mcp-auth@1.0.0-beta.1

CAUTION

Publisher claims: "Plug and play auth for Model Context Protocol (MCP) servers" Observed in sandbox: static analysis only — behavior not yet observed.

Registry npm (MCP server)Publisher mcp-auth · joined 0 days agoInstalls 28,665Last detonated 1 h ago

Dispute verdict

Behavior trace

Queued for honeypot run · static analysis only

t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM

File type combined with upload actionpackage.json:37 · File type combined with upload action — agent may exfiltrate local data files

AST07

No other findings across 1,655 lines in 19 files.