Lime MCP Server

by limecloud• 1.5k•• Scanned•Claim this listing•Request removal
Content & Writingagentagent collaborationagent harnessagentic aiai

Full-stack AI agent for coding, files, terminals, tools, research, content, multimodal work, and multi-agent workflows.

Lime is an open-source mcp server by limecloud, written mainly in TypeScript, with 1,492 GitHub stars and the GPL-3.0 license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 5, 2026 at commit 748e3c7. Seen able to run shell commands, run dynamic code. Scan policy

Scanned
Full scan at 748e3c7 · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit289 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (119)

  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/lib/vite-dev-server-bootstrap.mjs:186
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/lib/vite-dev-server-bootstrap.mjs:225
  • medium
    @intlify/core@11.4.13: 2 known vulnerabilities
    GHSA-83rm-6c8r-g728, GHSA-8rc2-428q-7ww3
    docs/pnpm-lock.yaml
  • medium
    @intlify/core-base@11.4.13: 2 known vulnerabilities
    GHSA-83rm-6c8r-g728, GHSA-8rc2-428q-7ww3
    docs/pnpm-lock.yaml
  • medium
    @intlify/shared@11.4.13: 1 known vulnerability
    GHSA-83rm-6c8r-g728
    docs/pnpm-lock.yaml
  • medium
    body-parser@2.3.0: 1 known vulnerability
    GHSA-27r3-jxmh-p828
    docs/pnpm-lock.yaml
  • medium
    node-forge@1.4.0: 12 known vulnerabilities
    GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p, GHSA-5x38-2vff-x55p +7 more
    docs/pnpm-lock.yaml
  • medium
    undici@7.30.0: 8 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
    docs/pnpm-lock.yaml
  • medium
    undici@8.11.2: 8 known vulnerabilities
    GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
    docs/pnpm-lock.yaml
  • medium
    vue-i18n@11.4.13: 2 known vulnerabilities
    GHSA-83rm-6c8r-g728, GHSA-8rc2-428q-7ww3
    docs/pnpm-lock.yaml
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    docs/pnpm-lock.yaml
  • medium
    zod@4.6.5: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    docs/pnpm-lock.yaml
  • medium
    openssl@0.10.75: 8 known vulnerabilities
    GHSA-8c75-8mhr-p7r9, GHSA-ghm9-cr32-g9qj, GHSA-hppc-g8h3-xhp3, GHSA-phqj-4mhp-q6mq, GHSA-pqf5-4pqq-29f5 +3 more
    lime-rs/Cargo.lock
  • medium
    quinn-proto@0.11.13: 6 known vulnerabilities
    RUSTSEC-2026-0037, RUSTSEC-2026-0185, RUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340 +1 more
    lime-rs/Cargo.lock
  • medium
    rmcp@0.12.0: 5 known vulnerabilities
    RUSTSEC-2026-0189, GHSA-33f5-2c5q-wgwj, GHSA-9g45-5xwm-f3wc, GHSA-9pj6-vhgr-3mwh, GHSA-c9xm-49cp-xcr9
    lime-rs/Cargo.lock
  • medium
    rustls-webpki@0.103.9: 5 known vulnerabilities
    RUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
    lime-rs/Cargo.lock
  • medium
    tar@0.4.44: 3 known vulnerabilities
    RUSTSEC-2026-0067, RUSTSEC-2026-0068, GHSA-3pv8-6f4r-ffg2
    lime-rs/Cargo.lock
  • medium
    @xmldom/xmldom@0.9.10: 13 known vulnerabilities
    GHSA-27p8-2357-5qqv, GHSA-3px3-54cx-rmw9, GHSA-4w3w-2rp5-g8jm, GHSA-6gmq-8vp8-gcm6, GHSA-6h8r-xr42-gp59 +8 more
    pnpm-lock.yaml
  • medium
    brace-expansion@1.1.12: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    pnpm-lock.yaml
  • medium
    brace-expansion@2.0.2: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    pnpm-lock.yaml
