Is mcp@4.0.0-beta.5 safe to install?

mcp@4.0.0-beta.5

VERIFIED

Publisher claims: "Azure MCP Server - Model Context Protocol implementation for Azure" Observed in sandbox: calls registry.npmjs.org only, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher azure · joined 10 days agoInstalls 515KLast detonated 2 h ago

$claude mcp add mcp -- npx -y @azure/mcp

Watch Report an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-04 and scored it 87/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: calls registry.npmjs.org only, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 5 s · 2 scenarios · 0 deviations

t+CategoryObserved action

0.2sprocessexited 1: Missing required package: '@azure/mcp-linux-x64'. Follow the troubleshooting steps - https://aka.ms/azmcp/troubleshooting#platform-package-installation-issues

4.5snetworkCONNECT https://registry.npmjs.org

4.5sprocessexec /usr/bin/timeout

4.5sprocessexec /usr/local/bin/npm

4.5sprocessexited 1: npm error A complete log of this run can be found in: /tmp/ks-detonate-F3R6FL/task/home/.npm/_logs/2026-11-04T22_22_43_539Z-debug-0.log

4.5sclaimedno tools/list reply (exit 1)

4.5sprocessscript backend runs setup only

Static findings

MEDIUM

npx invocation of non-well-known packageindex.js:278 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packageindex.js:280 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

npx invocation of non-well-known packageindex.js:279 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.

AST06

HIGH

Coercive compliance languageREADME.md:769 · Coercive compliance languageFix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01