Enterprise AI Platform with guardrails, MCP registry, gateway & orchestrator
This report presents the forensic synthetic code analysis of archestra-ai/archestra, a TypeScript project with 4,235 GitHub stars. SynthScan v2.0 examined 1,614,242 lines of code across 5946 source files, recording 4407 pattern matches distributed across 23 syntactic categories. The overall adjusted score of 4.8 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 4407 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | migration-kit/tests/test_contracts.py | 39 | def test_parse_item_rejects_unknown_kind() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 44 | def test_parse_item_rejects_missing_required_field() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 49 | def test_parse_bundled_file_rejects_bad_encoding() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 54 | def test_parse_plan_roundtrips_and_validates() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 64 | def test_parse_plan_rejects_bad_enums() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 74 | def test_parse_bundled_file_allows_empty_content() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 88 | def test_parse_bundled_file_still_requires_string_content() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 93 | def test_non_migrate_decision_may_omit_target_kind() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 102 | def test_migrate_decision_requires_target_kind() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 107 | def test_user_answer_validators_reject_bad_values() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 116 | def test_user_answer_validators_accept_good_values() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 123 | def test_archestra_hook_event_maps_supported_events_only() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 131 | def test_archestra_file_name_validates_basename_and_extension() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 139 | def test_validate_requirements_trims_and_bounds() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 152 | def test_require_requirements_is_none_when_absent() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 157 | def test_optional_agent_id_requires_uuid_shape() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 165 | def test_optional_file_name_validates_when_present() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 172 | def test_require_hook_content_enforces_length() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 180 | def test_require_dict_and_list_raise_on_wrong_shape() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_contracts.py | 187 | def test_secret_key_regex_matches_real_keys_not_innocent_words() -> None: | CODE |
| LOW | migration-kit/tests/test_contracts.py | 13 | def test_inventory_roundtrips_through_json() -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 59 | def test_finds_claude_md_as_primary(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 65 | def test_subagent_carries_tool_allowlist(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 71 | def test_skill_bundles_sibling_files(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 130 | def test_inline_hook_has_no_bundled_script(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 138 | def test_env_prefix_hook_is_flagged_in_summary(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 146 | def test_unsupported_event_hook_noted_for_manual(inv: Inventory) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 152 | def test_unresolved_hook_when_script_missing(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 228 | def test_script_position_only_matches_executable_or_interpreter_arg(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 235 | def test_script_path_in_echo_argument_is_inline_not_bundled(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 240 | def test_interpreter_flags_before_script_count_as_extra_args(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 353 | def test_dangling_refs_flags_only_existing_unbundled_files(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 361 | def test_dangling_refs_skips_bundled_files(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_discover.py | 369 | def test_dangling_refs_resolves_against_multiple_bases(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 32 | def test_redact_value_catches_embedded_token() -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 39 | def test_redact_catches_embedded_token_under_innocuous_key() -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 83 | def test_local_tool_bundles_script(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 91 | def test_mcp_stdio_and_remote(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 102 | def test_mcp_secret_env_is_redacted(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 167 | def test_same_hook_slot_in_two_config_files_gets_distinct_ids(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 178 | def test_empty_or_env_only_command_is_unresolved(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 193 | def test_bundled_hook_resolves_with_relative_root(monkeypatch: pytest.MonkeyPatch) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 251 | def test_bundled_script_through_symlinked_root_alias_does_not_crash(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 272 | def test_inline_env_prefix_is_not_flagged(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 286 | def test_hook_command_inline_secret_redacted(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 293 | def test_body_secret_warned_but_left_intact(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 308 | def test_no_structured_secret_leaks_in_serialized_inventory(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 315 | def test_symlink_escaping_source_is_not_bundled(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 332 | def test_symlinked_skill_dir_is_skipped(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 382 | def test_dangling_refs_ignores_root_escaping_ref(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 387 | def test_discover_warns_on_dangling_command_reference(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 399 | def test_discover_flags_ref_captured_as_separate_item(tmp_path: Path) -> None: | CODE |
| LOW | migration-kit/tests/test_discover.py | 413 | def test_fixture_skill_flags_repo_root_tool_reference(inv: Inventory) -> None: | CODE |
| LOW | migration-kit/tests/test_installer.py | 18 | def test_writes_allowlist_as_siblings(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_installer.py | 37 | def test_unsafe_paths_are_rejected(tmp_path: Path, rel: str) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_installer.py | 42 | def test_path_outside_allowlist_is_rejected(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_installer.py | 47 | def test_destination_symlink_is_rejected(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_installer.py | 56 | def test_file_destination_is_rejected(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_installer.py | 63 | def test_nonempty_destination_requires_force(tmp_path: Path) -> None: | CODE |
| LOW⚡ | migration-kit/tests/test_installer.py | 73 | def test_force_removes_stale_managed_files(tmp_path: Path) -> None: | CODE |
| 2240 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | platform/backend/src/services/mcp-reinstall.test.ts | 987 | default: "your-api-key", | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/dataeval__dingo.json | 44 | "readme": "<div align=\"center\" xmlns=\"http://www.w3.org/1999/html\">\n<!-- logo -->\n<p align=\"center\">\n <img s | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 35 | "readme": "# Video Editor MCP server\n\n[](https://www.video-jungl | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 35 | "readme": "# Video Editor MCP server\n\n[](https://www.video-jungl | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 41 | "args": ["run", "video-editor-mcp", "YOURAPIKEY"], | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 46 | "args": ["run", "video-editor-mcp", "YOURAPIKEY"], | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 53 | "args": ["video-editor-mcp", "YOURAPIKEY"], | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 58 | "args": ["--directory", "/Users/YOURDIRECTORY/video-editor-mcp", "run", "video-editor-mcp", "YOURAPIKEY"], | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 63 | "args": ["--directory", "/Users/<PATH_TO>/video-jungle-mcp", "run", "video-editor-mcp", "<YOURAPIKEY>"], | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 63 | "args": ["--directory", "/Users/<PATH_TO>/video-jungle-mcp", "run", "video-editor-mcp", "<YOURAPIKEY>"], | CODE |
| HIGH | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 77 | "YOURAPIKEY" | CODE |
| HIGH⚡ | …a/mcp-evaluations/conechoai__openai-websearch-mcp.json | 28 | "readme": "# OpenAI WebSearch MCP Server\n\nThis MCP server provides access to OpenAI's websearch functionality throug | CODE |
| HIGH⚡ | …a/mcp-evaluations/conechoai__openai-websearch-mcp.json | 36 | "OPENAI_API_KEY": "your-api-key-here" | CODE |
| HIGH⚡ | …a/mcp-evaluations/conechoai__openai-websearch-mcp.json | 43 | "OPENAI_API_KEY": "your-api-key-here" | CODE |
| HIGH⚡ | …p-evaluations/alchemyplatform__alchemy-mcp-server.json | 29 | "readme": "# Alchemy MCP Server\n\nA Model Context Protocol (MCP) server that enables AI agents to interact with Alche | CODE |