  • medium
    browserslist@4.28.1: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    pnpm-lock.yaml
  • medium
    electron@42.3.3: 14 known vulnerabilities
    GHSA-2p8c-gr87-2676, GHSA-3qxv-5xgr-q7w9, GHSA-98mx-cjp9-gchm, GHSA-997q-gvvc-jwmx, GHSA-9qh4-3jw8-366w +9 more
    pnpm-lock.yaml
  • medium
    extract-zip@2.0.1: 2 known vulnerabilities
    GHSA-7pqw-9j4j-h8q3, GHSA-jmr9-qjv8-65gv
    pnpm-lock.yaml
  • medium
    fast-uri@3.1.0: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    pnpm-lock.yaml
  • medium
    flatted@3.3.3: 2 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    pnpm-lock.yaml
  • medium
    form-data@4.0.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    pnpm-lock.yaml
  • medium
    image-size@0.7.5: 1 known vulnerability
    GHSA-w3rx-r6r6-pgpr
    pnpm-lock.yaml
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    pnpm-lock.yaml
  • medium
    minimatch@3.1.2: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    pnpm-lock.yaml
  • medium
    minimatch@9.0.5: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • medium
    picomatch@2.3.1: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    pnpm-lock.yaml
  • medium
    picomatch@4.0.3: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    pnpm-lock.yaml
  • medium
    rollup@4.54.0: 1 known vulnerability
    GHSA-mw96-cpmx-2vgc
    pnpm-lock.yaml
  • medium
    smol-toml@1.6.1: 2 known vulnerabilities
    GHSA-7w5x-hrqm-74c2, GHSA-r4xh-jqrq-34v2
    pnpm-lock.yaml
  • medium
    tmp@0.0.33: 2 known vulnerabilities
    GHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65
    pnpm-lock.yaml
  • medium
    undici@7.27.2: 29 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-35p6-xmwp-9g52, GHSA-3xpg-4rpp-hhhm +24 more
    pnpm-lock.yaml
  • medium
    uuid@11.1.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    zod@4.3.6: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    Install or build failed in a clean environment
    indows-sandbox-runner' ] } Node.js v22.23.4 npm notice npm notice New major version of npm available! 10.9.9 -> 12.2.2 npm notice Changelog: https://github.com/npm/cli/releases/tag/v12.2.2 npm notice To update run: npm install -g npm@12.2.2 npm notice  ELIFECYCLE  Command failed with exit code 1.
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    electron/browserOverlayDocument.test.ts:46
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    scripts/electron/code-artifact-workbench-fixture-smoke.test.mjs:18
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    scripts/lib/composer-editor-dom.test.mjs:118
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    scripts/lib/composer-editor-dom.test.mjs:123
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    scripts/lib/composer-editor-dom.test.mjs:134
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    scripts/lib/composer-editor-dom.test.mjs:139
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    scripts/lib/electron-preload-build.test.mjs:41
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    scripts/lib/invoke-trace-collector.test.mjs:232
  • low
    Possible example credential in docs/tests: curl-auth-header
    docs/content/04.api-reference/2.openai-api.md:105
  • low
    Possible example credential in docs/tests: curl-auth-header
