mcp-server@0.65.4
VERIFIEDPublisher claims: "Official Porkbun MCP server, built and maintained by Porkbun — exposes the Porkbun v3 API as tools for AI agents (ChatGPT, Claude, Cursor, etc.)" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry npm (MCP server) · listed in the official MCP RegistryPublisher porkbunllc · publishing for 192 daysInstalls 8,650Last detonated 15 min ago
Coverage
Server started and answered tools/list.- Tested
- MCP initialize and tools/list · every tool description, for hidden instructions · every file read, file written and host contacted by what ran
- Not tested
- what the tools do when called with real credentials
Before you give it your token
- It will ask for
OAUTH_ISSUERPORKBUN_API_KEYPORKBUN_SECRET_API_KEYPORKBUN_X402_PRIVATE_KEYConfiguration, not credentials: MCP_PUBLIC_URL, OPENAI_APPS_CHALLENGE, PORKBUN_BASE_URL, PORKBUN_DOCS_BASE, PORKBUN_X402_MAX_CENTS- Where it talks to
- porkbun.com (its own)
- What the honeypot saw
- no credential files read · no network
- What we could not test
- what the tools do when called with real credentials
Connect it with a scoped credential, under the guard. It asks for OAUTH_ISSUER, PORKBUN_API_KEY, PORKBUN_SECRET_API_KEY, PORKBUN_X402_PRIVATE_KEY and talks to porkbun.com. Give the credential to the guard, not the server: the value never enters the server's environment and only travels to the host you bind.
$vet-skills run --secrets OAUTH_ISSUER=porkbun.com,PORKBUN_API_KEY=porkbun.com,PORKBUN_SECRET_API_KEY=porkbun.com,PORKBUN_X402_PRIVATE_KEY=porkbun.com -- npx -y @porkbunllc/mcp-server
Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-15 and scored it 84/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 58 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
38sprocessdependency install exit 0
58sclaimed162 tools: ping, check_domain, check_domains, get_registration_requirements, get_pricing, list_marketplace, list_domains, get_domain, get_balance, get_auto_topup, top_up_with_usdc, top_up_with_card_mpp, send_phone_verification_code, confirm_phone_verification, send_email_verification_code, confirm_email_verification, get_usdc_topup_status, list_invoices, get_invoice, get_invoice_pdf, configure_auto_topup, top_up_account_credit, get_api_settings, get_nameservers, list_dns_records
58stools41ffeb68a8053dc5
58stools3a9299de23cf513f
58stools772277171e67c1ba
58stools30d3be0f814370ea
58stoolsbf5cadef9bfa3f19
58stools22f64469b3d32af6
58stoolsfc62d46cb02ebf5b
58stools39fc0dc4bac8b160
58stoolsd90513d845862953
58stoolsfbd7b9d686556dc3
58stools3c58a5202727725c
58stoolse7754fee09adee7b
58stools16e58b4ef69ac6cf
58stools3ec071e4084a0ee4
58stoolse7e473db1c9f7f52
58stools5a4d5c2d55fa83a0
58stools762542810bcfc7bd
58stools14609a74c4f6d632
58stoolse18a00d3cedc7a6a
58stools7c833e4a6c0c0e73
58stools1bfcd4a2d79df20d
58stools5a479120233137c3
58stools9c940bf01a6cf64d
58stools35a2e88e69057f4f
58stools8f2136aac9e037b0
58stools5b215e3b941021f2
58stools71b98bb7784fb436
58stools65f773da1b6fffcb
58stoolsa4bce3abc44f8e15
58stools16bc32f25b863697
58stools008ceb218f673dd9
58stoolsf9ddad81fd9e6681
58stoolscba00baa3e00a963
58stools5f0b149924d710c3
58stoolsb6a4ac3bdfadb53d
58stoolsba9a256b70b08d76
58stools1b210f44559d99f9
58stoolsd46d075fa6f14a14
58stoolsfe871eb5057fa9e2
58stools41d9925dfa81bb67
58stools4f92229487c22c4a
58stools90f3f5a73acdf29d
58stools5083e0e9d5f2b8a0
58stoolsa53a24d06311dcb6
58stoolscda037b10944ce9a
58stoolsc3436cd7a4dbbde5
58stoolse867b5b32ebc13bb
58stoolsd250641e119200c2
58stools020d5cd9575e8056
58stoolsea6fab994b834efc
58stools0f5c8a264290c6ee
58stools18bb66a5555230ec
58stools5d5247047bf93ab7
58stoolscdb62bb07fe0ed9c
58stoolsb3276bc838e9054d
58stools35799db9295c64f7
58stools38145ab0b7bc0352
58stools310827e162028ed2
58stoolsc9860a44e673331c
58stools1d164a0594211ba7
58stools406fcf16ab828cec
58stools6c1c67df2151c5ae
58stoolsdf9fc08213f9498e
58stools215b980464df3365
58stools71046bcdb1bacf49
58stools44289c3c18c5ff28
58stoolscdabb3915308799e
58stools0acc5be11496502f
58stoolsef73963cdc59c7ca
58stools332dc911f1ddfece
58stools24c5e0c341afc843
58stoolsa6c4bd19f4b8215e
58stools8fa279c3930e4942
58stoolsc90a381c8adfd766
58stools1b9d846cfc345e94
58stools6e8c5653fa9427dc
58stools832d0a8194fb1ff9
58stools46641a014b1b276c
58stoolscfb1317ed297a2e7
58stools1c2834fcdc8c4c6b
58sprocessscript backend runs setup only
58sprocessno install scripts to re-run
Static findings
MEDIUM
npx invocation of non-well-known packagedist/tools.js:89 · npx invocation of non-well-known package — may execute untrusted code
AST06… No shell? Link's own MCP server does the same where your client can run one (\`npx -y @stripe/link-cli --mcp\`, or \`link-cli mcp add\` to register it); without eith…Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
File type combined with upload actiondist/tools.js:1836 · File type combined with upload action — agent may exfiltrate local data files
AST07…tatic Hosting. TEXT FILES GO IN `text`, AS WRITTEN: for .html, .css, .js, .svg, .json, .txt and .xml send { path, text } with the file's contents exactly as you wrote them. Do NOT base64-encode text files; base64 is slow and error-prone fo…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.HIGH
Tool description instructs the agent: "do not tell the user"mcp:tools/buy_closeout:1 · Instruction aimed at the agent: "do not tell the user"
AST01releases it over the following days, so do not tell the user it is in their account: poll list_domains or watch the domaFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.Cost to the agent
Instructions loaded
≈74 tok
1 file · 11 in bundle
Tool list per prompt
≈55,056 tok
162 tools · 340 per tool
Handshake
9412 ms
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 737
Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.
Known vulnerabilities
Not checked against OSV yet; the weekly check has not reached this version.