| HIGH⚡ | …p-evaluations/alchemyplatform__alchemy-mcp-server.json | 37 | "ALCHEMY_API_KEY": "YOUR_API_KEY" | CODE |
| HIGH⚡ | …aluations/devflowinc__trieve__clients__mcp-server.json | 45 | "readme": "# trieve-mcp-server\n\n[](https://smithery.ai | CODE |
| HIGH | …aluations/devflowinc__trieve__clients__mcp-server.json | 63 | "<your-api-key>", | CODE |
| HIGH⚡ | …ons/ycloud-developers__ycloud-whatsapp-mcp-server.json | 44 | "readme": "# YCloud WhatsApp API MCP 服务器\n\n[English](README-en.md) | 中文\n\n这是一个基于[Model Context Protocol (MCP)](https | CODE |
| HIGH⚡ | …ons/ycloud-developers__ycloud-whatsapp-mcp-server.json | 53 | "API_HEADERS": "X-API-Key:your-api-key-here" | CODE |
| HIGH⚡ | …ons/ycloud-developers__ycloud-whatsapp-mcp-server.json | 61 | "API_HEADERS": "X-API-Key:your-api-key-here" | CODE |
| HIGH | …log/data/mcp-evaluations/burtthecoder__mcp-shodan.json | 28 | "readme": "# Shodan MCP Server\n\n[](https://smit | CODE |
| HIGH | …/data/mcp-evaluations/integromat__make-mcp-server.json | 42 | "readme": "# Make MCP Server (legacy)\n\n**A modern, cloud-based version of the Make MCP Server is now available. For | CODE |
| HIGH | …/data/mcp-evaluations/integromat__make-mcp-server.json | 50 | "MAKE_API_KEY": "<your-api-key>", | CODE |
| HIGH⚡ | …log/data/mcp-evaluations/tacticlaunch__mcp-linear.json | 28 | "readme": "<p align=\"center\">\n <img src=\"https://github.com/tacticlaunch/mcp-linear/blob/main/docs/linear-app-ico | CODE |
| HIGH⚡ | …log/data/mcp-evaluations/tacticlaunch__mcp-linear.json | 36 | "LINEAR_API_TOKEN": "<YOUR_TOKEN>" | CODE |
| HIGH | …og/data/mcp-evaluations/intruder-io__intruder-mcp.json | 28 | "readme": "# Intruder MCP\n\nLet MCP clients like Claude and Cursor control [Intruder](https://www.intruder.io/). For | CODE |
| HIGH | …og/data/mcp-evaluations/intruder-io__intruder-mcp.json | 36 | "INTRUDER_API_KEY": "your-api-key" | CODE |
| HIGH | …og/data/mcp-evaluations/intruder-io__intruder-mcp.json | 48 | "INTRUDER_API_KEY=<your-api-key>", | CODE |
| HIGH | …og/data/mcp-evaluations/intruder-io__intruder-mcp.json | 52 | "INTRUDER_API_KEY": "<your-api-key>" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/doggybee__mcp-server-ccxt.json | 108 | "readme": "# CCXT MCP Server\n\n<img src=\"assets/ccxt-logo.png\" alt=\"CCXT Logo\" width=\"100\" height=\"100\"/>\n\n | CODE |
| HIGH⚡ | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 20 | "readme": "# Unified Context Layer (UCL) MCP Server\n\nUnified Context Layer (UCL) is a multi-tenant Model Context Pro | CODE |
| HIGH | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 76 | "args": ["--api_key", "YOUR_API_KEY", "--space_id", "YOUR_WORKSPACE_ID"] | CODE |
| HIGH | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 90 | "YOUR_API_KEY", | CODE |
| HIGH | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 114 | "API_KEY": "YOUR_API_KEY", | CODE |
| HIGH | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 129 | "API_KEY=YOUR_API_KEY", | CODE |
| HIGH | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 141 | "API_KEY": "YOUR_API_KEY", | CODE |
| HIGH⚡ | …a/mcp-evaluations/chanmeng666__server-google-news.json | 28 | "readme": "[](http | CODE |
| HIGH⚡ | …a/mcp-evaluations/chanmeng666__server-google-news.json | 36 | "SERP_API_KEY": "your-api-key" | CODE |
| HIGH⚡ | …a/mcp-evaluations/chanmeng666__server-google-news.json | 43 | "SERP_API_KEY": "your-api-key" | CODE |
| HIGH | …log/data/mcp-evaluations/kukapay__blocknative-mcp.json | 28 | "readme": "# Blocknative MCP Server\n\nAn MCP server that provides real-time gas price predictions across multiple blo | CODE |
| HIGH | mcp-catalog/data/mcp-evaluations/apecloud__aperag.json | 24 | "description": "A valid API key from your ApeRAG settings. Important: Replace 'your-api-key-here' with a valid API | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/apecloud__aperag.json | 36 | "readme": "# ApeRAG\n[](https://arch | CODE |
| HIGH | …/data/mcp-evaluations/bright8192__esxi-mcp-server.json | 103 | "readme": "# ESXi MCP Server\n\nA VMware ESXi/vCenter management server based on MCP (Model Control Protocol), providi | CODE |
| HIGH | mcp-catalog/data/mcp-evaluations/tumf__web3-mcp.json | 24 | "description": "Your Ankr RPC endpoint (e.g., https://rpc.ankr.com/your_api_key)", | CODE |
| HIGH⚡ | …data/mcp-evaluations/khan2a__telephony-mcp-server.json | 87 | "readme": "\n\n\n\n# Ragie Mode | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 57 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 64 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 71 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 84 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 91 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/ragieai__ragie-mcp-server.json | 98 | "RAGIE_API_KEY": "your_api_key" | CODE |
| HIGH⚡ | …og/data/mcp-evaluations/panther-labs__mcp-panther.json | 35 | "readme": "# Panther MCP Server\n\n[](https://smit | CODE |
| HIGH | …alog/data/mcp-evaluations/effytech__freshdesk_mcp.json | 53 | "FRESHDESK_API_KEY=<your_api_key>", | CODE |
| HIGH | …alog/data/mcp-evaluations/effytech__freshdesk_mcp.json | 58 | "FRESHDESK_API_KEY": "<your_api_key>", | CODE |
| HIGH⚡ | …/data/mcp-evaluations/offorte__offorte-mcp-server.json | 44 | "readme": "# Offorte MCP Server <!-- omit in toc -->\n\nMCP server for Offorte - Create & send proposals using AI.\n\n | CODE |
| HIGH⚡ | …/data/mcp-evaluations/offorte__offorte-mcp-server.json | 53 | "OFFORTE_API_KEY": "<YOUR_TOKEN>" | CODE |
| HIGH⚡ | …/data/mcp-evaluations/offorte__offorte-mcp-server.json | 61 | "OFFORTE_API_KEY": "<YOUR_TOKEN>" | CODE |
| 165 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …omponents/app-session-recording/app-session-player.tsx | 3260 | // One seamless field-in-a-card: the textarea carries no chrome of its | COMMENT |
| MEDIUM | …atform/backend/src/skills/skill-catalog.generated.json | 544 | [17,"plugins/dotnet-maui/skills/maui-data-binding","maui-data-binding","Guidance for .NET MAUI XAML and C# data bindings | CODE |
| MEDIUM | …atform/backend/src/skills/skill-catalog.generated.json | 805 | [25,"skills/csharp-docs","csharp-docs","Ensure that C# types are documented with XML comments and follow best practices | CODE |
| MEDIUM | …atform/backend/src/skills/skill-catalog.generated.json | 823 | [25,"skills/dotnet-best-practices","dotnet-best-practices","Ensure .NET/C# code meets best practices for the solution/pr | CODE |
| MEDIUM | …form/backend/src/routes/chat/model-fetchers/bedrock.ts | 288 | // Authoritative underlying model for pricing — more robust than parsing | COMMENT |
| MEDIUM | …rm/backend/src/services/apps/app-sdk-injection.test.ts | 25 | // brace-matched depth scan over the comment-stripped body (robust to reformatting, | COMMENT |
| MEDIUM | platform/e2e-tests/tests/mcp-install.spec.ts | 330 | // and rename" — match any to keep the test robust. | COMMENT |
| MEDIUM | platform/scripts/e2e-lite.sh | 2 | # Lite e2e harness: the platform as one quickstart-mode container plus | COMMENT |
| MEDIUM | platform/scripts/e2e-lite.sh | 101 | # The harness owns these host ports. A dev stack (tilt up / pnpm dev) uses | COMMENT |
| MEDIUM | platform/helm/e2e-tests/values.yaml | 71 | # shared with the lite e2e harness which docker-mounts the same file. | COMMENT |
| MEDIUM | platform/helm/e2e-tests/templates/keycloak.yaml | 126 | # inline document: the lite e2e harness docker-mounts the same file, so the | COMMENT |
| MEDIUM | mcp-catalog/data/mcp-evaluations/joelio__stocky.json | 36 | "readme": "# <div align=\"center\"><br/>Stocky<br/>*Find beautiful royalty-free stock images | CODE |
| MEDIUM | …ta/mcp-evaluations/takashiishida__arxiv-latex-mcp.json | 18 | "readme": "# arxiv-latex MCP Server\n[](https://op | CODE |
| MEDIUM | …ta/mcp-evaluations/takashiishida__arxiv-latex-mcp.json | 18 | "readme": "# arxiv-latex MCP Server\n[](https://op | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/dataeval__dingo.json | 44 | "readme": "<div align=\"center\" xmlns=\"http://www.w3.org/1999/html\">\n<!-- logo -->\n<p align=\"center\">\n <img s | CODE |
| MEDIUM | …/data/mcp-evaluations/fosdickio__binary_ninja_mcp.json | 18 | "readme": "# Binary Ninja MCP <img src=\"images/binja.png\" height=\"24\" style=\"margin-left: 5px; vertical-align: mi | CODE |
| MEDIUM | …data/mcp-evaluations/haris-musa__excel-mcp-server.json | 38 | "readme": "<p align=\"center\">\n <img src=\"https://raw.githubusercontent.com/haris-musa/excel-mcp-server/main/asset | CODE |
| MEDIUM | …talog/data/mcp-evaluations/vivekvells__mcp-pandoc.json | 18 | "readme": "[](https://pypi.python.org/pypi/mcp-pandoc)\n[](https://github.com | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| MEDIUM⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| MEDIUM⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/r-huijts__strava-mcp.json | 59 | "readme": "[](https://mseep.a | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/r-huijts__strava-mcp.json | 59 | "readme": "[](https://mseep.a | CODE |
| LOW | …talog/data/mcp-evaluations/patrickpalmer__mayamcp.json | 18 | "readme": "# Maya MCP\r\nModel Context Protocol (MCP) server implementation for Autodesk Maya\r\n\r\nTested with Maya | CODE |
| MEDIUM | …p-evaluations/jagan-shanmugam__open-streetmap-mcp.json | 18 | "readme": "# OpenStreetMap (OSM) MCP Server\n\nAn OpenStreetMap MCP server implementation that enhances LLM capabiliti | CODE |
| MEDIUM⚡ | …mcp-evaluations/samuelgursky__davinci-resolve-mcp.json | 41 | "readme": "# DaVinci Resolve MCP Server\n\n[](https://g | CODE |