    docs/content/04.api-reference/3.claude-api.md:106
  • low
    Possible example credential in docs/tests: generic-api-key
    src/lib/crashReporting.component.test.ts:17
  • low
    @nuxt/nitro-server@4.6.0: 2 known vulnerabilities
    GHSA-9v7c-q64q-vv33, GHSA-vjh5-4x84-xrqp
    docs/pnpm-lock.yaml
  • low
    @nuxt/vite-builder@4.6.0: 3 known vulnerabilities
    GHSA-3xf4-9g3c-4h4w, GHSA-648h-gw55-m2g7, GHSA-x287-wcfc-q46c
    docs/pnpm-lock.yaml
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    docs/pnpm-lock.yaml
  • low
    esbuild@0.27.7: 1 known vulnerability
    GHSA-g7r4-m6w7-qqqr
    docs/pnpm-lock.yaml
  • low
    fast-uri@3.1.8: 4 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-w74x-v6f9-j3xg, GHSA-wjr9-j795-jxcr, GHSA-xhq7-xmqj-769h
    docs/pnpm-lock.yaml
  • low
    glob@10.5.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    docs/pnpm-lock.yaml
  • low
    glob@13.0.6: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    docs/pnpm-lock.yaml
  • low
    ip-address@10.7.3: 1 known vulnerability
    GHSA-rxp7-6hxx-x8q5
    docs/pnpm-lock.yaml
  • low
    katex@0.16.47: 2 known vulnerabilities
    GHSA-238p-pmpm-9mq7, GHSA-238p-pmpm-9mq7
    docs/pnpm-lock.yaml
  • low
    minimatch@10.2.6: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    docs/pnpm-lock.yaml
  • low
    minimatch@9.0.9: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    docs/pnpm-lock.yaml
  • low
    nuxt@4.6.0: 3 known vulnerabilities
    GHSA-9v7c-q64q-vv33, GHSA-vjh5-4x84-xrqp, GHSA-xfq5-w38q-pc2x
    docs/pnpm-lock.yaml
  • low
    qs@6.16.0: 1 known vulnerability
    GHSA-6pq8-jhm2-2vcw
    docs/pnpm-lock.yaml
  • low
    serialize-javascript@7.1.2: 1 known vulnerability
    GHSA-m5mm-p8h7-m29v
    docs/pnpm-lock.yaml
  • low
    seroval@1.6.9: 2 known vulnerabilities
    GHSA-9wx9-5pv9-3349, GHSA-f86p-h4j2-7qgj
    docs/pnpm-lock.yaml
  • low
    anyhow@1.0.102: 1 known vulnerability
    RUSTSEC-2026-0190
    lime-rs/Cargo.lock
  • low
    atomic-polyfill@1.0.3: 1 known vulnerability
    RUSTSEC-2023-0089
    lime-rs/Cargo.lock
  • low
    basic-toml@0.1.10: 1 known vulnerability
    RUSTSEC-2026-0374
    lime-rs/Cargo.lock
  • low
    bincode@1.3.3: 1 known vulnerability
    RUSTSEC-2025-0141
    lime-rs/Cargo.lock
  • low
    crossbeam-epoch@0.9.18: 1 known vulnerability
    RUSTSEC-2026-0204
    lime-rs/Cargo.lock
  • low
    crypto-bigint@0.5.5: 1 known vulnerability
    RUSTSEC-2026-0387
    lime-rs/Cargo.lock
  • low
    derivative@2.2.0: 1 known vulnerability
    RUSTSEC-2024-0388
    lime-rs/Cargo.lock
  • low
    fxhash@0.2.1: 1 known vulnerability
    RUSTSEC-2025-0057
    lime-rs/Cargo.lock
  • low
    h2@0.4.13: 1 known vulnerability
    RUSTSEC-2026-0258
    lime-rs/Cargo.lock
  • low
    memmap2@0.8.0: 1 known vulnerability
    RUSTSEC-2026-0186
    lime-rs/Cargo.lock
  • low
    opentelemetry_sdk@0.27.1: 1 known vulnerability
    GHSA-w9wp-h8wv-79jx
    lime-rs/Cargo.lock
  • low
    paste@1.0.15: 1 known vulnerability
    RUSTSEC-2024-0436
    lime-rs/Cargo.lock
  • low
    pin-utils@0.1.0: 1 known vulnerability
    RUSTSEC-2026-0441
    lime-rs/Cargo.lock
  • low
    rand@0.8.5: 1 known vulnerability
    RUSTSEC-2026-0097
    lime-rs/Cargo.lock
  • low
    rand@0.9.2: 1 known vulnerability
    RUSTSEC-2026-0097
