Moltis MCP Server
by moltis-orgA secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord, Teams, and MCP tools. Secure by design, runs on your hardware.
Moltis is an open-source mcp server by moltis-org, written mainly in Rust, with 2,938 GitHub stars and the MIT license. Its code was last updated Oct 23, 2026.
Scan summary: scanned Nov 5, 2026 at commit 8a12400. Seen able to read environment and secrets, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
8a12400 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit169 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (83)
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lopdf@0.38.0: 1 known vulnerabilityRUSTSEC-2026-0187
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.negentropy@0.5.0: 1 known vulnerabilityRUSTSEC-2026-0365
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nostr@0.44.2: 8 known vulnerabilitiesRUSTSEC-2026-0216, RUSTSEC-2026-0219, RUSTSEC-2026-0225, RUSTSEC-2026-0226, RUSTSEC-2026-0227 +3 more
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nostr-relay-pool@0.44.0: 4 known vulnerabilitiesRUSTSEC-2026-0224, RUSTSEC-2026-0231, RUSTSEC-2026-0232, RUSTSEC-2026-0243
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pulldown-cmark@0.13.3: 2 known vulnerabilitiesRUSTSEC-2026-0414, RUSTSEC-2026-0433
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.quinn-proto@0.11.16: 5 known vulnerabilitiesRUSTSEC-2026-0338, RUSTSEC-2026-0339, RUSTSEC-2026-0340, RUSTSEC-2026-0341, RUSTSEC-2026-0342
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rustls-webpki@0.102.8: 5 known vulnerabilitiesRUSTSEC-2026-0049, RUSTSEC-2026-0098, RUSTSEC-2026-0099, RUSTSEC-2026-0104, RUSTSEC-2026-0382
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.wasmtime-wasi@36.0.9: 8 known vulnerabilitiesRUSTSEC-2026-0149, RUSTSEC-2026-0182, RUSTSEC-2026-0188, RUSTSEC-2026-0314, RUSTSEC-2026-0321 +3 more
Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pulldown-cmark@0.13.4: 2 known vulnerabilitiesRUSTSEC-2026-0414, RUSTSEC-2026-0433
apps/desktop/Cargo.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 3 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
crates/web/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@8.1.4: 10 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +5 more
crates/web/ui/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.devalue@5.8.1: 8 known vulnerabilitiesGHSA-4q55-j62x-fr9h, GHSA-9rgm-9g3h-6x36, GHSA-hx4r-w6wj-j8fg, GHSA-j22f-vq7h-c4qm, GHSA-mcm9-63f2-9j32 +3 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sharp@0.35.4: 1 known vulnerabilityGHSA-wq5f-xc86-pv6w
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.smol-toml@1.7.0: 2 known vulnerabilitiesGHSA-7w5x-hrqm-74c2, GHSA-r4xh-jqrq-34v2
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@8.10.2: 8 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-4w7w-5xrc-9h26, GHSA-55wc-3pg8-jfw6, GHSA-9fm3-97px-rjf6 +3 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.6.1: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@8.10.0: 19 known vulnerabilitiesGHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +14 more
website/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
crates/web/ui/e2e/specs/onboarding.spec.js:469 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
crates/web/ui/e2e/specs/onboarding.spec.js:493 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
crates/web/ui/e2e/specs/settings-nav.spec.js:270 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
crates/web/ui/e2e/specs/settings-nav.spec.js:299 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
apps/courier/README.md:48 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key296 matches in this file
crates/skills/src/assets/mlops/training/unsloth/references/llms-txt.md:1096 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key325 matches in this file
crates/skills/src/assets/mlops/training/unsloth/references/llms-full.md:11 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: curl-auth-header
docs/src/graphql.md:105 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
docs/src/vault.md:164 - lowLow. Minor, or common in normal tools. Shown for information.anyhow@1.0.102: 1 known vulnerabilityRUSTSEC-2026-0190
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.anymap2@0.13.0: 1 known vulnerabilityRUSTSEC-2026-0319
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.atomic-polyfill@1.0.3: 1 known vulnerabilityRUSTSEC-2023-0089
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.backoff@0.4.0: 1 known vulnerabilityRUSTSEC-2025-0012
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.basic-toml@0.1.10: 1 known vulnerabilityRUSTSEC-2026-0374
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.bitmaps@3.2.1: 2 known vulnerabilitiesRUSTSEC-2025-0167, RUSTSEC-2026-0247
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.block-buffer@0.12.0: 1 known vulnerabilityGHSA-qwgh-2vcv-g2f7
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.crossbeam-epoch@0.9.18: 1 known vulnerabilityRUSTSEC-2026-0204
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.crypto-bigint@0.5.5: 1 known vulnerabilityRUSTSEC-2026-0387
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.ctutils@0.4.2: 1 known vulnerabilityRUSTSEC-2026-0385
