JoySafeter MCP Server

by jd-opensource• 315•• Scanned•Claim this listing•Request removal
Security & Testinga2aagentagent platformagent studioagents

🚀 JoySafeter: An enterprise AI Agent Platform—Not just chatting. building、running、testing, and tracing autonomous Agent Teams with visual orchestration...

JoySafeter is an open-source mcp server by jd-opensource, written mainly in Python, with 315 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 20, 2026.

Scan summary: scanned Nov 5, 2026 at commit 12234a1. Seen able to run shell commands, read environment and secrets. Scan policy

Scanned
Full scan at 12234a1 ¡ Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit564 known vulnerabilitiesfail
Manifestnonewarn
Buildn/a
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (111)

  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    backend/app/core/agent/backends/utils/command_executor.py:110
  • medium
    cryptography@44.0.3: 6 known vulnerabilities
    PYSEC-2026-2141, PYSEC-2026-35, PYSEC-2026-3552, PYSEC-2026-3553, PYSEC-2026-3554 +1 more
    backend/uv.lock
  • medium
    dnspython@2.8.0: 1 known vulnerability
    GHSA-45c3-73f7-pv4m
    backend/uv.lock
  • medium
    ecdsa@0.19.1: 2 known vulnerabilities
    PYSEC-2026-1325, PYSEC-2026-2467
    backend/uv.lock
  • medium
    jaraco-context@6.0.2: 1 known vulnerability
    PYSEC-2026-1469
    backend/uv.lock
  • medium
    langchain-core@1.2.11: 3 known vulnerabilities
    PYSEC-2026-2193, PYSEC-2026-2563, PYSEC-2026-2564
    backend/uv.lock
  • medium
    langgraph@1.0.8: 1 known vulnerability
    PYSEC-2026-83
    backend/uv.lock
  • medium
    langgraph-sdk@0.3.1: 2 known vulnerabilities
    PYSEC-2026-2575, PYSEC-2026-4240
    backend/uv.lock
  • medium
    langsmith@0.5.2: 4 known vulnerabilities
    PYSEC-2026-2582, PYSEC-2026-2583, PYSEC-2026-2584, GHSA-f4xh-w4cj-qxq8
    backend/uv.lock
  • medium
    mako@1.3.10: 3 known vulnerabilities
    PYSEC-2026-2617, PYSEC-2026-4243, PYSEC-2026-88
    backend/uv.lock
  • medium
    mcp@1.25.0: 7 known vulnerabilities
    PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more
    backend/uv.lock
  • medium
    msgpack@1.1.0: 2 known vulnerabilities
    PYSEC-2026-3625, GHSA-j586-36cw-2gc2
    backend/uv.lock
  • medium
    orjson@3.11.5: 1 known vulnerability
    GHSA-hx9q-6w63-j58v
    backend/uv.lock
  • medium
    protobuf@6.33.2: 1 known vulnerability
    PYSEC-2026-1805
    backend/uv.lock
  • medium
    pyasn1@0.6.1: 9 known vulnerabilities
    PYSEC-2026-1810, PYSEC-2026-2263, PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457 +4 more
    backend/uv.lock
  • medium
    pypdf@6.6.0: 61 known vulnerabilities
    PYSEC-2026-1827, PYSEC-2026-3004, PYSEC-2026-3005, PYSEC-2026-3006, PYSEC-2026-3007 +56 more
    backend/uv.lock
  • medium
    python-multipart@0.0.21: 7 known vulnerabilities
    PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039 +2 more
    backend/uv.lock
  • medium
    soupsieve@2.8.1: 4 known vulnerabilities
    PYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171
    backend/uv.lock
  • medium
    starlette@0.50.0: 5 known vulnerabilities
    PYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249
    backend/uv.lock
  • medium
    tornado@6.4.2: 18 known vulnerabilities
    PYSEC-2025-265, PYSEC-2025-266, PYSEC-2025-267, PYSEC-2026-140, PYSEC-2026-1974 +13 more
    backend/uv.lock
  • medium
    urllib3@2.6.2: 6 known vulnerabilities
    PYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-1996, PYSEC-2026-4175, PYSEC-2026-4176 +1 more
    backend/uv.lock
  • medium
    virtualenv@20.35.4: 20 known vulnerabilities
    PYSEC-2026-2009, PYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014 +15 more
    backend/uv.lock
  • medium