    lime-rs/Cargo.lock
  • low
    rustls@0.23.36: 4 known vulnerabilities
    RUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
    lime-rs/Cargo.lock
  • low
    rustls-pemfile@2.2.0: 1 known vulnerability
    RUSTSEC-2025-0134
    lime-rs/Cargo.lock
  • low
    serial@0.4.0: 1 known vulnerability
    RUSTSEC-2017-0008
    lime-rs/Cargo.lock
  • low
    tokio@1.49.0: 1 known vulnerability
    RUSTSEC-2026-0386
    lime-rs/Cargo.lock
  • low
    tui@1.173.0: 1 known vulnerability
    RUSTSEC-2023-0049
    lime-rs/Cargo.lock
  • low
    unsafe-libyaml@0.2.11: 1 known vulnerability
    RUSTSEC-2024-0449
    lime-rs/Cargo.lock
  • low
    webpki-root-certs@1.0.6: 1 known vulnerability
    RUSTSEC-2026-0383
    lime-rs/Cargo.lock
  • low
    webpki-roots@1.0.6: 1 known vulnerability
    RUSTSEC-2026-0381
    lime-rs/Cargo.lock
  • low
    yaml-rust@0.4.5: 1 known vulnerability
    RUSTSEC-2024-0320
    lime-rs/Cargo.lock
  • low
    zbus_names@3.0.0: 1 known vulnerability
    RUSTSEC-2026-0371
    lime-rs/Cargo.lock
  • low
    zstd@0.13.3: 1 known vulnerability
    RUSTSEC-2026-0391
    lime-rs/Cargo.lock
  • low
    zstd-safe@5.0.2+zstd.1.5.2: 9 known vulnerabilities
    RUSTSEC-2026-0395, RUSTSEC-2026-0397, RUSTSEC-2026-0399, RUSTSEC-2026-0400, RUSTSEC-2026-0401 +4 more
    lime-rs/Cargo.lock
  • low
    zstd-safe@7.2.4: 12 known vulnerabilities
    RUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399 +7 more
    lime-rs/Cargo.lock
  • low
    zstd-sys@2.0.16+zstd.1.5.7: 1 known vulnerability
    RUSTSEC-2026-0410
    lime-rs/Cargo.lock
  • low
    zvariant@4.2.0: 1 known vulnerability
    RUSTSEC-2026-0370
    lime-rs/Cargo.lock
  • low
    zvariant_derive@4.2.0: 1 known vulnerability
    RUSTSEC-2026-0372
    lime-rs/Cargo.lock
  • low
    @humanfs/node@0.16.7: 1 known vulnerability
    GHSA-p498-v437-472g
    pnpm-lock.yaml
  • low
    @tootallnate/once@2.0.0: 1 known vulnerability
    GHSA-vpq2-c234-7xj6
    pnpm-lock.yaml
  • low
    ajv@6.12.6: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    pnpm-lock.yaml
  • low
    baseline-browser-mapping@2.9.11: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    pnpm-lock.yaml
  • low
    katex@0.16.27: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    pnpm-lock.yaml
  • low
    postcss@8.5.18: 1 known vulnerability
    GHSA-fxqj-rqcc-2cmp
    pnpm-lock.yaml
  • low
    postcss-selector-parser@6.1.2: 2 known vulnerabilities
    GHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
    pnpm-lock.yaml
  • low
    package.json has a prepare script
    husky
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
codeload.github.comgithub.comnodejs.orgregistry.npmjs.orgrelease-assets.githubusercontent.com
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Lime alternatives

View more →

Similar mcp servers in Content & Writing, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Lime (this page)
limecloud
1.5kGPL-3.0Nov 1, 2026Scanned, no flagged issues
Context7
upstash
64kMITNov 1, 2026Scanned, no flagged issues
Md2wechat Skill
geekjourneyx
3.8kNone foundOct 14, 2026Not scanned yet
Cortex
cortex-docs
3.3kMITOct 6, 2026Scanned, no flagged issues
Markdownify MCP
zcaceres
3kMITOct 26, 2026Scanned, no flagged issues
LLM Wiki Compiler
atomicstrata
2.2kMITOct 30, 2026Scanned, no flagged issues