3tears-mcp@0.77.0

VERIFIED

Publisher claims: "Shared MCP framework: McpServer + McpTool + PlatformHttpClient + per-tool RBAC backed by mcp_tool_grants and the task-02 epoch broadcast" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher pacepace · joined 0 days agoInstalls 8,798Last detonated 2 h ago

$claude mcp add 3tears-mcp -- uvx 3tears-mcp

Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Process kill commandtests/unit/test_auth.py:558 · Process kill command — agent can terminate processes

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)SKILL.md:6 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)src/threetears/mcp/server.py:664 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)pyproject.toml:8 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)src/threetears/mcp/server.py:524 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

MEDIUM

MCP server using network transport (SSE/HTTP)src/threetears/mcp/server.py:566 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04

HIGH

Python subprocess execution detectedtests/unit/test_imports_without_grants.py:112 · Python subprocess execution detected

AST05

MEDIUM

MCP server using network transport (SSE/HTTP)PKG-INFO:4 · MCP server using network transport (SSE/HTTP) — data sent over network

AST04