| MEDIUM⚡ | …mcp-evaluations/samuelgursky__davinci-resolve-mcp.json | 41 | "readme": "# DaVinci Resolve MCP Server\n\n[](https://g | CODE |
| MEDIUM⚡ | …mcp-evaluations/samuelgursky__davinci-resolve-mcp.json | 41 | "readme": "# DaVinci Resolve MCP Server\n\n[](https://g | CODE |
| MEDIUM | …p-catalog/data/mcp-evaluations/jen6__ticktick-mcp.json | 60 | "readme": "# TickTick MCP Server\n\n<!-- Add relevant badges here -->\n[ to read image metadata on-demand, entirely offline | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/stass__exif-mcp.json | 18 | "readme": "# exif-mcp\n\nAn MCP server that allows LLMs (or humans) to read image metadata on-demand, entirely offline | CODE |
| MEDIUM⚡ | …uations/couchbase-ecosystem__mcp-server-couchbase.json | 81 | "readme": "# Couchbase MCP Server\n\nAn [MCP](https://modelcontextprotocol.io/) server implementation of Couchbase tha | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/altinoren__utopia.json | 18 | "readme": "# Utopia MCP Server\n\nUtopia is a simulation MCP Server designed to test and experiment with common househ | CODE |
| MEDIUM⚡ | …ta/mcp-evaluations/vitorpavinato__ncbi-mcp-server.json | 36 | "readme": "# NCBI Literature Search MCP Server\n\nA Model Context Protocol (MCP) server for searching NCBI databases, | CODE |
| MEDIUM⚡ | …ta/mcp-evaluations/vitorpavinato__ncbi-mcp-server.json | 36 | "readme": "# NCBI Literature Search MCP Server\n\nA Model Context Protocol (MCP) server for searching NCBI databases, | CODE |
| MEDIUM | …g/data/mcp-evaluations/davidlin2k__pox-mcp-server.json | 28 | "readme": "# POX MCP Server\n\n## Overview\nA Model Context Protocol (MCP) server implementation that provides network | CODE |
| MEDIUM | …uations/chargebee__agentkit__modelcontextprotocol.json | 19 | "readme": "# Chargebee Model Context Protocol (MCP) Server\n\n Server\n\n\n\n[](https://modelcont | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| MEDIUM⚡ | …cp-evaluations/sapientpants__sonarqube-mcp-server.json | 67 | "readme": "# SonarQube MCP Server\n\n[](h | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/lfnovo__content-core.json | 18 | "readme": "# Content Core\n\n[](https://opensource | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/lfnovo__content-core.json | 18 | "readme": "# Content Core\n\n[](https://opensource | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/lfnovo__content-core.json | 18 | "readme": "# Content Core\n\n[](https://opensource | CODE |
| MEDIUM | …g/data/mcp-evaluations/r-huijts__firstcycling-mcp.json | 18 | "readme": "[](https://m | CODE |
| MEDIUM | …/hannesrudolph__imessage-query-fastmcp-mcp-server.json | 28 | "readme": "[](https://badge.f | CODE |
| MEDIUM | …alog/data/mcp-evaluations/sdglbl__mcp-claude-code.json | 18 | "readme": "# MCP Claude Code\n\nAn implementation of Claude Code capabilities using the Model Context Protocol (MCP).\ | CODE |
| MEDIUM | …alog/data/mcp-evaluations/sdglbl__mcp-claude-code.json | 18 | "readme": "# MCP Claude Code\n\nAn implementation of Claude Code capabilities using the Model Context Protocol (MCP).\ | CODE |
| MEDIUM | …log/data/mcp-evaluations/burtthecoder__mcp-shodan.json | 28 | "readme": "# Shodan MCP Server\n\n[](https://smit | CODE |
| 490 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | README.md | 64 | - 🛡️ **Deterministic guardrails** for [tool calls](https://archestra.ai/docs/platform-ai-tool-guardrails), | CODE |
| MEDIUM | README.md | 66 | [Lethal Trifecta](https://archestra.ai/docs/platform-ai-tool-guardrails#the-lethal-trifecta) protections. | CODE |
| MEDIUM | migration-kit/SKILL.md | 7 | # Migrate an agentic PoC to Archestra | COMMENT |
| MEDIUM | …form/frontend/src/app/mcp/registry/new/page.client.tsx | 87 | // review tools, configure guardrails. | COMMENT |
| MEDIUM | …rontend/src/app/mcp/registry/[id]/edit/page.client.tsx | 86 | : // "guardrails" merged into "tools"; keep old deep links working. | CODE |
| MEDIUM | platform/frontend/src/app/_parts/studio-nav.tsx | 288 | // LLMs. The URL stays /mcp/tool-guardrails — docs and deep links | COMMENT |
| MEDIUM | …orm/frontend/src/app/apps/_parts/app-create-dialog.tsx | 16 | // Seeded as the new app's description so the blank scaffold has a get-started | COMMENT |
| MEDIUM | …rm/frontend/src/components/chat/edit-policy-dialog.tsx | 19 | // name-based fallback lookup below, so it is optional: the tool-guardrails | COMMENT |
| MEDIUM | …rm/frontend/src/components/chat/chat-messages.utils.ts | 493 | // Owned-app management result (scaffold/edit/render_app): mount the | COMMENT |
| MEDIUM | …rm/frontend/src/components/chat/chat-messages.utils.ts | 957 | // scaffold/edit/render_app is covered too (its raw name is run_tool, which | COMMENT |
| MEDIUM | …orm/frontend/src/components/chat/compact-tool-call.tsx | 381 | // still-streaming scaffold/edit call) degrades to a plain tool circle. | COMMENT |
| MEDIUM | …orm/frontend/src/lib/chat/use-chat-preferences.test.ts | 679 | // agentic use. | COMMENT |
| MEDIUM | …atform/backend/src/clients/dual-llm-analysis-stream.ts | 92 | // Later agentic-loop steps re-evaluate the same history and confirm | COMMENT |
| MEDIUM | …m/backend/src/clients/dual-llm-analysis-stream.test.ts | 84 | // A later agentic-loop step re-confirms the same analysis from the | COMMENT |
| MEDIUM | platform/backend/src/tokenizers/base.ts | 42 | // The same conversation history is re-sent on every agentic turn, so counting | COMMENT |
| MEDIUM | platform/backend/src/types/app.ts | 349 | // template (no html), so the staged authoring flow is scaffold → edit_app. | COMMENT |
| MEDIUM | platform/backend/src/types/app.ts | 377 | // Input for the `refine_app` MCP tool: the step between scaffold and edit. It | COMMENT |
| MEDIUM | platform/backend/src/guardrails/trusted-data.test.ts | 570 | // The agentic loop replays the same history: only the first evaluation | COMMENT |
| MEDIUM | platform/backend/src/guardrails/trusted-data.test.ts | 1364 | // The agentic loop replays the whole history every turn, so past the | COMMENT |
| MEDIUM | platform/backend/src/guardrails/tool-invocation.test.ts | 480 | // rather than the LLM proxy's "monitors agentic traffic". | COMMENT |
| MEDIUM | platform/backend/src/guardrails/trusted-data.ts | 345 | // The agentic loop resends the full history on every round trip, so the | COMMENT |
| MEDIUM | …s/browser-stream/websocket/browser-stream.websocket.ts | 195 | // as the chat agentic loop. Closing it here would kill in-flight tool calls | COMMENT |
| MEDIUM | …s/browser-stream/websocket/browser-stream.websocket.ts | 196 | // from the agentic loop, causing AI_MissingToolResultsError. | COMMENT |
| MEDIUM | platform/backend/src/models/tool.ts | 1731 | // explicit default rows so the /mcp/guardrails UI shows the same | COMMENT |
| MEDIUM | platform/backend/src/models/tool.ts | 3785 | // Can be explicitly included for guardrails configuration. | COMMENT |
| MEDIUM | platform/backend/src/models/internal-mcp-catalog.ts | 115 | // A clone copies the source's tools + guardrails as provisional rows, and | COMMENT |
| MEDIUM | platform/backend/src/models/interaction.test.ts | 2763 | // Gemini request with function response (common in agentic workflows) | COMMENT |
| MEDIUM | …end/src/archestra-mcp-server/app-authoring-guidance.ts | 40 | // archestra.storage.get). Delivered once at scaffold time rather than repeated | COMMENT |
| MEDIUM | platform/backend/src/archestra-mcp-server/apps.test.ts | 220 | // Member may scaffold a personal app... | COMMENT |
| MEDIUM | platform/backend/src/archestra-mcp-server/apps.test.ts | 743 | // trace is the reserved name: a same-name scaffold is told the name is | COMMENT |
| MEDIUM | platform/backend/src/archestra-mcp-server/apps.test.ts | 4210 | // Forked off the scaffold rather than editing version 1 in place. | COMMENT |
| MEDIUM | …estra-mcp-server/apps.progressive-tool-loading.test.ts | 305 | // scaffold bare, then assign the discovered tool after the fact. | COMMENT |
| MEDIUM | platform/backend/src/archestra-mcp-server/run-tool.ts | 477 | // edit guardrails also gets a deep link to this tool's policy editor. | COMMENT |
| MEDIUM | …atform/backend/src/skills/skill-catalog.generated.json | 512 | [17,"plugins/dotnet-ai/skills/mcp-csharp-create","mcp-csharp-create","Create MCP servers using the C# SDK and .NET proje | CODE |
| MEDIUM | …atform/backend/src/skills/skill-catalog.generated.json | 544 | [17,"plugins/dotnet-maui/skills/maui-data-binding","maui-data-binding","Guidance for .NET MAUI XAML and C# data bindings | CODE |
| MEDIUM | …ckend/src/routes/proxy/responses-refusal-order.test.ts | 154 | // wins, and that snapshot is what the agentic loop dispatches from. | COMMENT |
| MEDIUM | platform/backend/src/routes/proxy/llm-proxy-handler.ts | 791 | // discovered-tool guardrails to any tools persisted below. | COMMENT |
| MEDIUM | platform/backend/src/routes/proxy/utils/tools.ts | 152 | // the guardrails page can filter observed tools by user and client. Built-in | COMMENT |
| MEDIUM | platform/backend/src/routes/proxy/utils/tools.test.ts | 132 | // session sensitive so downstream guardrails keep working. | COMMENT |
| MEDIUM | …kend/src/routes/proxy/utils/gateway-tool-names.test.ts | 129 | // every decorated name untouched, and guardrails then reasoned about the | COMMENT |
| MEDIUM | …ackend/src/routes/proxy/adapters/ollama-native.test.ts | 691 | // The guardrails key updates by the id `getMessages` handed out, so the | COMMENT |
