MCP Servers by pulsemcp

by pulsemcp• 81•• Scanned•Claim this listing•Request removal

MCP (Model Context Protocol) Servers authored and maintained by the PulseMCP team. We build reliable servers thoughtfully designed specifically for MCP Client-powered workflows.

MCP Servers is an open-source mcp server by pulsemcp, written mainly in TypeScript, with 81 GitHub stars and the MIT license. Its code was last updated Oct 9, 2026.

Scan summary: scanned Nov 5, 2026 at commit 0ed34de. Seen able to run shell commands. Scan policy

Scanned
Full scan at 0ed34de · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit640 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (200)

  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/agent-orchestrator/local/prepare-publish.js:17
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/agent-orchestrator/local/prepare-publish.js:37
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/agent-orchestrator/local/prepare-publish.js:38
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/agent-orchestrator/local/prepare-publish.js:49
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/agent-orchestrator/local/prepare-publish.js:58
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/appsignal/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/appsignal/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/appsignal/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/appsignal/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/claude-code-agent/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/claude-code-agent/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/claude-code-agent/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/claude-code-agent/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/dynamodb/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/dynamodb/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/dynamodb/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/dynamodb/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/fetchpet/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/fetchpet/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/fetchpet/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/fetchpet/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/fly-io/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/fly-io/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/fly-io/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/fly-io/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/gcs/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/gcs/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/gcs/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/gcs/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/gmail/local/prepare-publish.js:26
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/gmail/local/prepare-publish.js:33
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/gmail/local/prepare-publish.js:40
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/gmail/local/prepare-publish.js:43
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/good-eggs/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/good-eggs/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/good-eggs/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/good-eggs/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/google-calendar/local/prepare-publish.js:21
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/google-calendar/local/prepare-publish.js:28
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/google-calendar/local/prepare-publish.js:31
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/google-docs/local/prepare-publish.js:20
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/google-docs/local/prepare-publish.js:26
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/google-docs/local/prepare-publish.js:29
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/google-flights/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/google-flights/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/google-flights/local/prepare-publish.js:35
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/google-flights/local/prepare-publish.js:44
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/hatchbox/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/hatchbox/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/hatchbox/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/hatchbox/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/langfuse/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/langfuse/local/prepare-publish.js:24
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/langfuse/local/prepare-publish.js:32
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/monarch-money/local/prepare-publish.js:21
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/monarch-money/local/prepare-publish.js:28
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/monarch-money/local/prepare-publish.js:31
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/onepassword/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/onepassword/local/prepare-publish.js:31
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/onepassword/local/prepare-publish.js:44
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/onepassword/local/prepare-publish.js:58
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/onepassword/local/prepare-publish.js:67
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/playwright-stealth/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/playwright-stealth/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/playwright-stealth/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/playwright-stealth/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/pointsyeah/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/pointsyeah/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/pointsyeah/local/prepare-publish.js:35
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/pointsyeah/local/prepare-publish.js:44
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/proctor/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/proctor/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/proctor/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/proctor/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/pulsemcp-cms-admin/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/pulsemcp-cms-admin/local/prepare-publish.js:29
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/pulsemcp-cms-admin/local/prepare-publish.js:42
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/pulsemcp-cms-admin/local/prepare-publish.js:53
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/pulsemcp-cms-admin/local/prepare-publish.js:62