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.derivative@2.2.0: 1 known vulnerabilityRUSTSEC-2024-0388
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.domain@0.11.1: 1 known vulnerabilityRUSTSEC-2026-0310
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.event-listener@5.4.1: 1 known vulnerabilityRUSTSEC-2026-0221
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.faster-hex@0.10.0: 1 known vulnerabilityRUSTSEC-2026-0306
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.fxhash@0.2.1: 1 known vulnerabilityRUSTSEC-2025-0057
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.generational-arena@0.2.9: 1 known vulnerabilityRUSTSEC-2024-0014
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.gix-packetline@0.21.3: 1 known vulnerabilityGHSA-2vh6-hw4j-32ww
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.h2@0.4.13: 1 known vulnerabilityRUSTSEC-2026-0258
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.imbl-sized-chunks@0.1.3: 1 known vulnerabilityRUSTSEC-2026-0292
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.instant@0.1.13: 1 known vulnerabilityRUSTSEC-2024-0384
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.libz-sys@1.1.28: 1 known vulnerabilityRUSTSEC-2026-0418
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.lru@0.16.4: 1 known vulnerabilityRUSTSEC-2026-0253
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.matrix-sdk-crypto@0.16.0: 2 known vulnerabilitiesRUSTSEC-2026-0159, RUSTSEC-2026-0318
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.memmap2@0.9.10: 1 known vulnerabilityRUSTSEC-2026-0186
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.nostr-relay-builder@0.44.1: 1 known vulnerabilityRUSTSEC-2026-0237
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.number_prefix@0.4.0: 1 known vulnerabilityRUSTSEC-2025-0119
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.proc-macro-error2@2.0.1: 1 known vulnerabilityRUSTSEC-2026-0173
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rsa@0.9.10: 1 known vulnerabilityRUSTSEC-2023-0071
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls@0.22.4: 3 known vulnerabilitiesRUSTSEC-2026-0346, RUSTSEC-2026-0349, GHSA-h2v8-394m-p7vv
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls@0.23.39: 4 known vulnerabilitiesRUSTSEC-2026-0285, RUSTSEC-2026-0346, RUSTSEC-2026-0348, RUSTSEC-2026-0349
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustls-pemfile@2.2.0: 1 known vulnerabilityRUSTSEC-2025-0134
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.scc@2.4.0: 1 known vulnerabilityRUSTSEC-2026-0205
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.slack-morphism@2.20.0: 1 known vulnerabilityGHSA-26w4-8w32-4x3v
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.tokio@1.52.3: 1 known vulnerabilityRUSTSEC-2026-0386
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.ttf-parser@0.25.1: 2 known vulnerabilitiesRUSTSEC-2026-0192, RUSTSEC-2026-0192
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.unsafe-libyaml@0.2.11: 2 known vulnerabilitiesRUSTSEC-2024-0449, RUSTSEC-2024-0449
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.webauthn-rs-core@0.5.4: 1 known vulnerabilityGHSA-22w3-693w-x895
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.xxhash-rust@0.8.15: 1 known vulnerabilityGHSA-6g2r-675j-hx59
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zstd@0.13.3: 1 known vulnerabilityRUSTSEC-2026-0391
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zstd-safe@7.2.4: 12 known vulnerabilitiesRUSTSEC-2026-0395, RUSTSEC-2026-0396, RUSTSEC-2026-0397, RUSTSEC-2026-0398, RUSTSEC-2026-0399 +7 more
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zstd-sys@2.0.16+zstd.1.5.7: 1 known vulnerabilityRUSTSEC-2026-0410
Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.bincode@1.3.3: 1 known vulnerabilityRUSTSEC-2025-0141
apps/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.paste@1.0.15: 1 known vulnerabilityRUSTSEC-2024-0436
apps/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.rustybuzz@0.20.1: 1 known vulnerabilityRUSTSEC-2026-0206
apps/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zbus_names@4.3.5: 1 known vulnerabilityRUSTSEC-2026-0371
apps/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant@5.15.1: 1 known vulnerabilityRUSTSEC-2026-0370
apps/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.zvariant_derive@5.15.1: 1 known vulnerabilityRUSTSEC-2026-0372
apps/desktop/Cargo.lock - lowLow. Minor, or common in normal tools. Shown for information.astro@7.3.2: 1 known vulnerabilityGHSA-mpr7-6m5w-76rw
docs/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Moltis alternatives
View more →Similar mcp servers in Communication, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Moltis (this page) moltis-org | 2.9k | MIT | Oct 23, 2026 | Scanned, no flagged issues |
| TrendRadar sansan0 | 63k | GPL-3.0 | Oct 29, 2026 | Scanned, no flagged issues |
| Waha devlikeapro | 7.7k | Apache-2.0 | Oct 28, 2026 | Scanned, no flagged issues |
| Lemonade lemonade-sdk | 6k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Pipeshub AI pipeshub-ai | 3.9k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Slackdump rusq | 2.8k | AGPL-3.0 | Nov 1, 2026 | Scanned, no flagged issues |