| MEDIUM | …orm/backend/src/routes/proxy/adapters/ollama-native.ts | 238 | // Must use the same identity `toCommonFormat` handed to the guardrails, | COMMENT |
| MEDIUM | platform/backend/src/routes/mcp-gateway/utils.test.ts | 2991 | // The rest of the authoring surface (scaffold/read/edit/validate) works | COMMENT |
| MEDIUM | platform/backend/src/routes/mcp-gateway/utils.ts | 801 | // can edit guardrails, both gain a deep link to this tool's policy | COMMENT |
| MEDIUM | …orm/backend/src/services/scheduled-run-conversation.ts | 327 | // agentic loop); its request holds the full history and its response the final | COMMENT |
| MEDIUM | platform/backend/src/services/apps/app-run-link.ts | 3 | // Kept in one place so scaffold/edit/render/publish surface an identical, | COMMENT |
| MEDIUM | platform/backend/src/services/apps/app-mcp-backing.ts | 70 | // (APP_LAUNCH_TOOL_NAME) so it shows up in the guardrails UI and is | COMMENT |
| MEDIUM | platform/backend/src/services/apps/app-mcp-backing.ts | 162 | // non-model readers (the guardrails UI) current too. | COMMENT |
| MEDIUM | platform/shared/tool-refusal.test.ts | 79 | // not the LLM proxy's "monitors agentic traffic". | COMMENT |
| MEDIUM | …tform/archestra-rs/sandbox-core/src/backends/dagger.rs | 597 | /// warm-base user-setup command: scaffold the uv project, create the venv at | COMMENT |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/dataeval__dingo.json | 44 | "readme": "<div align=\"center\" xmlns=\"http://www.w3.org/1999/html\">\n<!-- logo -->\n<p align=\"center\">\n <img s | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/dataeval__dingo.json | 44 | "readme": "<div align=\"center\" xmlns=\"http://www.w3.org/1999/html\">\n<!-- logo -->\n<p align=\"center\">\n <img s | CODE |
| MEDIUM⚡ | …a/mcp-evaluations/conechoai__openai-websearch-mcp.json | 28 | "readme": "# OpenAI WebSearch MCP Server\n\nThis MCP server provides access to OpenAI's websearch functionality throug | CODE |
| MEDIUM⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| MEDIUM⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| MEDIUM⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| MEDIUM⚡ | …uations/couchbase-ecosystem__mcp-server-couchbase.json | 81 | "readme": "# Couchbase MCP Server\n\nAn [MCP](https://modelcontextprotocol.io/) server implementation of Couchbase tha | CODE |
| MEDIUM⚡ | …uations/couchbase-ecosystem__mcp-server-couchbase.json | 81 | "readme": "# Couchbase MCP Server\n\nAn [MCP](https://modelcontextprotocol.io/) server implementation of Couchbase tha | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/altinoren__utopia.json | 18 | "readme": "# Utopia MCP Server\n\nUtopia is a simulation MCP Server designed to test and experiment with common househ | CODE |
| MEDIUM⚡ | …aluations/devflowinc__trieve__clients__mcp-server.json | 45 | "readme": "# trieve-mcp-server\n\n[](https://smithery.ai | CODE |
| 128 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …orm/backend/src/utils/structured-output-repair.test.ts | 33 | '{"scores": [{"index": 0, "score": 9}]}\n```\nLet me know if you need more.', | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/joelio__stocky.json | 36 | "readme": "# <div align=\"center\"><br/>Stocky<br/>*Find beautiful royalty-free stock images | CODE |
| MEDIUM | …alog/data/mcp-evaluations/mahdin75__geoserver-mcp.json | 45 | "readme": "# GeoServer MCP Server\n\n<p align=\"center\">\n <img src=\"https://badge.mcpx.dev?type=server\" title=\"M | CODE |
| MEDIUM | …uations/automata-labs-team__mcp-server-playwright.json | 19 | "readme": "<h1 align=\"center\">MCP Server Playwright</h1>\n<p align=\"center\">\n <a href=\"https://www.automatalabs | CODE |
| MEDIUM | …talog/data/mcp-evaluations/vivekvells__mcp-pandoc.json | 18 | "readme": "[](https://pypi.python.org/pypi/mcp-pandoc)\n[](https://www.video-jungl | CODE |
| MEDIUM | …delcontextprotocol__servers-archived__src__sentry.json | 18 | "readme": "# mcp-server-sentry: A Sentry MCP server\n\n## Overview\n\nA Model Context Protocol server for retrieving a | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| MEDIUM | …data/mcp-evaluations/misiektoja__kill-process-mcp.json | 18 | "readme": "# kill-process-mcp 🔫\n\nCross-platform **MCP** (Model Context Protocol) server exposing tools to **list and | CODE |
| LOW⚡ | …catalog/data/mcp-evaluations/r-huijts__strava-mcp.json | 59 | "readme": "[](https://mseep.a | CODE |
| MEDIUM⚡ | …p-evaluations/alchemyplatform__alchemy-mcp-server.json | 29 | "readme": "# Alchemy MCP Server\n\nA Model Context Protocol (MCP) server that enables AI agents to interact with Alche | CODE |
| MEDIUM⚡ | …uations/couchbase-ecosystem__mcp-server-couchbase.json | 81 | "readme": "# Couchbase MCP Server\n\nAn [MCP](https://modelcontextprotocol.io/) server implementation of Couchbase tha | CODE |
| MEDIUM⚡ | …ta/mcp-evaluations/vitorpavinato__ncbi-mcp-server.json | 36 | "readme": "# NCBI Literature Search MCP Server\n\nA Model Context Protocol (MCP) server for searching NCBI databases, | CODE |
| LOW⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/romthpt__mcp-xrpl.json | 36 | "readme": "# XRP Ledger Model Context Protocol Server\n\n[](h | CODE |
| MEDIUM | …g/data/mcp-evaluations/r-huijts__firstcycling-mcp.json | 18 | "readme": "[](https://m | CODE |
| MEDIUM | …-catalog/data/mcp-evaluations/hustcc__mcp-mermaid.json | 51 | "readme": "# <img src=\"https://mermaid.js.org/favicon.svg\" height=\"24\"/> MCP Mermaid \n\n[ server that enables AI applications to outsource tasks t | CODE |
| MEDIUM | …ations/modelcontextprotocol__servers__src__memory.json | 28 | "readme": "# Knowledge Graph Memory Server\n\nA basic implementation of persistent memory using a local knowledge grap | CODE |
| MEDIUM | …g/data/mcp-evaluations/willvelida__mcp-afl-server.json | 18 | "readme": "# 🏈 AFL (Australian Football League) MCP Server\n\nThis is a Model Context Protocol (MCP) server that provi | CODE |
| MEDIUM | …log/data/mcp-evaluations/zinja-coder__jadx-ai-mcp.json | 18 | "readme": "<div align=\"center\">\n\n# JADX-AI-MCP (Part of Zin MCP Suite)\n\n⚡ Fully automated MCP server + JADX plug | CODE |
| MEDIUM⚡ | …og/data/mcp-evaluations/doggybee__mcp-server-ccxt.json | 108 | "readme": "# CCXT MCP Server\n\n<img src=\"assets/ccxt-logo.png\" alt=\"CCXT Logo\" width=\"100\" height=\"100\"/>\n\n | CODE |
| MEDIUM | …alog/data/mcp-evaluations/dealexpress__mcp-server.json | 44 | "readme": "# @dealx/mcp-server\n\nThis is a Model Context Protocol (MCP) server for the [DealX platform](https://dealx | CODE |
| MEDIUM⚡ | …-evaluations/circleci-public__mcp-server-circleci.json | 36 | "readme": "# CircleCI MCP Server\n\n[](https://modelcontextprotocol.io/) server that prov | CODE |
| LOW | …alog/data/mcp-evaluations/chemiguel23__memorymesh.json | 18 | "readme": "# MemoryMesh\n[](./CHANGELOG.md)\n[](./LICENSE)\n[](https://pypi.org/project/ma | CODE |
| MEDIUM | …delcontextprotocol__servers-archived__src__sqlite.json | 18 | "readme": "# SQLite MCP Server\n\n## Overview\nA Model Context Protocol (MCP) server implementation that provides data | CODE |
| MEDIUM⚡ | …ta/mcp-evaluations/amineelkouhen__mcp-cockroachdb.json | 89 | "readme": "# CockroachDB MCP Server\n[](https://op | CODE |
| MEDIUM⚡ | …a/mcp-evaluations/lamemind__mcp-server-multiverse.json | 25 | "readme": "# Multiverse MCP Server\n\nA middleware server that enables multiple isolated instances of the same MCP ser | CODE |
| MEDIUM | …g/data/mcp-evaluations/clickhouse__mcp-clickhouse.json | 117 | "readme": "# ClickHouse MCP Server\n\n[](https://pypi.o | CODE |
| LOW | …/mcp-evaluations/lucygoodchild__mcp-national-rail.json | 36 | "readme": "[](https://smithery.ai/server/ | CODE |
| MEDIUM⚡ | …tions/victoriametrics-community__mcp-victorialogs.json | 58 | "readme": "# VictoriaLogs MCP Server\n\n[](https://www.npmjs.com/p | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/apify__actors-mcp-server.json | 28 | "readme": "<h1 align=\"center\">\n <a href=\"https://mcp.apify.com\">\n <picture>\n <source media | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/apify__actors-mcp-server.json | 28 | "readme": "<h1 align=\"center\">\n <a href=\"https://mcp.apify.com\">\n <picture>\n <source media | CODE |
| MEDIUM⚡ | …data/mcp-evaluations/khan2a__telephony-mcp-server.json | 87 | "readme": "\n server implementation that integrates with [Vector | CODE |
| MEDIUM⚡ | …alog/data/mcp-evaluations/zoomeye-ai__mcp_zoomeye.json | 28 | "readme": "# 🚀 ZoomEye MCP Server\n\nA Model Context Protocol (MCP) server that provides network asset information bas | CODE |
| MEDIUM | …data/mcp-evaluations/mcpdotdirect__evm-mcp-server.json | 18 | "readme": "# EVM MCP Server\n\n\n: the 3.3.17 fix was incomplete, advisory now requires | COMMENT |
| LOW | platform/pnpm-workspace.yaml | 161 | # The package root eagerly re-exports its optional worker implementation. That | COMMENT |
| LOW | platform/pnpm-workspace.yaml | 181 | minimumReleaseAge: 10080 | COMMENT |
| LOW | platform/docker/dagger-engine.quickstart.yaml | 1 | # Dagger Engine for the quickstart image's embedded KinD cluster. | COMMENT |
| LOW | platform/docker/scripts/docker-entrypoint.sh | 1 | #!/bin/sh | COMMENT |
| LOW | platform/docker/scripts/docker-entrypoint.sh | 261 | # backend provision engines in code; the quickstart runs this one instead, so a | COMMENT |
| LOW | platform/docker/scripts/docker-entrypoint.sh | 361 | EOSQL | COMMENT |
| LOW | platform/docker/scripts/docker-entrypoint.sh | 401 | # ngrok tunneling (ARCHESTRA_NGROK_AUTH_TOKEN / ARCHESTRA_NGROK_DOMAIN) is now | COMMENT |
