Openacme MCP Server

by sandydasari• 89•• Scanned•Claim this listing•Request removal
Developer Toolsagent frameworkagentic aiai agentsai workforceanthropic

An AI workforce platform: role-specialized agents with multi-provider LLM, MCP, tasks, and a web + CLI UI. You're in charge.

Openacme is an open-source mcp server by sandydasari, written mainly in TypeScript, with 89 GitHub stars and the MIT license. Its code was last updated Jul 28, 2026.

Scan summary: scanned Nov 5, 2026 at commit e76a79b. Seen able to read environment and secrets, connect to the internet. Scan policy

Scanned
Full scan at e76a79b · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanpass
Dependency audit308 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (95)

  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    @grpc/grpc-js@1.14.3: 4 known vulnerabilities
    GHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
    pnpm-lock.yaml
  • medium
    @modelcontextprotocol/sdk@1.29.0: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    pnpm-lock.yaml
  • medium
    @opentelemetry/auto-instrumentations-node@0.55.3: 1 known vulnerability
    GHSA-q7rr-3cgh-j5r3
    pnpm-lock.yaml
  • medium
    @opentelemetry/exporter-prometheus@0.57.2: 1 known vulnerability
    GHSA-q7rr-3cgh-j5r3
    pnpm-lock.yaml
  • medium
    @opentelemetry/propagator-jaeger@1.30.1: 1 known vulnerability
    GHSA-45rx-2jwx-cxfr
    pnpm-lock.yaml
  • medium
    @opentelemetry/sdk-node@0.57.2: 1 known vulnerability
    GHSA-q7rr-3cgh-j5r3
    pnpm-lock.yaml
  • medium
    @tiptap/core@3.26.1: 2 known vulnerabilities
    GHSA-cp6q-959q-f8rh, GHSA-j95f-988m-3j2f
    pnpm-lock.yaml
  • medium
    adm-zip@0.5.17: 8 known vulnerabilities
    GHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
    pnpm-lock.yaml
  • medium
    body-parser@2.2.2: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    pnpm-lock.yaml
  • medium
    brace-expansion@1.1.12: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    pnpm-lock.yaml
  • medium
    brace-expansion@2.0.2: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    pnpm-lock.yaml
  • medium
    brace-expansion@5.0.6: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    pnpm-lock.yaml
  • medium
    browserslist@4.28.2: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    pnpm-lock.yaml
  • medium
    decode-uri-component@0.4.1: 2 known vulnerabilities
    GHSA-qr28-fpjm-wq7f, GHSA-vcc3-ghjq-m6fr
    pnpm-lock.yaml
  • medium
    deepmerge-ts@7.1.5: 1 known vulnerability
    GHSA-ggr8-5vv4-36mx
    pnpm-lock.yaml
  • medium
    drizzle-orm@0.44.7: 1 known vulnerability
    GHSA-gpj5-g38j-94v9
    pnpm-lock.yaml
  • medium
    fast-uri@3.1.2: 11 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf +6 more
    pnpm-lock.yaml
  • medium
    figlet@1.11.0: 1 known vulnerability
    GHSA-62ch-8vmq-8xm7
    pnpm-lock.yaml
  • medium
    flatted@3.3.3: 2 known vulnerabilities
    GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
    pnpm-lock.yaml
  • medium
    form-data@4.0.5: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    pnpm-lock.yaml
  • medium
    hono@4.12.16: 24 known vulnerabilities
    GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7, GHSA-79qm-7rj5-m7r9 +19 more
    pnpm-lock.yaml
  • medium
    ip-address@10.2.0: 8 known vulnerabilities
    GHSA-22jq-vg5j-6vgg, GHSA-2vr4-cq9g-pvrc, GHSA-4xrf-jv44-h6hh, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv +3 more
    pnpm-lock.yaml
  • medium
    js-yaml@3.14.2: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    pnpm-lock.yaml
  • medium
    js-yaml@4.1.0: 5 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
    pnpm-lock.yaml
  • medium
    js-yaml@4.1.1: 4 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
    pnpm-lock.yaml
  • medium
    js-yaml@4.2.0: 3 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj
    pnpm-lock.yaml
  • medium
    linkify-it@5.0.1: 1 known vulnerability
    GHSA-v245-v573-v5vm
    pnpm-lock.yaml
  • medium
    minimatch@3.1.2: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    pnpm-lock.yaml
  • medium
    minimatch@9.0.5: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • medium
    nanoid@3.3.11: 3 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
    pnpm-lock.yaml
  • medium
    nanoid@3.3.12: 2 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
    pnpm-lock.yaml
  • medium
    node-forge@1.4.0: 12 known vulnerabilities
    GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p, GHSA-5x38-2vff-x55p +7 more
    pnpm-lock.yaml
  • medium
    nodemailer@6.10.1: 22 known vulnerabilities
    GHSA-268h-hp4c-crq3, GHSA-2x7j-588g-ccc2, GHSA-39m8-27wv-hr27, GHSA-4ffr-jq9g-5ffx, GHSA-4g23-2xm8-66gc +17 more
    pnpm-lock.yaml
  • medium
    nodemailer@8.0.10: 15 known vulnerabilities
    GHSA-2x7j-588g-ccc2, GHSA-39m8-27wv-hr27, GHSA-4ffr-jq9g-5ffx, GHSA-4g23-2xm8-66gc, GHSA-6vj9-mwq6-2f5v +10 more
    pnpm-lock.yaml
  • medium
    picomatch@2.3.1: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    pnpm-lock.yaml
  • medium
    picomatch@4.0.3: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    pnpm-lock.yaml
  • medium