    @xmldom/xmldom@0.8.11: 15 known vulnerabilities
    GHSA-27p8-2357-5qqv, GHSA-2v35-w6hq-6mfw, GHSA-4w3w-2rp5-g8jm, GHSA-6gmq-8vp8-gcm6, GHSA-6h8r-xr42-gp59 +10 more
    frontend/bun.lock
  • medium
    brace-expansion@1.1.12: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    frontend/bun.lock
  • medium
    brace-expansion@2.0.2: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    frontend/bun.lock
  • medium
    browserslist@4.28.1: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    frontend/bun.lock
  • medium
    defu@6.1.4: 1 known vulnerability
    GHSA-737v-mqg7-c878
    frontend/bun.lock
  • medium
    dompurify@3.3.1: 21 known vulnerabilities
    GHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +16 more
    frontend/bun.lock
  • medium
    flatted@3.3.3: 2 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    frontend/bun.lock
  • medium
    form-data@4.0.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    frontend/bun.lock
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    frontend/bun.lock
  • medium
    kysely@0.28.9: 3 known vulnerabilities
    GHSA-8cpq-38p9-67gx, GHSA-pv5w-4p9q-p3v2, GHSA-wmrf-hv6w-mr66
    frontend/bun.lock
  • medium
    linkify-it@5.0.0: 2 known vulnerabilities
    GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
    frontend/bun.lock
  • medium
    lodash@4.17.21: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    frontend/bun.lock
  • medium
    markdown-it@14.1.0: 6 known vulnerabilities
    GHSA-253c-mchw-3w2r, GHSA-38c4-r59v-3vqw, GHSA-6v5v-wf23-fmfq, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7 +1 more
    frontend/bun.lock
  • medium
    minimatch@3.1.2: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    frontend/bun.lock
  • medium
    minimatch@9.0.5: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    frontend/bun.lock
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    frontend/bun.lock
  • medium
    node-forge@1.3.3: 15 known vulnerabilities
    GHSA-2328-f5f3-gj25, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p +10 more
    frontend/bun.lock
  • medium
    picomatch@2.3.1: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    frontend/bun.lock
  • medium
    picomatch@4.0.3: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    frontend/bun.lock
  • medium
    postcss@8.4.31: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    frontend/bun.lock
  • medium
    postcss@8.5.6: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    frontend/bun.lock
  • medium
    rollup@4.53.3: 1 known vulnerability
    GHSA-mw96-cpmx-2vgc
    frontend/bun.lock
  • medium
    samlify@2.10.2: 1 known vulnerability
    GHSA-34r5-q4jw-r36m
    frontend/bun.lock
  • medium
    sharp@0.34.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    frontend/bun.lock
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    frontend/bun.lock
  • medium
    uuid@10.0.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    frontend/bun.lock
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    frontend/bun.lock
  • medium
    vite@7.2.7: 10 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +5 more
    frontend/bun.lock
  • medium
    ws@8.18.3: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    frontend/bun.lock
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    frontend/bun.lock
  • medium
    zod@4.1.13: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    frontend/bun.lock
  • low
    Possible example credential in docs/tests: curl-auth-header
    5 matches in this file
    docs/api/openapi.md:35
  • low
    Possible example credential in docs/tests: generic-api-key
    docs/superpowers/specs/2026-03-20-skill-versioning-permissions-api-design.md:231
  • low
    aiosmtplib@5.0.0: 2 known vulnerabilities
