Comics Now MCP Server

by ComicsNow• 17•• Scanned•Claim this listing•Request removal
Developer Toolsapicomiccomic bookscomic readercomics

The modern, self-hosted comic book library server, smart reader, and AI-augmented cataloging platform

Comics Now is an open-source mcp server by ComicsNow, written mainly in JavaScript, with 17 GitHub stars and the AGPL-3.0 license. Its code was last updated Oct 31, 2026.

Scan summary: scanned Nov 5, 2026 at commit 7335e85. Seen able to run shell commands, connect to the internet. Scan policy

Scanned
Full scan at 7335e85 · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanpass
Dependency audit257 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshakefail
Network egresswarn
Reproducible (×3)n/a

Findings (30)

  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/check-dependencies.js:19
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/release.js:139
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/release.js:148
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/release.js:157
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/release.js:184
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/release.js:193
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/release.js:197
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/release.js:198
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/release.js:206
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/release.js:210
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/release.js:227
  • medium
    Install contacted hosts other than package registries
    api.nuget.org
  • medium
    MCP server didn't complete the protocol handshake
    timed out waiting for the server
  • low
    Possible example credential in docs/tests: gcp-api-key
    2 matches in this file
    tests/crypto-vault.test.js:74
  • low
    Possible example credential in docs/tests: generic-api-key
    tests/geminiCompliance.test.js:90
  • low
    Possible example credential in docs/tests: gcp-api-key
    3 matches in this file
    tests/secrets-integration.test.js:35
  • low
    idna@3.9.0: 3 known vulnerabilities
    PYSEC-2026-215, PYSEC-2026-215, PYSEC-2026-215
    mcp/requirements.txt
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    package-lock.json
  • low
    glob@10.5.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    package-lock.json
  • low
    glob@13.0.6: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    package-lock.json
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    package-lock.json
  • low
    minimatch@9.0.9: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    package-lock.json
  • low
    scipy@1.9.3: 1 known vulnerability
    PYSEC-2023-102
    tagger/requirements.txt
  • low
    package.json has a postinstall script
    node scripts/check-dependencies.js
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
api.nuget.orggithub.comregistry.npmjs.orgrelease-assets.githubusercontent.com
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Comics Now alternatives

View more →

Similar mcp servers in Developer Tools, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Comics Now (this page)
ComicsNow
17AGPL-3.0Oct 31, 2026Scanned, no flagged issues
MCP Use
mcp-use
11kMITOct 30, 2026Scanned, no flagged issues
MobileBuildMCP
getsentry
6.5kMITNov 1, 2026Scanned, no flagged issues
Gemini Notebook MCP CLI
jacob-bd
6.4kMITOct 27, 2026Scanned, no flagged issues
Mcporter
openclaw
5.1kMITOct 27, 2026Scanned, no flagged issues
Flint Chart
microsoft
4.5kMITNov 1, 2026Scanned, no flagged issues