freee-mcp@0.37.5

BLOCKED

Publisher claims: "Model Context Protocol (MCP) server for freee API integration" Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher freee · joined 0 days agoInstalls 47,595Last detonated 2 h ago

Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

CRITICAL

Access to sensitive file pathsbin/freee-sign-mcp.js:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbin/freee-mcp.js:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbin/freee-sign-remote-mcp.js:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbin/freee-mcp.js:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbin/freee-sign-mcp.js:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbin/freee-sign-mcp.js:3 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsbin/freee-remote-mcp.js:2 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressbin/freee-mcp.js:18 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagebin/freee-mcp.js:45 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressbin/freee-remote-mcp.js:57 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressbin/freee-mcp.js:6 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagebin/freee-sign-mcp.js:26 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagebin/freee-sign-mcp.js:4 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressbin/freee-sign-mcp.js:12 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.md:253 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressbin/freee-remote-mcp.js:65 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packagebin/freee-remote-mcp.js:2 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagebin/freee-mcp.js:2 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressREADME.md:246 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.md:87 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

Outbound HTTP to raw IP addressbin/freee-sign-mcp.js:4 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressbin/freee-remote-mcp.js:2 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressbin/freee-mcp.js:26 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

npx invocation of non-well-known packageREADME.md:282 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionbin/freee-mcp.js:76 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addressbin/freee-sign-mcp.js:4 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addressbin/freee-sign-remote-mcp.js:6 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressbin/freee-remote-mcp.js:2 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressbin/freee-mcp.js:18 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionbin/freee-sign-mcp.js:2 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addressREADME.md:246 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionbin/freee-remote-mcp.js:80 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionbin/freee-remote-mcp.js:14 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addressbin/freee-remote-mcp.js:65 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionbin/freee-sign-mcp.js:4 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addressbin/freee-sign-mcp.js:12 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)bin/freee-remote-mcp.js:80 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

URL using raw IP addressbin/freee-remote-mcp.js:57 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionbin/freee-remote-mcp.js:56 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

URL using raw IP addressbin/freee-mcp.js:6 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

File type combined with upload actionbin/freee-mcp.js:18 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Outbound HTTP to raw IP addressbin/freee-sign-remote-mcp.js:14 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressbin/freee-mcp.js:26 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

npx invocation of non-well-known packagebin/freee-sign-remote-mcp.js:4 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

URL using raw IP addressbin/freee-sign-remote-mcp.js:6 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressbin/freee-sign-remote-mcp.js:14 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

MCP server using network transport (SSE/HTTP)bin/freee-sign-remote-mcp.js:21 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

File type combined with upload actionbin/freee-sign-remote-mcp.js:4 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionbin/freee-sign-remote-mcp.js:21 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

Dense URL-encoded contentdist/openapi/minimal/hr.json:903 · Dense URL-encoded content — may be obfuscating payloads

AST07

MEDIUM

Dense URL-encoded contentdist/openapi/minimal/accounting.json:3824 · Dense URL-encoded content — may be obfuscating payloads

AST07