Is mcp@1.26.98 safe to install?

mcp@1.26.98

VERIFIED· not started

Publisher claims: "Social intelligence for 10 networks: read posts and trends, monitor brand mentions, then create." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server) · listed in the official MCP RegistryPublisher nooticr · publishing for 70 daysInstalls 7,217Last detonated 3d ago

$claude mcp add mcp -- npx -y @nooticr/mcp

Watch Report an issue

Coverage

Not started: dependency install failed; the server itself was not observed.

Tested: the dependency install step · every file read, file written and host contacted by what ran
Not tested: server startup · the tool list · tool behavior

What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

It will ask for: NOOTICR_ACCESS_TOKENNOOTICR_API_KEYNOOTICR_CREDENTIALS_FILEConfiguration, not credentials: MCP_SERVER_URL, NOOTICR_API_URL, NOOTICR_BASE_URL, NOOTICR_PORT, NOOTICR_PUBLIC_URL, NOOTICR_TRANSPORT, PUBLIC_URL
Where it talks to: nooticr.com (its own)Also your-store.com, amazon.com, acme.dev, posthog.com, tiktok.com, instagram.com, youtube.com, douyin.com, xiaohongshu.com, x.com, twitter.com, bilibili.com, linkedin.com, ggpht.com — not the publisher's domain; check what for before connecting.
What the honeypot saw: no credential files read · no network
What we could not test: server startup · the tool list · tool behavior

Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names your-store.com, amazon.com, acme.dev, posthog.com, tiktok.com, instagram.com, youtube.com, douyin.com, xiaohongshu.com, x.com, twitter.com, bilibili.com, linkedin.com, ggpht.com as well as its own vendor. The guard injects NOOTICR_ACCESS_TOKEN, NOOTICR_API_KEY, NOOTICR_CREDENTIALS_FILE only into requests to nooticr.com (and its subdomains) and refuses the rest.

$vet-skills run --secrets NOOTICR_ACCESS_TOKEN=nooticr.com,NOOTICR_API_KEY=nooticr.com,NOOTICR_CREDENTIALS_FILE=nooticr.com -- npx -y @nooticr/mcp

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-11 and scored it 89/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 9 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

8.5sprocessdependency install exit 1 · (Use `node --trace-warnings ...` to show where the warning was created) npm error Cannot read properties of null (reading 'edgesOut') npm error A complete log of this run can be found in: /tmp/ks-detonate-am8Y87/task/home/.npm/_logs/2026-11-11T06_44_05_628Z-debug-0.log

8.5sclaimednot started: dependency install failed (exit 1); the server itself was not observed

8.5sprocessscript backend runs setup only

8.5sprocessno install scripts to re-run

Static findings

MEDIUM

npx invocation of non-well-known packagedist/index.js:405 · npx invocation of non-well-known package — may execute untrusted code"Sign in as yourself for this one: `npx nooticr-mcp login` " +Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/index.js:113 · npx invocation of non-well-known package — may execute untrusted code"(npx @nooticr/mcp api-key create).",Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/auth.js:202 · npx invocation of non-well-known package — may execute untrusted codethrow new NooticrAuthError("Not authenticated with nooticr. Run `npx nooticr-mcp login` to sign in " +Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/auth.js:205 · npx invocation of non-well-known package — may execute untrusted code"(see `npx nooticr-mcp --help`).");Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/index.js:407 · npx invocation of non-well-known package — may execute untrusted code: "Sign in first: `npx nooticr-mcp login` (or `login --email ... --password ...`). " +Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/index.js:444 · npx invocation of non-well-known package — may execute untrusted code" NOOTICR_API_KEY=<key> npx nooticr-mcp\n\n" +Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/idempotency.js:17 · npx invocation of non-well-known package — may execute untrusted code* and a local `npx @nooticr/mcp` user whose call was cut short mid-flight (aFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

MCP server using network transport (SSE/HTTP)dist/shared/tools.js:2846 · MCP server using network transport (SSE/HTTP) — data sent over networkconst mcpUrl = process.env.MCP_SERVER_URL || "https://mcp.nooticr.com";Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.

AST04

MEDIUM

npx invocation of non-well-known packagedist/index.js:292 · npx invocation of non-well-known package — may execute untrusted code"`npx nooticr-mcp api-key list` (signed in) shows which keys are still active.");Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/shared/tools.js:316 · npx invocation of non-well-known package — may execute untrusted code`endpoint) with a live one — \`npx @nooticr/mcp api-key list\` shows which are ` +Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagedist/auth.js:204 · npx invocation of non-well-known package — may execute untrusted code"to a key from `npx nooticr-mcp api-key create` " +Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packagepackage.json:44 · npx invocation of non-well-known package — may execute untrusted code

… "chain:map": "bash scripts/run-chain-map.sh", "verify": "npm run build && npx tsc --noEmit && (cd cloudflare && npx tsc --noEmit) && npx vitest run && npm run co…

Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

Cost to the agent

Instructions loaded

≈83 tok

1 file · 58 in bundle

Tool list per prompt

≈0 tok

0 tools · 0 per tool

Handshake

no reply

launch to tools/list, stdio

Undocumented tools

description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for @nooticr/mcp@1.26.98 as of 3d ago. This is the package itself, not its dependencies.