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/remote-filesystem/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/remote-filesystem/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/remote-filesystem/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/remote-filesystem/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/s3/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/s3/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/s3/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/s3/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/serpapi-hotels/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/serpapi-hotels/local/prepare-publish.js:19
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/serpapi-hotels/local/prepare-publish.js:23
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/serpapi-hotels/local/prepare-publish.js:27
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/slack/local/prepare-publish.js:21
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/slack/local/prepare-publish.js:28
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/slack/local/prepare-publish.js:31
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/ssh/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/ssh/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/ssh/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/ssh/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/tailscale/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/tailscale/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/tailscale/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/tailscale/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/twist/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/twist/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/twist/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/twist/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/vercel/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/vercel/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/vercel/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    experimental/vercel/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    libs/mcp-server-template/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    libs/mcp-server-template/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    libs/mcp-server-template/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    libs/mcp-server-template/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    libs/mcp-server-template/scripts/run-manual-built.js:24
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    libs/mcp-server-template/scripts/run-manual-built.js:40
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    libs/mcp-server-template/scripts/setup-manual-tests.js:32
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    libs/mcp-server-template/scripts/setup-manual-tests.js:42
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/image-diff/local/prepare-publish.js:14
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/image-diff/local/prepare-publish.js:23
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/image-diff/local/prepare-publish.js:32
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/image-diff/local/prepare-publish.js:40
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/pulse-fetch/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/pulse-fetch/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/pulse-fetch/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/pulse-fetch/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/pulse-subregistry/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/pulse-subregistry/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/pulse-subregistry/local/prepare-publish.js:36
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/pulse-subregistry/local/prepare-publish.js:45
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/svg-tracer/local/prepare-publish.js:15
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/svg-tracer/local/prepare-publish.js:25
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/svg-tracer/local/prepare-publish.js:35
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    productionized/svg-tracer/local/prepare-publish.js:44
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/build-mcp-server.js:59
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/update-build-scripts.js:39
  • medium
    @modelcontextprotocol/sdk@1.29.0: 54 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +49 more
    experimental/agent-orchestrator/package-lock.json
  • medium
    body-parser@2.3.0: 3 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-27r3-jxmh-p828, GHSA-27r3-jxmh-p828
    experimental/agent-orchestrator/package-lock.json
  • medium
    fast-uri@3.1.4: 22 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-5jgf-p345-68v8, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf +17 more
    experimental/agent-orchestrator/package-lock.json
  • medium
    fflate@0.8.2: 7 known vulnerabilities
    GHSA-px8p-9vwx-vf98, GHSA-px8p-9vwx-vf98, GHSA-px8p-9vwx-vf98, GHSA-px8p-9vwx-vf98, GHSA-px8p-9vwx-vf98 +2 more
    experimental/agent-orchestrator/package-lock.json
  • medium
    ip-address@10.2.0: 64 known vulnerabilities
    GHSA-22jq-vg5j-6vgg, GHSA-2vr4-cq9g-pvrc, GHSA-4xrf-jv44-h6hh, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv +59 more
    experimental/agent-orchestrator/package-lock.json
  • medium
    nanoid@3.3.16: 1 known vulnerability
    GHSA-2v37-7h3g-55p8
    experimental/agent-orchestrator/package-lock.json
  • medium
    source-map-js@1.2.1: 9 known vulnerabilities
    GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q +4 more
    experimental/agent-orchestrator/package-lock.json
  • medium
    vite@8.1.5: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    experimental/agent-orchestrator/package-lock.json
  • medium
    zod@3.25.76: 8 known vulnerabilities
    GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5 +3 more
    experimental/agent-orchestrator/package-lock.json
  • medium
    body-parser@2.2.2: 12 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828 +7 more
    experimental/google-docs/package-lock.json
  • medium
    fast-uri@3.1.2: 55 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf +50 more
    experimental/google-docs/package-lock.json
  • medium
    nanoid@3.3.12: 10 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-28wg-ghj8-5hjv +5 more
    experimental/google-docs/package-lock.json
  • medium
    postcss@8.5.15: 10 known vulnerabilities
    GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849, GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849, GHSA-fxqj-rqcc-2cmp +5 more
    experimental/google-docs/package-lock.json
  • medium
