Itasca MCP

Findings (21)

• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  dnspython@2.8.0: 1 known vulnerability

  GHSA-45c3-73f7-pv4m

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  joserfc@1.6.7: 3 known vulnerabilities

  PYSEC-2026-2528, GHSA-9pg5-8c7x-5hfx, GHSA-jpxq-7h8p-2q76

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  mcp@1.26.0: 7 known vulnerabilities

  PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  python-multipart@0.0.29: 4 known vulnerabilities

  PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3040, PYSEC-2026-3041

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  starlette@0.52.1: 5 known vulnerabilities

  PYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  urllib3@2.6.3: 5 known vulnerabilities

  PYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  fastmcp@3.3.1: 1 known vulnerability

  GHSA-7xgj-8392-5q4r

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  fastmcp-slim@3.3.1: 1 known vulnerability

  GHSA-7xgj-8392-5q4r

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  idna@3.11: 1 known vulnerability

  PYSEC-2026-215

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  opentelemetry-api@1.39.1: 1 known vulnerability

  GHSA-xcq7-p3pf-p88h

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  pydantic-settings@2.12.0: 1 known vulnerability

  GHSA-4xgf-cpjx-pc3j

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  pygments@2.19.2: 1 known vulnerability

  PYSEC-2026-2987

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  pytest@9.0.2: 1 known vulnerability

  PYSEC-2026-1845

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  python-dotenv@1.2.1: 1 known vulnerability

  PYSEC-2026-2270

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  requests@2.32.5: 1 known vulnerability

  PYSEC-2026-2275

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  Reads environment variables not listed in the manifest

  PIP_DISABLE_PIP_VERSION_CHECK, ITASCA_MCP_PIP_INDEX_URL, ITASCA_MCP_BRIDGE_AUTO_UPGRADE, ITASCA_MCP_BRIDGE_URL

Network activity

Tools exposed (7)

• itasca_browse_doc

  Browse ITASCA documentation by path, like ls + cat over one documentation tree. source picks the tree: commands (Itasca command syntax and keywords), python_api (the itasca Python SDK), fish (FISH intrinsic functions: name, signature, which versions have it, whether it is 2D or 3D only), reference

• itasca_query_doc

  Search ITASCA documentation by keywords, like grep; every hit carries a path for itasca_browse_doc. Without source it searches commands, python_api, fish and reference together, so 'ball pos' shows the FISH intrinsic and the Python method side by side. With source it searches one tree and adds that

• itasca_execute_task

  Submit a Python script file for asynchronous execution in the Itasca engine. Returns a task_id immediately; the script runs in the background. Companion tools manage the lifecycle: - itasca_check_task_status: poll output, progress, and final status - itasca_interrupt_task: cancel a running task - i

• itasca_check_task_status

  Check status and paginated output for a submitted Itasca task. Output combines Python prints and Itasca console output from itasca.command() calls (table dumps, list output, command summaries) interleaved in execution order. Use skip_newest / limit to paginate, or filter to keep only matching lines

• itasca_list_tasks

  List tasks tracked by the bridge, newest first. Read-only. Each entry carries task_id, status (pending / running / completed / failed / interrupted), description, entry_script, start_time, end_time and elapsed_time; total_count gives the size of the full history for paging via skip_newest + limit.

• itasca_interrupt_task

  Request interruption of a pending or running Itasca task. Returns as soon as the request is accepted; it does not wait for the task to stop. Confirm the stop and read the output produced so far with itasca_check_task_status. Only the script stops; the engine state is preserved, so you can inspect i

• itasca_execute_code

  Execute Python code synchronously in the running Itasca engine process. Returns stdout and an optional result variable immediately. Code runs in the engine's main thread, sharing the same __main__ namespace as any running task — side effects persist and are immediately visible to the task on its ne