    postcss@8.4.31: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    pnpm-lock.yaml
  • medium
    postcss@8.5.15: 2 known vulnerabilities
    GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
    pnpm-lock.yaml
  • medium
    prosemirror-view@1.41.9: 1 known vulnerability
    GHSA-c8x8-7fp4-3x9w
    pnpm-lock.yaml
  • medium
    protobufjs@7.5.6: 4 known vulnerabilities
    GHSA-f38q-mgvj-vph7, GHSA-j3f2-48v5-ccww, GHSA-jggg-4jg4-v7c6, GHSA-wcpc-wj8m-hjx6
    pnpm-lock.yaml
  • medium
    sharp@0.34.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    pnpm-lock.yaml
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    pnpm-lock.yaml
  • medium
    uuid@8.3.2: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    uuid@9.0.1: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    pnpm-lock.yaml
  • medium
    vite@5.4.21: 8 known vulnerabilities
    GHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +3 more
    pnpm-lock.yaml
  • medium
    vite@8.0.16: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    pnpm-lock.yaml
  • medium
    ws@8.20.0: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    pnpm-lock.yaml
  • medium
    xlsx@0.18.5: 2 known vulnerabilities
    GHSA-4r6h-8v6p-xvw6, GHSA-5pgg-2g8v-p4x9
    pnpm-lock.yaml
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    zod@4.4.3: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    Install contacted hosts other than package registries
    telemetry.nextjs.org, telemetry.vercel.com
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    apps/docs/components/landing/InstallTabs.tsx:7
  • low
    @ai-sdk/provider-utils@4.0.27: 1 known vulnerability
    GHSA-866g-f22w-33x8
    pnpm-lock.yaml
  • low
    @hono/node-server@1.19.14: 2 known vulnerabilities
    GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f
    pnpm-lock.yaml
  • low
    @humanfs/node@0.16.7: 1 known vulnerability
    GHSA-p498-v437-472g
    pnpm-lock.yaml
  • low
    @mozilla/readability@0.5.0: 1 known vulnerability
    GHSA-3p6v-hrg8-8qj7
    pnpm-lock.yaml
  • low
    @opentelemetry/core@1.30.1: 1 known vulnerability
    GHSA-8988-4f7v-96qf
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-cassandra-driver@0.45.1: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-knex@0.44.1: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-mongoose@0.46.1: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-mysql@0.45.1: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-mysql2@0.45.2: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-pg@0.50.0: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @opentelemetry/instrumentation-tedious@0.18.1: 1 known vulnerability
    GHSA-qqmp-wf37-98f9
    pnpm-lock.yaml
  • low
    @vitest/mocker@2.1.9: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    pnpm-lock.yaml
  • low
    ajv@6.12.6: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    pnpm-lock.yaml
  • low
    baseline-browser-mapping@2.10.30: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    pnpm-lock.yaml
  • low
    baseline-browser-mapping@2.10.8: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    pnpm-lock.yaml
  • low
    colord@2.9.3: 1 known vulnerability
    GHSA-2wm5-q62r-hmrv
    pnpm-lock.yaml
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    pnpm-lock.yaml
  • low
    esbuild@0.18.20: 1 known vulnerability
    GHSA-67mh-4wv8-2f99
    pnpm-lock.yaml
  • low
    esbuild@0.21.5: 1 known vulnerability
    GHSA-67mh-4wv8-2f99
    pnpm-lock.yaml
  • low
    esbuild@0.27.7: 1 known vulnerability
    GHSA-g7r4-m6w7-qqqr
    pnpm-lock.yaml
  • low
    glob@13.0.6: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    pnpm-lock.yaml
  • low
    katex@0.16.47: 1 known vulnerability
    GHSA-238p-pmpm-9mq7
    pnpm-lock.yaml
  • low
    mermaid@11.15.0: 5 known vulnerabilities
    GHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6x64-9x62-f2gx, GHSA-c4c3-pg64-4m4v, GHSA-rhh3-jpg6-66xh
    pnpm-lock.yaml
  • low
    minimatch@10.2.5: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    qs@6.15.1: 4 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
    pnpm-lock.yaml
  • low
    ua-parser-js@2.0.9: 1 known vulnerability
    GHSA-9h5v-pfqq-x599
    pnpm-lock.yaml
  • low
    package.json has a prepare script
    git config core.hooksPath .githooks 2>/dev/null || true
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)
  • low
    Couldn't work out how to start the server. Set "entrypoint" in agent.json.

Network activity

During install
github.comregistry.npmjs.orgrelease-assets.githubusercontent.comtelemetry.nextjs.orgtelemetry.vercel.com
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Openacme alternatives

View more →

Similar mcp servers in Developer Tools, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Openacme (this page)
sandydasari
89MITJul 28, 2026Scanned, no flagged issues
MCP Use
mcp-use
11kMITOct 30, 2026Scanned, no flagged issues
MobileBuildMCP
getsentry
6.5kMITNov 1, 2026Scanned, no flagged issues
Gemini Notebook MCP CLI
jacob-bd
6.4kMITOct 27, 2026Scanned, no flagged issues
Mcporter
openclaw
5.1kMITOct 27, 2026Scanned, no flagged issues
Flint Chart
microsoft
4.5kMITNov 1, 2026Scanned, no flagged issues