Skills/npm/hostkey-mcp-server-ru

hostkey-mcp-server-ru@1.0.8

VERIFIED

Publisher claims: "MCP server for Hostkey .ru portal (InvAPI invapi.hostkey.ru): servers, power, ordering, reinstall, DNS, S3, billing" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher hostkey-cloud-ru · publishing for 60 daysInstalls 1,479Last detonated 17 h ago
$claude mcp add hostkey-mcp-server-ru -- npx -y hostkey-mcp-server-ru
WatchReport an issue

Coverage

Started with a decoy HOSTKEY_API_KEY; tool list observed. Tool calls with a real credential not tested.
Tested
server startup with a tagged decoy in HOSTKEY_API_KEY · MCP initialize and tools/list · every tool description, for hidden instructions · where the decoy credential went · every file read, file written and host contacted by what ran
Not tested
what the tools do when called with a real credential
Needs
HOSTKEY_API_KEY — give it to the server where it runs, through vet-skills run --secrets, so the value never enters the server's environment. Never paste a credential into a chat, a ticket or a report.

Before you give it your token

It will ask for
HOSTKEY_API_KEYConfiguration, not credentials: HOSTKEY_ALLOW_DESTRUCTIVE, HOSTKEY_CORS_ORIGINS, MODE
Where it talks to
no vendor host named in the codeAlso hostkey.ru, hostkey.com — not the publisher's domain; check what for before connecting.
What the honeypot saw
no credential files read · no network
What we could not test
what the tools do when called with a real credential

Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names hostkey.ru, hostkey.com as well as its own vendor. The guard injects HOSTKEY_API_KEY only into requests to the host you bind (and its subdomains) and refuses the rest.

$vet-skills run --net declared -- npx -y hostkey-mcp-server-ru

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-13 and scored it 90/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 53 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
13sprocessdependency install exit 0
33sprocessrelaunched with a decoy HOSTKEY_API_KEY (tagged; nothing real)
53sclaimed132 tools with a decoy HOSTKEY_API_KEY: get_servers, get_server, get_power_status, get_server_sensors, get_server_tags, search_servers_by_tag, list_presets, search_presets, get_preset_pricing, list_preset_groups, get_preset, list_stock_servers, get_stock_server, list_os, list_software, list_traffic_plans, get_account_info, logout, list_api_keys, list_server_api_keys, get_api_key, get_api_key_history, create_api_key, update_api_key, delete_api_key
53stoolsb415a609c5d8f5f0
53stools0a08313fdbcbf9d0
53stoolsce4c77eabd010d40
53stools413b57da2ea3352a
53stools8d23ead16b503d68
53stools5b97b49575c3311f
53stoolsc431a451f334252d
53stools2d3c5964b0b7776c
53stoolsf20e1b1f015dce53
53stools5eea0d5f13ae7e61
53stools0288ae18a0a2bc4f
53stools099d1b06cff8956d
53stools0ec6df74f39c45d6
53stools27c760605945eb1c
53stools3f0bdfacd03f0a12
53stools83bb964625ae8d23
53stools44558fba2bca519f
53stoolsf02c195658b522f9
53stoolsf7f2123ef4262ccd
53stools5ad801d77b423f51
53stoolsaa396574e68dd258
53stoolsc9951b53cdd67d6a
53stoolsfb3136d3995d5ee2
53stoolsc8fcbeb16f626dc8
53stoolsdc628a09e402971a
53stoolsd61ff8a98d836640
53stools3d4ad67c3cdd9760
53stools5e8800f7f9926d15
53stools86148c51bb1bdd73
53stools331242b98a65e6b2
53stools66f6c74e52212cef
53stoolsbcc026d86dff7bc3
53stoolsd9d34e33d8ae5d19
53stoolsb69cdbe1a1a36729
53stools89107c74e0881960
53stools2aaa4a79445fa4be
53stools153aa4be0724cd91
53stools91a3780d804aaf5f
53stools49623d86c3129205
53stoolsce03763373aeda3b
53stools84fea96fb95fff69
53stools30c21ca4b148817c
53stools093ca0eded49e112
53stools11357271dbb950ff
53stools21af8388ca894add
53stools87532ad76b6d17db
53stools25015164692be57e
53stools00d4ab6c326eeb5b
53stools7fe9958c149c2031
53stools09a2d2e4fe5519e6
53stools7f29b81482d5eff2
53stools9586787de57e9271
53stools3d9eef8e3751331c
53stools5e3fbea01eb8f6c5
53stoolsfcbf3f05eb6d8fd4
53stoolsfcc7a208d163d789
53stools3dddd048b7c02fef
53stools39ae4220d64b342d
53stoolsd1da30ce84821f4e
53stools90262860a7114b08
53stools5d03e29cf9f8b55c
53stoolsd77cc3ea8c274807
53stoolsdfd9da697b26a445
53stoolsf5825adb4ad1fb47
53stools8409ec0c28d05412
53stools9e4321f9cd6a777d
53stools936b17ad3d1ec90c
53stools0909832f8658148e
53stoolsa9862a11c3ebb25f
53stoolsbc0888ff650918fa
53stools14182e1f58b5d33c
53stools66cf4d354eb75985
53stools0cd472f923c22168
53stools735a33cb3446c9cc
53stools96fa9102fa0b2987
53stoolsc583ce6402ff3d18
53stoolsb8014b16965bc6ad
53stools9988a53fe323a4b7
53stoolsce9c1ddafd2545f0
53stools3b033dd19919db9a
53sprocessscript backend runs setup only
53sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsdist/index.mjs:1444 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files/** Hostkey MCP server (.ru / invapi.hostkey.ru). Env: see .env.example. */Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Latin word with Cyrillic or Greek look-alike letters (homoglyph)mcp:tools/add_dns_record:2 · Latin word with Cyrillic or Greek look-alike letters (homoglyph)SRVвЂFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.
AST01

Cost to the agent

Instructions loaded
≈69 tok
1 file · 5 in bundle
Tool list per prompt
≈17,453 tok
132 tools · 132 per tool
Handshake
3854 ms
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 126

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for hostkey-mcp-server-ru@1.0.8 as of 16 h ago. This is the package itself, not its dependencies.