coolify-mcp@3.9.0

CAUTION

Publisher claims: "MCP server for Coolify — 46 optimized tools for infrastructure management, diagnostics, and documentation search" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher masonator · joined 0 days agoInstalls 16,013Last detonated 51 min ago

Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.7sprocessdependency install exit 1

0.7sprocessexec /usr/bin/timeout

0.7sprocessexited 1: Node.js v22.23.4

0.7sclaimedno tools/list reply (exit 1)

0.7sprocessscript backend runs setup only

Static findings

CRITICAL

Prompting user to enter sensitive credentialsdist/lib/startup-check.js:230 · Prompting user to enter sensitive credentials — social engineering

AST03

HIGH

Access to sensitive file pathsdist/__tests__/audit.test.js:51 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:27 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Pipe-to-shell patterndist/lib/coolify-client.js:211 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Destructive file system command detecteddist/__tests__/coolify-client.test.js:4605 · Destructive file system command detected

AST05

CRITICAL

Privileged sudo commanddist/__tests__/elicitation.test.js:416 · Privileged sudo command — agent may execute with elevated privileges

AST05

CRITICAL

Pipe-to-shell patterndist/lib/coolify-client.js:222 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Destructive file system command detecteddist/__tests__/coolify-client.test.js:4582 · Destructive file system command detected

AST05

CRITICAL

Prompting user to enter sensitive credentialsdist/lib/startup-check.js:226 · Prompting user to enter sensitive credentials — social engineering

AST03

HIGH

npx invocation of non-well-known packageREADME.md:55 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressdist/__tests__/http-interop.test.js:79 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Pipe-to-shell patterndist/lib/coolify-client.js:188 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

HIGH

Outbound HTTP to raw IP addressdist/__tests__/http-interop.test.js:82 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Destructive file system command detecteddist/__tests__/coolify-client.test.js:4592 · Destructive file system command detected

AST05

HIGH

Outbound HTTP to raw IP addressdist/__tests__/http-interop.test.js:147 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathsdist/__tests__/token-source.test.js:233 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressdist/__tests__/startup-check.test.js:370 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagedist/lib/coolify-client.js:120 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressdist/lib/oauth.js:152 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressdist/__tests__/oauth.test.js:1135 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/__tests__/mcp-server.test.js:1024 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)dist/__tests__/mcp-server.test.js:1037 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressdist/__tests__/http-interop.test.js:82 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Access to sensitive file pathsdist/__tests__/startup-check.test.js:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressdist/lib/oauth.js:151 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressdist/__tests__/ssrf.test.js:45 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagedist/lib/coolify-client.d.ts:98 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressdist/__tests__/http-interop.test.js:119 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

URL with embedded credentialsdist/__tests__/oauth.test.js:943 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

URL with embedded credentialsdist/__tests__/ssrf.test.js:41 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

Access to sensitive file pathsdist/lib/startup-check.js:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsdist/__tests__/ssrf.test.js:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)dist/__tests__/mcp-server.test.js:1010 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

Outbound HTTP to raw IP addressdist/__tests__/http-interop.test.js:108 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/__tests__/audit.test.js:216 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressdist/__tests__/http-interop.test.js:147 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Access to sensitive file pathsdist/data/coolify-docs.json:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commanddist/data/coolify-docs.json:7 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Outbound HTTP to raw IP addressdist/__tests__/oauth.test.js:1243 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Access to sensitive file pathsdist/__tests__/integration/helpers.js:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressdist/lib/oauth.d.ts:89 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressdist/__tests__/http-interop.test.js:79 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/__tests__/audit.test.js:161 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

Access to sensitive file pathsdist/__tests__/oauth.test.js:97 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commanddist/__tests__/startup-check.test.js:235 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Outbound HTTP to raw IP addressdist/__tests__/oauth.test.js:1121 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressdist/__tests__/http-interop.test.js:119 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Access to sensitive file pathsdist/lib/startup-check.d.ts:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandpackage.json:24 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

npx invocation of non-well-known packagedist/index.js:8 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

URL using raw IP addressdist/__tests__/http-interop.test.js:108 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addressdist/lib/oauth.d.ts:88 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressdist/__tests__/ssrf.test.js:44 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressdist/__tests__/ssrf.test.js:95 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressdist/__tests__/oauth.test.js:87 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressdist/__tests__/oauth.test.js:1122 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressdist/__tests__/startup-check.test.js:370 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

Remote installer piped to shelldist/lib/coolify-client.js:188 · Remote installer piped to shell

AST07

MEDIUM

Remote installer piped to shelldist/lib/coolify-client.js:211 · Remote installer piped to shell

AST07

MEDIUM

URL using raw IP addressdist/__tests__/oauth.test.js:1121 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/__tests__/oauth.test.js:87 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/__tests__/oauth.test.js:1243 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/lib/oauth.d.ts:89 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/__tests__/mcp-server.test.js:1053 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressdist/lib/oauth.d.ts:88 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/__tests__/ssrf.test.js:44 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/__tests__/ssrf.test.js:45 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/__tests__/ssrf.test.js:95 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/__tests__/oauth.test.js:1122 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

Remote installer piped to shelldist/lib/coolify-client.js:222 · Remote installer piped to shell

AST07

MEDIUM

URL using raw IP addressdist/__tests__/oauth.test.js:1135 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressdist/lib/oauth.js:151 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)dist/__tests__/mcp-server.test.js:1045 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressdist/lib/oauth.js:152 · URL using raw IP address — may bypass domain-based filtering

AST07