercontent.comtelemetry.nextjs.orgtelemetry.vercel.com
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Better Chatbot alternatives

View more →

Similar mcp servers in Productivity & Workflow, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Better Chatbot (this page)
keinsaasforever
1.2kMITOct 29, 2026Scanned, no flagged issues
N8n MCP
czlonkowski
23kMITOct 27, 2026Scanned, no flagged issues
Trigger Dev
triggerdotdev
17kApache-2.0Oct 31, 2026Scanned, no flagged issues
Skill Seekers
yusufkaraaslan
15kMITSep 30, 2026Scanned, no flagged issues
Windows MCP
CursorTouch
11kMITNov 1, 2026Scanned, no flagged issues
Mobile MCP
mobile-next
10kApache-2.0Oct 30, 2026Scanned, no flagged issues