| LOW | platform/frontend/playwright.config.ts | 61 | projects: [{ name: "chromium", use: { ...devices["Desktop Chrome"] } }], | COMMENT |
| LOW | platform/frontend/vitest.config.ts | 41 | execArgv: ["--max-old-space-size=8192"], | COMMENT |
| LOW | platform/frontend/next.config.ts | 21 | // alongside the main one without colliding on `.next/dev/lock`. | COMMENT |
| LOW | platform/frontend/next.config.ts | 61 | proxyTimeout: 300000, // 5 minutes in milliseconds - prevents SSE stream timeout | COMMENT |
| LOW | platform/frontend/next.config.ts | 221 | // For all available options, see: | COMMENT |
| LOW | platform/frontend/src/app/chat/prompt-input.tsx | 321 | COMMENT | |
| LOW | platform/frontend/src/app/chat/prompt-input.tsx | 781 | // always absorb the message into its queue, so the composer stays usable for | COMMENT |
| LOW | platform/frontend/src/app/chat/page.tsx | 1621 | // post-render sync effect + notifySessionUpdate). Right after handleSubmit | COMMENT |
| LOW | platform/frontend/src/app/chat/page.tsx | 1741 | COMMENT | |
| LOW | platform/frontend/src/app/chat/page.tsx | 1861 | { | COMMENT |
| LOW | platform/frontend/src/app/chat/page.tsx | 2741 | // Get the default enabled tools from the conversation (backend sets these) | COMMENT |
| LOW | platform/frontend/src/app/chat/page.tsx | 2981 | // First-run onboarding: after the org's first provider key is added, offer to | COMMENT |
| LOW | platform/frontend/src/app/chat/page.tsx | 3041 | agent:read | COMMENT |
| LOW | platform/frontend/src/app/chat/page.tsx | 3061 | // than a spinner where the page should be. | COMMENT |
| LOW | platform/frontend/src/app/chat/page.tsx | 3741 | inputModalities={selectedModelInputModalities} | COMMENT |
| LOW | …/frontend/src/app/connection/connect-command-panel.tsx | 361 | // gateway authenticates over OAuth, so the user still finishes the handshake | COMMENT |
| LOW | …/src/app/mcp/registry/_parts/mcp-catalog-form.utils.ts | 161 | resource: isClientCredentials | COMMENT |
| LOW | …tend/src/app/mcp/registry/_parts/deployment-status.tsx | 361 | // Determine overall state. Hibernated deployments are healthy (idle-scaled, | COMMENT |
| LOW | …end/src/app/mcp/registry/_parts/InternalMCPCatalog.tsx | 341 | // Optional &scope=personal|team|org (and &team={teamId} for team scope) | COMMENT |
| LOW | …ontend/src/app/mcp/registry/_parts/cascade-decision.ts | 121 | // Hoisted above the serverType branches: remote catalogs rename their | COMMENT |
| LOW | …m/frontend/src/app/internal-test/msw-handlers/route.ts | 1 | // Control endpoint for per-test MSW handler overrides used by Playwright | COMMENT |
| LOW | …/frontend/src/app/internal-test/api/[...path]/route.ts | 1 | // The mock backend for server-side rendering. | COMMENT |
| LOW | platform/frontend/src/app/_parts/sidebar.tsx | 241 | </Badge> | COMMENT |
| LOW | platform/frontend/src/app/_parts/app-shell.tsx | 81 | const isBrowserPreview = pathname.startsWith("/chat/browser-preview/"); | COMMENT |
| LOW | platform/frontend/src/app/_parts/app-shell.tsx | 161 | // Authenticated shell. It renders as soon as we know the visitor is signed | COMMENT |
| LOW | …rc/components/llm-provider-api-key-form.dirty.test.tsx | 161 | COMMENT | |
| LOW | platform/frontend/src/components/agent-form.tsx | 1341 | const skillGateway: GatewayLike = { | COMMENT |
| LOW | platform/frontend/src/components/agent-form.tsx | 1641 | } | COMMENT |
| LOW | platform/frontend/src/components/ui/dialog.tsx | 201 | // Two stacked layers under the content, because a sticky footer has to | COMMENT |
| LOW | platform/frontend/src/components/ui/sidebar.tsx | 361 | className={cn( | COMMENT |
| LOW | …tform/frontend/src/components/ui/secret-input.utils.ts | 1 | // Attributes that keep browser and extension password managers away from | COMMENT |
| LOW | …nts/app-session-recording/app-gallery-share-dialog.tsx | 101 | // The pull request this app already has (submitted now or remembered from | COMMENT |
| LOW | …nts/app-session-recording/app-gallery-share-dialog.tsx | 181 | fail(`This recording can't be shared. ${validation.reason}`); | COMMENT |
| LOW | …nts/app-session-recording/app-gallery-share-dialog.tsx | 241 | // category screen, then submission). Auto-chaining right as the | COMMENT |
| LOW | …nts/app-session-recording/app-gallery-share-dialog.tsx | 1201 | anchor.style.display = "none"; | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 521 | ); | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 541 | ); | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 721 | </TooltipProvider> | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 741 | // header and transport are `w-0 min-w-full`, so a long title can't | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 2501 | `${sandboxResult.baseUrl}/_sandbox/mcp-sandbox-proxy.html`, | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 2641 | }, [nextMessage, transcript, displayClock, duration]); | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 2861 | } | COMMENT |
| LOW | …omponents/app-session-recording/app-session-player.tsx | 5721 | events, | COMMENT |
| LOW | …rm/frontend/src/components/chat/chat-messages.utils.ts | 861 | const part = parts[index]; | COMMENT |
| LOW | …m/frontend/src/components/chat/conversation-header.tsx | 121 | if (resolvedTab === "review" && !panel.hasReview) resolvedTab = "files"; | COMMENT |
| LOW | …form/frontend/src/components/chat/right-side-panel.tsx | 81 | onCreateConversationWithUrl, | COMMENT |
| LOW | …frontend/src/components/chat/resizable-right-panel.tsx | 201 | // clamped to the same bounds as a hand resize. Re-runs whenever the ideal | COMMENT |
| LOW | …tform/frontend/src/components/ai-elements/response.tsx | 141 | "[&_p]:my-2", | COMMENT |
| LOW | …tform/frontend/src/components/ai-elements/response.tsx | 161 | // Streamdown mats tables in an opaque bg-sidebar card (and ignores its | COMMENT |
| LOW | platform/frontend/src/lib/agent-version.query.ts | 161 | // Every outcome refreshes, not just the write: a rejected compare-and-set | COMMENT |
| LOW | platform/frontend/src/lib/chat/chat-submit-action.ts | 1 | // Decides what a chat composer submit should do, given the current send state. | COMMENT |
| 339 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | migration-kit/references/install.md | 51 | c.sign_in("admin@example.com", "password") | CODE |
| LOW | platform/frontend/tests-integration/mcp-install.spec.ts | 178 | .fill("fake-token"); | CODE |
| LOW | …els/_components/channels-section.instructions.test.tsx | 81 | data: { user: { id: "user-1", email: "admin@example.com" } }, | CODE |
| LOW | …dentity-providers/_parts/role-mapping-form.ee.test.tsx | 50 | email: "admin@example.com", | CODE |
| LOW | …form/frontend/src/app/chat/prompt-input-tools.test.tsx | 77 | placeholder: "placeholder", | CODE |
| LOW | …uth/_components/auth-view-with-error-handling.test.tsx | 179 | await user.type(screen.getByLabelText("Email"), "user@example.com"); | CODE |
| LOW | …tform/frontend/src/app/plugins/[id]/edit/page.test.tsx | 156 | "placeholder", | CODE |
| LOW | …mcp/registry/_parts/mcp-server-attention-list.test.tsx | 252 | ownerEmail: "admin@example.com", | CODE |
| LOW | …rontend/src/app/mcp/registry/[id]/page.client.test.tsx | 447 | ownerEmail: "admin@example.com", | CODE |
| LOW | …rontend/src/app/mcp/registry/[id]/page.client.test.tsx | 495 | within(installationRow).getByText("admin@example.com"), | CODE |
| LOW | …rontend/src/app/mcp/registry/[id]/page.client.test.tsx | 539 | ownerEmail: "admin@example.com", | CODE |
| LOW | …connectors/_parts/connector-user-groups-table.test.tsx | 311 | name: "Acme Inc", | CODE |
| LOW | …connectors/_parts/connector-user-groups-table.test.tsx | 331 | expect(screen.getByText("Acme Inc")).toBeInTheDocument(); | CODE |
| LOW | …rc/app/knowledge/connectors/_parts/acl-badges.test.tsx | 84 | new Map([["group:notion_workspace-members-ws-1", "Acme Inc"]]) | CODE |
| LOW | …nowledge-bases/_parts/create-connector-dialog.test.tsx | 340 | await user.type(screen.getByLabelText(/^Email$/), "user@example.com"); | CODE |
| LOW | …nowledge-bases/_parts/create-connector-dialog.test.tsx | 364 | target: { value: "user@example.com" }, | CODE |
| LOW | …nowledge-bases/_parts/create-connector-dialog.test.tsx | 381 | email: "user@example.com", | CODE |
| LOW | …nowledge-bases/_parts/create-connector-dialog.test.tsx | 634 | target: { value: "admin@example.com" }, | CODE |
| LOW | …nowledge-bases/_parts/create-connector-dialog.test.tsx | 661 | email: "admin@example.com", | CODE |
| LOW | …dge/knowledge-bases/_parts/connector-dialog-config.tsx | 1149 | ? "user@example.com" | CODE |
| LOW | …dge/knowledge-bases/_parts/connector-dialog-config.tsx | 1222 | ? "user@example.com" | CODE |
| LOW | …dge/knowledge-bases/_parts/connector-dialog-config.tsx | 1500 | ? "user@example.com" | CODE |
| LOW | …/knowledge-bases/_parts/edit-connector-dialog.test.tsx | 396 | "placeholder", | CODE |
| LOW | platform/frontend/src/app/skills/new/page.test.tsx | 157 | "placeholder", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 119 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 144 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 187 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 210 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 231 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 249 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 284 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 312 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 341 | email: "user@example.com", | CODE |
