mcp-servers@0.1.10
VERIFIED· not startedPublisher claims: "Simple MCP Server Collection, Packaged" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry PyPI (MCP server)Publisher assagman · publishing for 545 daysInstalls 55Last detonated 5d ago
Coverage
Not started: dependency install failed; the server itself was not observed.- Tested
- the dependency install step · every file read, file written and host contacted by what ran
- Not tested
- server startup · the tool list · tool behavior
What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.
Before you give it your token
- It will ask for
BRAVE_API_KEYTAVILY_API_KEYConfiguration, not credentials: SEARXNG_BASE_URL- Where it talks to
- no vendor host named in the codeAlso brave.com, githubusercontent.com, no-color.org, tavily.com — not the publisher's domain; check what for before connecting.
- What the honeypot saw
- no credential files read · no network
- What we could not test
- server startup · the tool list · tool behavior
Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names brave.com, githubusercontent.com, no-color.org, tavily.com as well as its own vendor. The guard injects BRAVE_API_KEY, TAVILY_API_KEY only into requests to the host you bind (and its subdomains) and refuses the rest.
$vet-skills run --net declared -- uvx mcp-servers
Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-09 and scored it 80/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.1sprocessdependency install exit 1 ·
0.1sclaimednot started: dependency install failed (exit 1); the server itself was not observed
0.1sprocessscript backend runs setup only
0.1sprocessno install scripts to re-run
Static findings
HIGH
Access to sensitive file pathsmcp_servers/__init__.py:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05DEFAULT_ENV_FILE = DEFAULT_CONFIG_DIR / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Python subprocess execution detectedmcp_servers/filesystem.py:296 · Python subprocess execution detected
AST05completed = subprocess.run(cmd, check=True, text=True, capture_output=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedmcp_servers/filesystem.py:361 · Python subprocess execution detected
AST05completed = subprocess.run(cmd, check=True, text=True, capture_output=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/base.py:167 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04_ = asyncio.create_task(self.mcp_server.run_streamable_http_async())Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/brave.py:56 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04model_config = MCPServerHttpBaseSettings.model_configFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/base.py:193 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04def get_mcp_server_streamable_http(self) -> MCPServerStreamableHTTP:Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
Python subprocess execution detectedmcp_servers/filesystem.py:481 · Python subprocess execution detected
AST05result = subprocess.run(command, capture_output=True, text=True, check=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedmcp_servers/cli_app.py:183 · Python subprocess execution detected
AST05result = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Access to sensitive file pathsmcp_servers/cli_app.py:560 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05init_env_parser = init_subparser.add_parser("env", help="Initialize .env")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/tavily.py:7 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04from mcp_servers.base import MCPServerHttpBase, MCPServerHttpBaseSettingsFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/base.py:194 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04"""Returns an MCPServerStreamableHTTP."""Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.HIGH
Access to sensitive file pathsmcp_servers/cli_app.py:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05url = f"https://raw.githubusercontent.com/assagman/mcp_servers/refs/tags/v{mcp_servers.__version__}/.env.example"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/tavily.py:135 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04model_config = MCPServerHttpBaseSettings.model_configFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
Python subprocess execution detectedmcp_servers/cli_app.py:199 · Python subprocess execution detected
AST05result = subprocess.run(rm_command, check=True, text=True, capture_output=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Access to sensitive file pathsmcp_servers/__init__.py:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05f".env file loaded successfully from {dotenv_path or 'default location'}."Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/searxng.py:62 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04model_config = MCPServerHttpBaseSettings.model_configFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/base.py:159 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04if not self.mcp_server or not self.mcp_server.streamable_http_app:Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
Python subprocess execution detectedmcp_servers/cli_app.py:167 · Python subprocess execution detected
AST05result = subprocess.run(command, check=True, text=True, capture_output=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/searxng.py:40 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04class SearXNGServerSettings(MCPServerHttpBaseSettings):Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/base.py:13 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04from pydantic_ai.mcp import MCPServerStreamableHTTPFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/brave.py:33 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04class BraveServerSettings(MCPServerHttpBaseSettings):Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/brave.py:59 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04class MCPServerBrave(MCPServerHttpBase):Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.HIGH
Access to sensitive file pathspyproject.toml:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05".env",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/tavily.py:112 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04class TavilyServerSettings(MCPServerHttpBaseSettings):Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.HIGH
Access to sensitive file pathsmcp_servers/__init__.py:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05"""Loads environment variables from a .env file."""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Python subprocess execution detectedmcp_servers/filesystem.py:406 · Python subprocess execution detected
AST05completed = subprocess.run(cmd, check=True, text=True, capture_output=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/searxng.py:6 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04from mcp_servers.base import MCPServerHttpBase, MCPServerHttpBaseSettingsFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/brave.py:6 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04from mcp_servers.base import MCPServerHttpBase, MCPServerHttpBaseSettingsFix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/tavily.py:138 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04class MCPServerTavily(MCPServerHttpBase):Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.MEDIUM
MCP server using network transport (SSE/HTTP)mcp_servers/searxng.py:65 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04class MCPServerSearxng(MCPServerHttpBase):Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.HIGH
Access to sensitive file pathsmcp_servers/__init__.py:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05"No .env file found or it was empty. Please consider running `mcpserver init`"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.Cost to the agent
Instructions loaded
≈46 tok
1 file · 14 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0
Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.
Known vulnerabilities
No advisories in OSV for mcp-servers@0.1.10 as of 5d ago. This is the package itself, not its dependencies.