mcp@1.1.54
VERIFIEDPublisher claims: "Read/Link MCP for Schlüsseldienst Ludwigsburg ikeytz. Public read-only. ai-train=no." Observed in sandbox: calls www.ikeytz.com only, touches nothing outside the project, writes no memory.
Registry npm (MCP server) · listed in the official MCP RegistryPublisher ikeytz · publishing for 81 daysInstalls 0Last detonated 4d ago
Coverage
Server started and answered tools/list.- Tested
- MCP initialize and tools/list · every tool description, for hidden instructions · every file read, file written and host contacted by what ran
- Not tested
- what the tools do when called with real credentials
Before you give it your token
- It will ask for
- no credential variables read in the code
- Where it talks to
- ikeytz.com (its own)
- What the honeypot saw
- no credential files read · reached only www.ikeytz.com (its own)
- What we could not test
- what the tools do when called with real credentials
Reasonable to connect. No credential asked for, no third-party host named, Server started and answered tools/list.
Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-10 and scored it 85/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: calls www.ikeytz.com only, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 20 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
20snetworkCONNECT tcp://www.ikeytz.com:443
20snetworkCONNECT tcp://www.ikeytz.com:443
20sclaimed47 tools: site_overview, get_business_identity, list_nav, list_footer, list_locales, resolve_locale_url, get_prices, get_ort_datetime, get_invoice_line_items, list_services, get_emergency, list_auswahl, get_auswahl_item, list_service_areas, get_service_area, get_geo_office, get_contact, get_legal, get_about, get_partner_info, get_links, get_it, get_mcp_hub, get_review_url, list_faq
20sprocessscript backend runs setup only
20sprocessno install scripts to re-run
Static findings
MEDIUM
npx invocation of non-well-known packagesrc/cli.js:279 · npx invocation of non-well-known package — may execute untrusted code
AST06lines.push(` ${ex.replace("ikeytz-mcp ", "npx -y @ikeytz/mcp ")}`);Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagesrc/proxy.js:177 · npx invocation of non-well-known package — may execute untrusted code
AST06npx -y @ikeytz/mcp help ohne globale InstallationFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagesrc/proxy.js:179 · npx invocation of non-well-known package — may execute untrusted code
AST06npx -y @ikeytz/mcp readmeFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagesrc/cli.js:228 · npx invocation of non-well-known package — may execute untrusted code
AST06" npx -y @ikeytz/mcp help same without global install",Fix: Pin versions and sources; vendor anything fetched at install time.LOW
Unpinned dependencysrc/cli.js:221 · Unpinned dependency
AST06" ikeytz-mcp update [version] npm i -g @ikeytz/mcp@latest",Fix: Pin the exact version (`[email protected]`, `==1.2.3`) so every install gets the bytes that were reviewed.MEDIUM
npx invocation of non-well-known packagesrc/proxy.js:178 · npx invocation of non-well-known package — may execute untrusted code
AST06npx -y @ikeytz/mcp listFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagesrc/cli.js:230 · npx invocation of non-well-known package — may execute untrusted code
AST06" npx -y @ikeytz/mcp readme",Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
MCP server using network transport (SSE/HTTP)src/tools-catalog.json:2328 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04… { "name": "get_llms_mcp_server", "description": "WHAT: Fetch /llms-mcp-server.txt — prose catalog of THIS HTTP server (47 Read/Link tools, how to call, no login). Same as get_discovery(which…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
npx invocation of non-well-known packagesrc/proxy.js:180 · npx invocation of non-well-known package — may execute untrusted code
AST06npx -y @ikeytz/mcp NAME …Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagesrc/cli.js:229 · npx invocation of non-well-known package — may execute untrusted code
AST06" npx -y @ikeytz/mcp list",Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
MCP server using network transport (SSE/HTTP)src/tools-catalog.json:2472 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04…port (document.modelContext). USE for WebMCP/UI discovery copy. Prefer get_llms_mcp_server for the machine/server catalog text; prefer get_llms_txt for the general site llms index. Optional offset/limit — see schema. Not this streamable-ht…Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
File type combined with upload actionsrc/cli.js:695 · File type combined with upload action — agent may exfiltrate local data files
AST07`SID=$(curl -sS -D - -o /tmp/ikeytz-mcp-init.json -X POST '${DEFAULT_MCP_URL}' \\`,Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actionsrc/tools-catalog.json:707 · File type combined with upload action — agent may exfiltrate local data files
AST07… { "name": "get_ai_txt", "description": "WHAT: Fetch /.well-known/ai.txt — site-wide crawl/training policy (ai-input yes with attribution, ai-train=no, contact). USE for policy before quoting. Pre…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
npx invocation of non-well-known packagesrc/cli.js:231 · npx invocation of non-well-known package — may execute untrusted code
AST06" npx -y @ikeytz/mcp <tool> [flags]",Fix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Instructions loaded
≈72 tok
1 file · 9 in bundle
Tool list per prompt
≈11,949 tok
47 tools · 254 per tool
Handshake
3666 ms
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 387
Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.
Known vulnerabilities
No advisories in OSV for @ikeytz/mcp@1.1.54 as of 4d ago. This is the package itself, not its dependencies.