| LOW⚡ | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 357 | email: "user@example.com", | CODE |
| LOW⚡ | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 358 | name: "user@example.com", | CODE |
| LOW⚡ | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 367 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 416 | email: "user@example.com", | CODE |
| LOW | …form/frontend/src/app/_parts/posthog-provider.test.tsx | 453 | email: "user@example.com", | CODE |
| LOW | …atform/frontend/src/app/_parts/rum-tracker.ee.test.tsx | 53 | email: "user@example.com", | CODE |
| LOW | …end/src/app/account/_components/sessions-card.test.tsx | 45 | user: { id: "user-1", email: "user@example.com" }, | CODE |
| LOW | …d/src/app/account/_components/two-factor-card.test.tsx | 41 | user: { id: "user-1", email: "user@example.com", twoFactorEnabled }, | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 8 | { userId: "user-1", name: "John Doe", email: "john@example.com" }, | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 38 | expect(screen.queryByText("John Doe")).not.toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 69 | expect(screen.getByText("John Doe")).toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 152 | expect(screen.getByText("John Doe")).toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 193 | expect(screen.queryByText("John Doe")).not.toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 215 | expect(screen.queryByText("John Doe")).not.toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 312 | expect(screen.getByText("John Doe")).toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 329 | expect(screen.queryByText("John Doe")).not.toBeInTheDocument(); | CODE |
| LOW | …d/src/components/user-searchable-multi-select.test.tsx | 425 | b.textContent?.includes("John Doe"), | CODE |
| LOW | …tend/src/components/llm-provider-api-key-form.test.tsx | 508 | screen.getByLabelText(/Base URL/).getAttribute("placeholder"), | CODE |
| LOW | …end/src/components/sidebar-warnings-accordion.test.tsx | 39 | data: { user: { email: "someone@example.org" } }, | CODE |
| LOW | …end/src/components/sidebar-warnings-accordion.test.tsx | 112 | data: { user: { email: "someone@example.org" } }, | CODE |
| LOW | …atform/frontend/src/components/invite-by-link-card.tsx | 85 | placeholder="user@example.com" | CODE |
| LOW | …rontend/src/components/user-searchable-select.test.tsx | 18 | name: "John Doe", | CODE |
| LOW | …rontend/src/components/user-searchable-select.test.tsx | 101 | name: "John Doe", | CODE |
| LOW | …rontend/src/components/user-searchable-select.test.tsx | 121 | { userId: "user-1", name: "John Doe", email: "john@example.com" }, | CODE |
| LOW | …rontend/src/components/user-searchable-select.test.tsx | 133 | expect(screen.queryByText("John Doe")).not.toBeInTheDocument(); | CODE |
| LOW | …rontend/src/components/user-searchable-select.test.tsx | 145 | { userId: "user-1", name: "John Doe", email: "john@example.com" }, | CODE |
| LOW | …rontend/src/components/user-searchable-select.test.tsx | 157 | expect(screen.getByText("John Doe")).toBeInTheDocument(); | CODE |
| 207 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | platform/backend/src/routes/proxy/adapters/gemini.ts | 747 | // Handle inline data (images generated by Gemini) | COMMENT |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/nwiizo__tfmcp.json | 94 | "readme": "# tfmcp: Terraform Model Context Protocol Tool\n\n*⚠️ This project includes production-ready security feat | CODE |
| HIGH⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| HIGH⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| HIGH | …atalog/data/mcp-evaluations/ahujasid__blender-mcp.json | 18 | "readme": "\n\n# BlenderMCP - Blender Model Context Protocol Integration\n\nBlenderMCP connects Blender to Claude AI t | CODE |
| HIGH | …atalog/data/mcp-evaluations/ahujasid__blender-mcp.json | 18 | "readme": "\n\n# BlenderMCP - Blender Model Context Protocol Integration\n\nBlenderMCP connects Blender to Claude AI t | CODE |
| HIGH | …og/data/mcp-evaluations/abrinsmead__mindpilot-mcp.json | 44 | "readme": "# Mindpilot MCP\n[](https | CODE |
| HIGH | …og/data/mcp-evaluations/abrinsmead__mindpilot-mcp.json | 44 | "readme": "# Mindpilot MCP\n[](https | CODE |
| HIGH⚡ | …log/data/mcp-evaluations/hyperb1iss__lucidity-mcp.json | 18 | "readme": "# ✨ Lucidity MCP 🔍\n\n<div align=\"center\">\n\n[ Server\n\n**✨ Instantly understand and visualize your codebase stru | CODE |
| HIGH | …catalog/data/mcp-evaluations/admica__filescopemcp.json | 25 | "readme": "# FileScopeMCP (Model Context Protocol) Server\n\n**✨ Instantly understand and visualize your codebase stru | CODE |
| HIGH | …atalog/data/mcp-evaluations/kukapay__thegraph-mcp.json | 28 | "readme": "# TheGraph MCP Server\n\nAn MCP server that powers AI agents with indexed blockchain data from [The Graph]( | CODE |
| HIGH⚡ | …__agentic_longterm_memory__src__notion_mcp_server.json | 106 | "readme": "# Notion MCP Server V2 🚀\n\nA comprehensive **Model Context Protocol (MCP) server** for Notion integration | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/sitbon__magg.json | 28 | "readme": "# 🧲 **Magg** - *The MCP Aggregator*\n\n[//]: # ([ server for Homebrew package management **on | CODE |
| HIGH⚡ | …talog/data/mcp-evaluations/jeannier__homebrew-mcp.json | 28 | "readme": "# Homebrew MCP Python Server\n\nA Model Context Protocol (MCP) server for Homebrew package management **on | CODE |
| HIGH⚡ | …g/data/mcp-evaluations/delano__postman-mcp-server.json | 28 | "readme": "# Postman MCP Server\n[](https://smithery.ai | CODE |
| HIGH⚡ | …atalog/data/mcp-evaluations/genomoncology__biomcp.json | 18 | "readme": "# BioMCP: Biomedical Model Context Protocol\n\nBioMCP is an open source (MIT License) toolkit that empowers | CODE |
| HIGH⚡ | …atalog/data/mcp-evaluations/genomoncology__biomcp.json | 18 | "readme": "# BioMCP: Biomedical Model Context Protocol\n\nBioMCP is an open source (MIT License) toolkit that empowers | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/adawalli__nexus.json | 70 | "readme": "<!-- markdownlint-disable MD033 MD041 -->\n\n<div align=\"center\">\n\n# 🔍 Nexus MCP Server\n\n**AI integra | CODE |
| HIGH⚡ | mcp-catalog/data/mcp-evaluations/adawalli__nexus.json | 70 | "readme": "<!-- markdownlint-disable MD033 MD041 -->\n\n<div align=\"center\">\n\n# 🔍 Nexus MCP Server\n\n**AI integra | CODE |
| HIGH⚡ | …ations/modelcontextprotocol__servers__src__sqlite.json | 18 | "readme": "# Model Context Protocol servers\n\nThis repository is a collection of *reference implementations* for the | CODE |
| HIGH⚡ | …ations/modelcontextprotocol__servers__src__sqlite.json | 18 | "readme": "# Model Context Protocol servers\n\nThis repository is a collection of *reference implementations* for the | CODE |
| HIGH⚡ | …ons/modelcontextprotocol__servers__src__puppeteer.json | 18 | "readme": "# Model Context Protocol servers\n\nThis repository is a collection of *reference implementations* for the | CODE |
| HIGH⚡ | …ons/modelcontextprotocol__servers__src__puppeteer.json | 18 | "readme": "# Model Context Protocol servers\n\nThis repository is a collection of *reference implementations* for the | CODE |
| HIGH⚡ | …/mcp-evaluations/4everland__4everland-hosting-mcp.json | 28 | "readme": "# 4EVERLAND Hosting MCP Server\n\n[](https:/ | CODE |
| HIGH⚡ | …/mcp-evaluations/4everland__4everland-hosting-mcp.json | 28 | "readme": "# 4EVERLAND Hosting MCP Server\n\n[](https:/ | CODE |
| HIGH | …ata/mcp-evaluations/spacecode-ai__spacebridge-mcp.json | 75 | "readme": "# SpaceBridge-MCP\n\nA Model Context Protocol (MCP) server that integrates with the SpaceBridge REST API (h | CODE |
| HIGH | …ata/mcp-evaluations/spacecode-ai__spacebridge-mcp.json | 75 | "readme": "# SpaceBridge-MCP\n\nA Model Context Protocol (MCP) server that integrates with the SpaceBridge REST API (h | CODE |
| HIGH | …g/data/mcp-evaluations/mckinsey__vizro__vizro-mcp.json | 18 | "readme": "<!-- <a href=\"https://glama.ai/mcp/servers/@mckinsey/vizro\">\n <img width=\"380\" height=\"200\" src=\"h | CODE |
| HIGH | …g/data/mcp-evaluations/mckinsey__vizro__vizro-mcp.json | 18 | "readme": "<!-- <a href=\"https://glama.ai/mcp/servers/@mckinsey/vizro\">\n <img width=\"380\" height=\"200\" src=\"h | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …ontend/src/app/mcp/registry/_parts/mcp-server-card.tsx | 262 | // ── Shareable edit deep-link (`?edit=<catalogId>`) ────────────────────── | COMMENT |
| MEDIUM⚡ | …ontend/src/app/mcp/registry/_parts/cascade-decision.ts | 127 | // ── Manual ─────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ontend/src/app/mcp/registry/_parts/cascade-decision.ts | 134 | // ── Multitenant shared-pod rollout ─────────────────────────────── | COMMENT |
| MEDIUM⚡ | …ontend/src/app/mcp/registry/_parts/cascade-decision.ts | 144 | // ── Skip / rename via forward-compat ───────────────────────────── | COMMENT |
| MEDIUM | …ontend/src/app/mcp/registry/_parts/cascade-decision.ts | 165 | // ── Auto ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …tform/frontend/src/components/mcp-app/mcp-app-view.tsx | 1431 | // ── Host-theme bridging helpers ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …rontend/src/components/chat/mcp-app-container.test.tsx | 6 | // ── Mock heavy dependencies before module import ───────────────────────────── | COMMENT |