    vite@8.0.16: 25 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +20 more
    experimental/google-docs/package-lock.json
  • medium
    nanoid@3.3.15: 4 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
    experimental/pulsemcp-cms-admin/package-lock.json
  • medium
    postcss@8.5.16: 4 known vulnerabilities
    GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849, GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
    experimental/pulsemcp-cms-admin/package-lock.json
  • medium
    vite@8.1.2: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    experimental/pulsemcp-cms-admin/package-lock.json
  • medium
    fast-uri@3.1.3: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-5jgf-p345-68v8, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf +7 more
    experimental/tailscale/package-lock.json
  • medium
    vite@8.1.3: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    experimental/tailscale/package-lock.json
  • medium
    @modelcontextprotocol/sdk@1.19.1: 8 known vulnerabilities
    GHSA-345p-7cg4-v4c7, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-8r9q-7v3j-jr4g +3 more
    libs/mcp-server-template/package-lock.json
  • medium
    body-parser@2.2.0: 3 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-wqch-xfxh-vrr4
    libs/mcp-server-template/package-lock.json
  • medium
    flatted@3.3.3: 4 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    libs/mcp-server-template/package-lock.json
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    libs/mcp-server-template/package-lock.json
  • medium
    path-to-regexp@8.2.0: 2 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    libs/mcp-server-template/package-lock.json
  • medium
    picomatch@4.0.2: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    libs/mcp-server-template/package-lock.json
  • medium
    postcss@8.5.6: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    libs/mcp-server-template/package-lock.json
  • medium
    rollup@4.44.1: 1 known vulnerability
    GHSA-mw96-cpmx-2vgc
    libs/mcp-server-template/package-lock.json
  • medium
    vite@7.0.0: 12 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-93m4-6634-74q7, GHSA-9jrq-w75r-8gcw +7 more
    libs/mcp-server-template/package-lock.json
  • medium
    zod@3.25.67: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    libs/mcp-server-template/package-lock.json
  • medium
    zod@4.3.6: 2 known vulnerabilities
    GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
    libs/test-mcp-client/package-lock.json
  • medium
    @hono/node-server@1.19.9: 3 known vulnerabilities
    GHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-wc8c-qw6v-h7f6
    package-lock.json
  • medium
    brace-expansion@1.1.12: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    package-lock.json
  • medium
    brace-expansion@2.0.2: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    package-lock.json
  • medium
    express-rate-limit@8.2.1: 1 known vulnerability
    GHSA-46wh-pxpv-q5gq
    package-lock.json
  • medium
    fast-uri@3.1.0: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    package-lock.json
  • medium
    fast-xml-builder@1.1.5: 2 known vulnerabilities
    GHSA-45c6-75p6-83cc, GHSA-5wm8-gmm8-39j9
    package-lock.json
  • medium
    form-data@2.5.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    package-lock.json
  • medium
    form-data@4.0.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    package-lock.json
  • medium
    hono@4.11.9: 35 known vulnerabilities
    GHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-5pq2-9x2x-5p6w +30 more
    package-lock.json
  • medium
    ip-address@10.0.1: 6 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
    package-lock.json
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    package-lock.json
  • medium
    minimatch@3.1.2: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    package-lock.json
  • medium
    minimatch@9.0.5: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    package-lock.json
  • medium
    path-to-regexp@8.3.0: 2 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    package-lock.json
  • medium
    picomatch@2.3.1: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    package-lock.json
  • medium
    picomatch@4.0.3: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    package-lock.json
  • medium
    sharp@0.33.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    package-lock.json
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    package-lock.json
  • medium
    uuid@9.0.1: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    package-lock.json
  • medium
    ws@8.19.0: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    package-lock.json
  • low
    Possible example credential in docs/tests: private-key
    experimental/google-calendar/README.md:71
  • low
    Possible example credential in docs/tests: generic-api-key
    experimental/onepassword/CHANGELOG.md:135
  • low
    Possible example credential in docs/tests: generic-api-key
    experimental/onepassword/README.md:160
  • low
    Possible example credential in docs/tests: private-key
    experimental/remote-filesystem/README.md:57
  • low
    @hono/node-server@1.19.14: 16 known vulnerabilities
    GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f, GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f, GHSA-frvp-7c67-39w9 +11 more
    experimental/agent-orchestrator/package-lock.json
  • low
    @vitest/mocker@4.1.9: 16 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8, GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8, GHSA-82fw-gwwq-j7x9 +11 more
    experimental/agent-orchestrator/package-lock.json
  • low
    hono@4.12.31: 18 known vulnerabilities
    GHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7, GHSA-79qm-7rj5-m7r9, GHSA-8j4g-w8fx-2239, GHSA-crvj-82cr-hjcx +13 more
    experimental/agent-orchestrator/package-lock.json
  • low
    qs@6.15.2: 21 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-x5fp-wj9c-mxmx, GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw +16 more
    experimental/agent-orchestrator/package-lock.json

Network activity

During install
nodejs.orgregistry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

MCP Servers alternatives

View more →

Similar mcp servers in Productivity & Workflow, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
MCP Servers (this page)
pulsemcp
81MITOct 9, 2026Scanned, no flagged issues
N8n MCP
czlonkowski
23kMITOct 27, 2026Scanned, no flagged issues
Trigger Dev
triggerdotdev
17kApache-2.0Oct 31, 2026Scanned, no flagged issues
Skill Seekers
yusufkaraaslan
15kMITSep 30, 2026Scanned, no flagged issues
Windows MCP
CursorTouch
11kMITNov 1, 2026Scanned, no flagged issues
Mobile MCP
mobile-next
10kApache-2.0Oct 30, 2026Scanned, no flagged issues