Nexus Agent MCP Server
by java-up-up企业级 AI 智能体 Agent 平台，覆盖智能对话、文档知识问答、联网搜索、RAG 检索、MCP 工具协议、Skills 扩展等完整能力。三层执行器体系、双通道混合检索、组合式切块引擎、会话记忆管理、全链路可观测，每个环节都经过深 度设计和工程化打磨。
Nexus Agent is an open-source mcp server by java-up-up, written mainly in Java, with 673 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 21, 2026.
Scan summary: scanned Nov 5, 2026 at commit 6359b73. Seen able to run dynamic code. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
6359b73 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit152 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (67)
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Very long encoded string literal. Often used to hide a payload.
vue/public/webviewer/core/20.chunk.js:2 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Very long encoded string literal. Often used to hide a payload.
vue/public/webviewer/ui/chunks/chunk.79.js:7 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Very long encoded string literal. Often used to hide a payload.
vue/public/webviewer/ui/chunks/chunk.79.js:31 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Very long encoded string literal. Often used to hide a payload.
vue/public/webviewer/ui/chunks/chunk.79.js:31 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Very long encoded string literal. Often used to hide a payload.
vue/public/webviewer/ui/chunks/chunk.79.js:40 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Very long encoded string literal. Often used to hide a payload.
vue/public/webviewer/ui/chunks/chunk.79.js:46 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Very long encoded string literal. Often used to hide a payload.
vue/public/webviewer/ui/chunks/chunk.vendors.html2canvas.js:1 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec@4.1.127.Final: 2 known vulnerabilitiesGHSA-558v-64gr-wgg4, GHSA-mj4r-2hfc-f8p6
ai-example/ai-example-one/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec-dns@4.1.127.Final: 2 known vulnerabilitiesGHSA-cm33-6792-r9fm, GHSA-mfg7-5gfp-c4w3
ai-example/ai-example-one/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-resolver-dns@4.1.127.Final: 3 known vulnerabilitiesGHSA-5pvg-856g-cp85, GHSA-676x-f7gg-47vc, GHSA-xmv7-r254-6q78
ai-example/ai-example-one/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.minio:minio@8.5.17: 1 known vulnerabilityGHSA-h7rh-xfpj-hpcm
nexus-agent-business/nexus-agent-business-chat/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.29.0: 6 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@vue/server-renderer@3.5.13: 1 known vulnerabilityGHSA-g2v6-rqmx-r4w6
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.3.0: 1 known vulnerabilityGHSA-27r3-jxmh-p828
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.15: 6 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.1.2: 5 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-rgw5-rvv9-x895
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.7: 5 known vulnerabilitiesGHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-rgw5-rvv9-x895
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.2: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.decode-uri-component@0.2.2: 2 known vulnerabilitiesGHSA-qr28-fpjm-wq7f, GHSA-vcc3-ghjq-m6fr
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.3: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-5jgf-p345-68v8, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf +7 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@10.2.0: 8 known vulnerabilitiesGHSA-22jq-vg5j-6vgg, GHSA-2vr4-cq9g-pvrc, GHSA-4xrf-jv44-h6hh, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv +3 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.13: 2 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.15: 2 known vulnerabilitiesGHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.34.8: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 1 known vulnerabilityGHSA-68fv-2mgg-jv7q
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.systeminformation@5.31.14: 3 known vulnerabilitiesGHSA-3f7j-7jwc-fxfj, GHSA-4vjg-vx72-qq4g, GHSA-7648-jmwf-vw7j
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@7.28.0: 23 known vulnerabilitiesGHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +18 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@6.2.0: 17 known vulnerabilitiesGHSA-356w-63v5-8wf4, GHSA-4r4m-qw57-chr8, GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv +12 more
vue/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ch.qos.logback:logback-core@1.5.18: 4 known vulnerabilitiesGHSA-25qh-j22f-pwp8, GHSA-jhq6-gfmj-v8fx, GHSA-p47f-322f-whfh, GHSA-qqpg-mvqg-649v
ai-example/ai-example-one/pom.xml - lowLow. Minor, or common in normal tools. Shown for information.@hono/node-server@1.19.14: 2 known vulnerabilitiesGHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@vitest/mocker@3.2.7: 2 known vulnerabilitiesGHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.10.38: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 1 known vulnerabilityGHSA-gcqx-w48m-w2h4
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 1 known vulnerabilityGHSA-3g3m-2fjr-6pw4
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.glob@11.1.0: 1 known vulnerabilityGHSA-3g3m-2fjr-6pw4
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.hono@4.12.28: 9 known vulnerabilitiesGHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7, GHSA-79qm-7rj5-m7r9, GHSA-8j4g-w8fx-2239, GHSA-crvj-82cr-hjcx +4 more
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.5: 1 known vulnerabilityGHSA-g3hv-75wg-m249
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.minimatch@9.0.9: 1 known vulnerabilityGHSA-g3hv-75wg-m249
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@7.1.4: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.15.3: 3 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-x5fp-wj9c-mxmx
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.vitest@3.2.7: 1 known vulnerabilityGHSA-82fw-gwwq-j7x9
vue/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Nexus Agent alternatives
View more →Similar mcp servers in Data Science & ML, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Nexus Agent (this page) java-up-up | 673 | Apache-2.0 | Oct 21, 2026 | Scanned, no flagged issues |
| MaxKB 1Panel-dev | 23k | GPL-3.0 | Nov 1, 2026 | Scanned, no flagged issues |
| FunASR modelscope | 21k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Ida Pro MCP mrexodia | 13k | MIT | Sep 26, 2026 | Scanned, no flagged issues |
| Pal MCP Server BeehiveInnovations | 12k | None found | Dec 15, 2025 | Not scanned yet |
| Osaurus osaurus-ai | 8.1k | MIT | Nov 1, 2026 | Scanned, no flagged issues |