| MEDIUM | …rontend/src/components/chat/mcp-app-container.test.tsx | 105 | // ── Import component under test after mocks ─────────────────────────────────── | COMMENT |
| MEDIUM | …rontend/src/components/chat/mcp-app-container.test.tsx | 127 | // ── Helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …rontend/src/components/chat/mcp-app-container.test.tsx | 141 | // ── Tests ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/frontend/src/lib/auth/oauth-session.ts | 15 | // ─── Key constants ─────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/frontend/src/lib/auth/oauth-session.ts | 34 | // ─── Helpers ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/frontend/src/lib/auth/oauth-session.ts | 160 | // ─── Processing guard (prevents duplicate callback processing) ─────── | COMMENT |
| MEDIUM | platform/frontend/src/lib/auth/oauth-session.ts | 178 | // ─── Getters ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/frontend/src/lib/auth/oauth-session.ts | 293 | // ─── Cleanup ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/models/statistics.ts | 1707 | // ─── Private helpers ────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/models/statistics.ts | 2330 | // ─── Billing-mode-aware cost aggregates ───────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/models/statistics.ts | 2405 | // ─── App / skill cost assembly ────────────────────────────────────────────── | COMMENT |
| MEDIUM | …form/backend/src/static/archestra-app-recording-sdk.js | 5 | // ── Session recorder + replay driver ────────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/routes/internal-mcp-catalog.ts | 969 | // ── Rename ───────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/routes/mcp-proxy.test.ts | 15 | // ── Helpers ────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/backend/src/routes/mcp-proxy.test.ts | 58 | // ── Tests ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/shared/cascade-scenarios.ts | 118 | // ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/shared/cascade-scenarios.ts | 120 | // ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | platform/shared/cascade-scenarios.ts | 263 | // ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | platform/shared/cascade-scenarios.ts | 265 | // ───────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | platform/shared/cascade-scenarios.ts | 268 | // ── description-only across all shapes (the headline path) ───────── | COMMENT |
| MEDIUM | platform/shared/cascade-scenarios.ts | 372 | // ── runtime field changes (cascade SHOULD fire) ──────────────────── | COMMENT |
| MEDIUM | platform/shared/cascade-scenarios.ts | 625 | // ── identity / nothing-changed sanity ───────────────────────────── | COMMENT |
| MEDIUM | platform/shared/statistics.ts | 139 | // ─── Internal ─────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | …tform/e2e-tests/tests/mcp-hibernation-topology.spec.ts | 172 | // ── Multitenant fixture: two installs, one physical Deployment ────────── | COMMENT |
| MEDIUM | platform/dev/vault-k8s-manual-test.yaml | 1 | # ============================================================ | COMMENT |
| MEDIUM⚡ | platform/dev/vault-k8s-manual-test.yaml | 73 | # ============================================================ | COMMENT |
| MEDIUM⚡ | platform/dev/vault-k8s-manual-test.yaml | 75 | # ============================================================ | COMMENT |
| MEDIUM⚡ | platform/dev/vault-k8s-manual-test.yaml | 77 | # ============================================================ | COMMENT |
| MEDIUM | platform/dev/vault-k8s-manual-test.yaml | 95 | # ============================================================ | COMMENT |
| MEDIUM | platform/dev/vault-k8s-manual-test.yaml | 97 | # ============================================================ | COMMENT |
| MEDIUM | platform/dev/grafana/generate-pg-dashboard-variants.py | 24 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | platform/dev/grafana/generate-pg-dashboard-variants.py | 26 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | platform/dev/grafana/generate-pg-dashboard-variants.py | 39 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 7 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 9 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 58 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 60 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 123 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 125 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | platform/dev/grafana/install-dashboards.sh | 141 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | platform/dev/grafana/install-dashboards.sh | 143 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 169 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 171 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 192 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM | platform/dev/grafana/install-dashboards.sh | 194 | # ────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| MEDIUM⚡ | …cp-evaluations/sapientpants__sonarqube-mcp-server.json | 67 | "readme": "# SonarQube MCP Server\n\n[](https://modelcontextprotocol.io/) server that prov | CODE |
| MEDIUM⚡ | …p-catalog/data/mcp-evaluations/mmntm__weblate-mcp.json | 64 | "readme": "# Weblate MCP Server\n\nA [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server that prov | CODE |
| 9 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 35 | "readme": "# Video Editor MCP server\n\n[](https://www.video-jungl | CODE |
| HIGH⚡ | …ata/mcp-evaluations/burningion__video-editing-mcp.json | 35 | "readme": "# Video Editor MCP server\n\n[](https://www.video-jungl | CODE |
| HIGH | …og/data/mcp-evaluations/ekkyarmandi__ticktick-mcp.json | 28 | "readme": "# TickTick MCP\n\nA Model Context Protocol (MCP) server that provides tools for integrating TickTick task m | CODE |
| HIGH | …g/data/mcp-evaluations/carsol__monarch-mcp-server.json | 43 | "readme": "# Monarch Money MCP Server\n\nA Model Context Protocol (MCP) server that provides read-only access to Monar | CODE |
| HIGH⚡ | …alog/data/mcp-evaluations/chunkydotdev__bldbl-mcp.json | 54 | "readme": "# @bldbl/mcp\n\n**Official MCP client for Buildable - AI-powered development platform that makes any projec | CODE |
| HIGH⚡ | …alog/data/mcp-evaluations/chunkydotdev__bldbl-mcp.json | 54 | "readme": "# @bldbl/mcp\n\n**Official MCP client for Buildable - AI-powered development platform that makes any projec | CODE |
| HIGH⚡ | …alog/data/mcp-evaluations/chunkydotdev__bldbl-mcp.json | 54 | "readme": "# @bldbl/mcp\n\n**Official MCP client for Buildable - AI-powered development platform that makes any projec | CODE |
| HIGH | …/data/mcp-evaluations/mrexodia__user-feedback-mcp.json | 18 | "readme": "# User Feedback MCP\r\n\r\nSimple [MCP Server](https://modelcontextprotocol.io/introduction) to enable a hu | CODE |
| HIGH | …/data/mcp-evaluations/mrexodia__user-feedback-mcp.json | 18 | "readme": "# User Feedback MCP\r\n\r\nSimple [MCP Server](https://modelcontextprotocol.io/introduction) to enable a hu | CODE |
| HIGH⚡ | …ns/victoriametrics-community__mcp-victoriametrics.json | 44 | "readme": "# VictoriaMetrics MCP Server\n\n[](https://deepwiki.com/rinadelph/Agent-M | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | platform/scripts/e2e-local.sh | 60 | # Create a patched kind config with our cluster name | COMMENT |
| MEDIUM⚡ | …talog/data/mcp-evaluations/janreges__ai-distiller.json | 18 | "readme": "# AI Distiller (`aid`)\n\n> **Note:** This is the very first version of this tool. We would be very gratefu | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/r-huijts__strava-mcp.json | 59 | "readme": "[](https://mseep.a | CODE |
| MEDIUM⚡ | …log/data/mcp-evaluations/iunera__druid-mcp-server.json | 40 | "readme": "# Druid MCP Server\n[ server that provides AI models and automation t | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/gitkraken__gk-cli.json | 18 | "readme": "# 🚀 GitKraken CLI\n\n`gk` is GitKraken on the command line. The core functionality is focused on \"Work Ite | CODE |
| MEDIUM⚡ | …-catalog/data/mcp-evaluations/jwaxman19__qlik-mcp.json | 89 | "readme": "[](https://mseep.ai | CODE |
| MEDIUM | …g/data/mcp-evaluations/entanglr__zettelkasten-mcp.json | 36 | "readme": "# Zettelkasten MCP Server\n\nA Model Context Protocol (MCP) server that implements the Zettelkasten knowled | CODE |
| MEDIUM | …a/mcp-evaluations/bright-l01__networkx-mcp-server.json | 18 | "readme": "# NetworkX MCP Server\n\nA comprehensive Model Context Protocol (MCP) server providing advanced graph analy | CODE |
| MEDIUM⚡ | …-catalog/data/mcp-evaluations/bivex__kanboard-mcp.json | 56 | "readme": "# 🚀 Kanboard MCP Server\n\n> **Model Context Protocol (MCP) Server for Kanboard Integration**\n\nA powerful | CODE |
| MEDIUM⚡ | …cp-evaluations/co-browser__browser-use-mcp-server.json | 43 | "readme": "# browser-use-mcp-server\n\n<div align=\"center\">\n\n[](http | CODE |
| MEDIUM⚡ | …__agentic_longterm_memory__src__notion_mcp_server.json | 106 | "readme": "# Notion MCP Server V2 🚀\n\nA comprehensive **Model Context Protocol (MCP) server** for Notion integration | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/sitbon__magg.json | 28 | "readme": "# 🧲 **Magg** - *The MCP Aggregator*\n\n[//]: # ([ | CODE |
| MEDIUM | …g/data/mcp-evaluations/ihor-sokoliuk__mcp-searxng.json | 44 | "readme": "# SearXNG MCP Server\n\nAn [MCP server](https://modelcontextprotocol.io/introduction) implementation that i | CODE |