    PYSEC-2026-2338, PYSEC-2026-3805
    backend/uv.lock
  • low
    capstone@5.0.3: 1 known vulnerability
    PYSEC-2026-3544
    backend/uv.lock
  • low
    diskcache@5.6.3: 1 known vulnerability
    PYSEC-2026-2447
    backend/uv.lock
  • low
    filelock@3.20.1: 3 known vulnerabilities
    PYSEC-2026-1374, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g
    backend/uv.lock
  • low
    flask@3.1.0: 2 known vulnerabilities
    PYSEC-2026-1377, PYSEC-2026-2151
    backend/uv.lock
  • low
    h2@4.1.0: 2 known vulnerabilities
    PYSEC-2026-1435, PYSEC-2026-3628
    backend/uv.lock
  • low
    hpack@4.1.0: 1 known vulnerability
    PYSEC-2026-4053
    backend/uv.lock
  • low
    idna@3.11: 1 known vulnerability
    PYSEC-2026-215
    backend/uv.lock
  • low
    langchain@1.2.10: 1 known vulnerability
    PYSEC-2026-2192
    backend/uv.lock
  • low
    langchain-anthropic@1.3.3: 1 known vulnerability
    PYSEC-2026-2556
    backend/uv.lock
  • low
    langchain-openai@1.1.6: 1 known vulnerability
    PYSEC-2026-76
    backend/uv.lock
  • low
    langgraph-checkpoint@3.0.1: 2 known vulnerabilities
    PYSEC-2026-2573, PYSEC-2026-2574
    backend/uv.lock
  • low
    langgraph-checkpoint-postgres@3.0.2: 2 known vulnerabilities
    PYSEC-2026-3635, GHSA-6hmw-9432-67qq
    backend/uv.lock
  • low
    mitmproxy@11.1.3: 2 known vulnerabilities
    PYSEC-2026-92, GHSA-63cx-g855-hvv4
    backend/uv.lock
  • low
    multidict@6.7.0: 1 known vulnerability
    PYSEC-2026-4244
    backend/uv.lock
  • low
    opentelemetry-api@1.39.1: 1 known vulnerability
    GHSA-xcq7-p3pf-p88h
    backend/uv.lock
  • low
    pydantic-settings@2.12.0: 1 known vulnerability
    GHSA-4xgf-cpjx-pc3j
    backend/uv.lock
  • low
    pygments@2.19.2: 1 known vulnerability
    PYSEC-2026-2987
    backend/uv.lock
  • low
    pytest@9.0.2: 1 known vulnerability
    PYSEC-2026-1845
    backend/uv.lock
  • low
    python-dotenv@1.2.1: 1 known vulnerability
    PYSEC-2026-2270
    backend/uv.lock
  • low
    requests@2.32.5: 1 known vulnerability
    PYSEC-2026-2275
    backend/uv.lock
  • low
    werkzeug@3.1.4: 3 known vulnerabilities
    PYSEC-2026-2044, PYSEC-2026-2320, PYSEC-2026-4312
    backend/uv.lock
  • low
    @babel/core@7.28.5: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    frontend/bun.lock
  • low
    @humanfs/node@0.16.7: 1 known vulnerability
    GHSA-p498-v437-472g
    frontend/bun.lock
  • low
    @vitest/mocker@3.2.4: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    frontend/bun.lock
  • low
    ajv@6.12.6: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    frontend/bun.lock
  • low
    baseline-browser-mapping@2.9.5: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    frontend/bun.lock
  • low
    postcss-selector-parser@6.0.10: 1 known vulnerability
    GHSA-rj75-hqrm-r3gf
    frontend/bun.lock
  • low
    postcss-selector-parser@6.1.2: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    frontend/bun.lock
  • low
    qs@6.14.0: 5 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
    frontend/bun.lock
  • low
    No manifest declaring network access and environment variables (agent.json)

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

JoySafeter alternatives

View more →

Similar mcp servers in Security & Testing, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
JoySafeter (this page)
jd-opensource
315Apache-2.0Oct 20, 2026Scanned, no flagged issues
Hexstrike AI
0x4m4
13kMITAug 3, 2026Scanned, no flagged issues
Viper
FunnyWolf
5.3kNone foundMay 31, 2026Not scanned yet
Open Ontologies
fabio-rovai
2.7kMITOct 30, 2026Scanned, no flagged issues
Qu1cksc0pe
CYB3RMX
2.1kGPL-3.0Sep 18, 2026Scanned, no flagged issues
Cve MCP Server
mukul975
1.7kApache-2.0Oct 1, 2026Scanned, no flagged issues