| MEDIUM | …/mcp-evaluations/marcelmarais__spotify-mcp-server.json | 60 | "readme": "<div align=\"center\" style=\"display: flex; align-items: center; justify-content: center; gap: 10px;\">\n< | CODE |
| MEDIUM | …-evaluations/jagan-shanmugam__climatiq-mcp-server.json | 28 | "readme": "# Climatiq MCP Server\n[](https://opens | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/ukkit__memcord.json | 28 | "readme": "<table>\n <tr>\n <td>\n <img src=\"assets/image/memcord_1024.png\" width=\"256\">\n </td>\n | CODE |
| MEDIUM | …valuations/esignaturescom__mcp-server-esignatures.json | 28 | "readme": "# mcp-server-esignatures MCP server\n\nMCP server for eSignatures (https://esignatures.com)\n\n<a href=\"ht | CODE |
| MEDIUM | …log/data/mcp-evaluations/xeroapi__xero-mcp-server.json | 44 | "readme": "# Xero MCP Server\n\nThis is a Model Context Protocol (MCP) server implementation for Xero. It provides a b | CODE |
| MEDIUM | mcp-catalog/data/mcp-evaluations/prisma__mcp.json | 18 | "readme": "## Overview\n\nThe [Model-Context-Protocol](https://modelcontextprotocol.io/introduction) (MCP) gives LLMs | CODE |
| MEDIUM | …atalog/data/mcp-evaluations/duaraghav8__mcpjungle.json | 28 | "readme": "<h1 align=\"center\">\n :deciduous_tree: MCPJungle :deciduous_tree:\n</h1>\n<p align=\"center\">\n Self-h | CODE |
| MEDIUM | …g/data/mcp-evaluations/mikechao__brave-search-mcp.json | 28 | "readme": "# Brave Search MCP Server\n\nAn MCP Server implementation that integrates the [Brave Search API](https://br | CODE |
| MEDIUM⚡ | mcp-catalog/data/mcp-evaluations/jlowin__fastmcp.json | 18 | "readme": "<div align=\"center\">\n\n<!-- omit in toc -->\n# FastMCP v2 🚀\n\n<strong>The fast, Pythonic way to build M | CODE |
| MEDIUM | …-catalog/data/mcp-evaluations/yuna0x0__hackmd-mcp.json | 36 | "readme": "# HackMD MCP Server\n\nA Model Context Protocol (MCP) server that interfaces with the [HackMD API](https:// | CODE |
| MEDIUM | …-catalog/data/mcp-evaluations/wegotdocs__open-mcp.json | 28 | "readme": "# OpenMCP\n\nhttps://www.open-mcp.org\n\nOpenMCP is both:\n\n1. a standard for converting web APIs into MCP | CODE |
| MEDIUM⚡ | …catalog/data/mcp-evaluations/rinadelph__agent-mcp.json | 34 | "readme": "# Agent-MCP\r\n\r\n[](https://deepwiki.com/rinadelph/Agent-M | CODE |
| MEDIUM⚡ | …/mcp-evaluations/cbcoutinho__nextcloud-mcp-server.json | 15 | "readme": "# Nextcloud MCP Server\n\n[\n | COMMENT |
| LOW | platform/e2e-tests/tests/oauth-self-hosted.spec.ts | 97 | // Step 3: Extract code and state from the redirect URL | COMMENT |
| LOW⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| LOW⚡ | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 20 | "readme": "# Unified Context Layer (UCL) MCP Server\n\nUnified Context Layer (UCL) is a multi-tenant Model Context Pro | CODE |
| LOW⚡ | mcp-catalog/data/mcp-evaluations/apecloud__aperag.json | 36 | "readme": "# ApeRAG\n[](https://arch | CODE |
| LOW⚡ | …/data/mcp-evaluations/rashidazarang__airtable-mcp.json | 36 | "readme": "# Airtable MCP Server\n\n[](README-ko.md)\n\n[\n\n# LINE Bot MCP Server\n\n[ | COMMENT |
| LOW | platform/e2e-tests/tests/oauth-self-hosted.spec.ts | 97 | // Step 3: Extract code and state from the redirect URL | COMMENT |
| LOW⚡ | …log/data/mcp-evaluations/codergamester__mcp-unity.json | 18 | "readme": "# MCP Unity Editor (Game Engine)\n\n[](https://modelcont | CODE |
| LOW⚡ | …p-catalog/data/mcp-evaluations/fastnai__mcp-fastn.json | 20 | "readme": "# Unified Context Layer (UCL) MCP Server\n\nUnified Context Layer (UCL) is a multi-tenant Model Context Pro | CODE |
| LOW⚡ | mcp-catalog/data/mcp-evaluations/apecloud__aperag.json | 36 | "readme": "# ApeRAG\n[](https://arch | CODE |
| LOW⚡ | …/data/mcp-evaluations/rashidazarang__airtable-mcp.json | 36 | "readme": "# Airtable MCP Server\n\n[](README-ko.md)\n\n[\n\n# LINE Bot MCP Server\n\n[`; | CODE |
| HIGH | …atform/backend/src/services/connection-setup-script.ts | 1014 | print("\\n".join(seen)) | CODE |
| HIGH | …atform/backend/src/services/connection-setup-script.ts | 1112 | print(f"Updated {path}")`; | CODE |
| HIGH | platform/backend/src/services/startup-guard.ts | 901 | elif [ "$elapsed" -ge "$NOTICE_AFTER_SECONDS" ]; then | CODE |
| HIGH | platform/backend/src/services/startup-guard.ts | 1003 | elif [ "$OPEN_MENU" = "1" ]; then | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | migration-kit/install.py | 12 | CODE | |
| LOW | migration-kit/scripts/frontmatter.py | 26 | CODE | |
| LOW | migration-kit/scripts/discover.py | 18 | CODE | |
| LOW | migration-kit/scripts/contracts.py | 18 | CODE | |
| LOW | migration-kit/scripts/archestra_client.py | 20 | CODE | |
| LOW | migration-kit/scripts/apply.py | 22 | CODE | |
| LOW | .github/scripts/check-supply-chain-policy.py | 3 | CODE | |
| LOW | .github/scripts/check-docs-links.py | 13 | CODE | |
| LOW | .github/scripts/check-docs-image-policy.py | 3 | CODE | |
| LOW | .github/scripts/test_check_supply_chain_policy.py | 3 | CODE | |
| LOW | ai-labs/tasks/median-salary/expected/generate.py | 19 | CODE | |
| LOW | …labs/tasks/ai-sre-cache-treadmill/expected/generate.py | 41 | CODE | |
| LOW | ai-labs/tasks/pcap-soc-triage/generate.py | 30 | CODE | |
| LOW | ai-labs/tasks/renewal-churn-risk/generate.py | 17 | CODE | |
| LOW | ai-labs/tasks/sqlite-orders/expected/generate.py | 25 | CODE | |
| LOW | ai-labs/tasks/ai-sre-fk-drain/expected/generate.py | 32 | CODE | |
| LOW | ai-labs/scripts/build_review_snapshot.py | 19 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | platform/docker/scripts/docker-entrypoint.sh | 128 | # Check if cluster already exists | COMMENT |
| LOW | platform/docker/scripts/docker-entrypoint.sh | 237 | # Check if already connected to kind network | COMMENT |
| LOW | platform/docker/scripts/docker-entrypoint.sh | 305 | # Check if using external database (ARCHESTRA_DATABASE_URL or DATABASE_URL is set) | COMMENT |
| LOW | platform/benchmarks/setup-gcp-benchmark.sh | 54 | # Check if gcloud is installed | COMMENT |
| LOW⚡ | platform/dev/grafana/install-dashboards.sh | 146 | # Check if folder already exists | COMMENT |
| LOW | platform/helm/archestra/values.yaml | 534 | # Set useInClusterConfig to false and configure the secret below | COMMENT |
| LOW | …-catalog/data/mcp-evaluations/areweai__tsgram-mcp.json | 52 | "readme": "# TSGram MCP 🚀\n\n**Get Claude Code in your local project talking to Telegram in 3 minutes!**\n\n<img src=\ | CODE |
| LOW | …aluations/sanyambassi__thales-cdsp-csm-mcp-server.json | 19 | "readme": "# Thales CSM MCP Server\n\nSimple MCP server for Thales CipherTrust Secrets Management, powered by Akeyless | CODE |
| LOW⚡ | …-catalog/data/mcp-evaluations/bivex__kanboard-mcp.json | 56 | "readme": "# 🚀 Kanboard MCP Server\n\n> **Model Context Protocol (MCP) Server for Kanboard Integration**\n\nA powerful | CODE |
| LOW | mcp-catalog/data/mcp-evaluations/docker__hub-mcp.json | 35 | "readme": "# Docker Hub MCP Server\n[ | CODE |
| LOW | …-catalog/data/mcp-evaluations/tigranbs__mcgravity.json | 73 | "readme": "# McGravity\n\n<div align=\"center\">\n <img src=\"./assets/thumbnail.png\" alt=\"McGravity Thumbnail\" wi | CODE |
| LOW⚡ | …catalog/data/mcp-evaluations/rinadelph__agent-mcp.json | 34 | "readme": "# Agent-MCP\r\n\r\n[](https://deepwiki.com/rinadelph/Agent-M | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | migration-kit/scripts/discover.py | 559 | CODE | |
| LOW | migration-kit/scripts/apply.py | 768 | CODE | |
| LOW | platform/dev/grafana/generate-pg-dashboard-variants.py | 489 | CODE | |
| LOW | ai-labs/tasks/expense-report-continue/verifier.py | 74 | CODE | |
| LOW | ai-labs/tasks/aec-material-json-takeoff/verifier.py | 139 | CODE | |
| LOW | …labs/tasks/ai-sre-cache-treadmill/expected/generate.py | 102 | CODE | |
| LOW | ai-labs/tasks/xlsx-live-formulas/verifier.py | 70 | CODE | |
| LOW | ai-labs/tasks/ai-sre-fk-drain/expected/generate.py | 85 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …atform/backend/src/services/connection-setup-script.ts | 1005 | except Exception: | CODE |
| LOW | platform/backend/src/services/startup-guard.clients.ts | 618 | except Exception: | CODE |
| LOW | …m/backend/src/services/connection-setup-script.test.ts | 219 | except Exception: pass | CODE |
| LOW⚡ | ai-labs/tasks/aec-material-json-takeoff/verifier.py | 171 | except Exception as exc: # noqa: BLE001 -- any load failure means it is not a real workbook | CODE |
| LOW | ai-labs/scripts/publish_run.py | 158 | except Exception: | CODE |
| LOW | ai-labs/scripts/publish_run.py | 201 | except Exception: | CODE |
| LOW | ai-labs/scripts/publish_run.py | 229 | except Exception: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | ai-labs/tasks/invoice-approval/verifier.py | 72 | errors.append(f"{inv_id}: flagged invoice must have amount_cents=null, got {got_amount!r}") | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | platform/scripts/e2e-lite.sh | 13 | # Usage: | COMMENT |
| LOW | platform/scripts/dev-stack.sh | 16 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | ai-labs/scripts/publish_run.py | 26 | logger = logging.getLogger(__name__) | CODE |
| LOW | ai-labs/scripts/export_tensorboard.py | 24 | logger = logging.getLogger(__name__) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | platform/backend/src/routes/proxy/llm-proxy-handler.ts | 2326 | // TODO: Add test for metrics reported by the LLM proxy. It's not obvious since | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | platform/frontend/public/mockServiceWorker.js | 124 | async function handleRequest(event, requestId, requestInterceptedAt) { | CODE |