MCP Toolbox for Databases is an open source MCP server for databases.
This report presents the forensic synthetic code analysis of googleapis/mcp-toolbox, a Go project with 15,953 GitHub stars. SynthScan v2.0 examined 304,430 lines of code across 1724 source files, recording 1192 pattern matches distributed across 18 syntactic categories. The overall adjusted score of 5.5 places this repository in the Low AI signal band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 1192 distinct pattern matches across 18 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .golangci.yaml | 1 | # Copyright 2024 Google LLC. | COMMENT |
| LOW | main.go | 1 | // Copyright 2024 Google LLC | COMMENT |
| LOW | cmd/root_test.go | 1 | // Copyright 2024 Google LLC | COMMENT |
| LOW | cmd/root.go | 1 | // Copyright 2024 Google LLC | COMMENT |
| LOW | cmd/internal/config.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/options.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/imports.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/flags.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/options_test.go | 1 | // Copyright 2024 Google LLC | COMMENT |
| LOW | cmd/internal/config_test.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/invoke/command.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/invoke/command_test.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/migrate/command.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/migrate/command_test.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/skills/command.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/skills/command_test.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/skills/generator.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/skills/generator_test.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/serve/command.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | cmd/internal/serve/command_test.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | .gemini/config.yaml | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | .ci/versioned.release.cloudbuild.yaml | 1 | # Copyright 2024 Google LLC | COMMENT |
| LOW | .ci/integration.cloudbuild.yaml | 1 | # Copyright 2024 Google LLC | COMMENT |
| LOW | .ci/trigger_exit_gate.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .ci/publish_npm_to_ar.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .ci/publish_npm_to_ar.sh | 21 | # | COMMENT |
| LOW | .ci/test_prompts_with_coverage.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .ci/publish_pypi_to_ar.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .ci/publish_pypi_to_ar.sh | 21 | # | COMMENT |
| LOW | .ci/pypi_retry.cloudbuild.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | .ci/continuous.release.cloudbuild.yaml | 1 | # Copyright 2024 Google LLC | COMMENT |
| LOW | .ci/npm_retry.cloudbuild.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | .ci/sample_tests/run_tests.sh | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …sts/pre_post_processing/go.integration.cloudbuild.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …sts/pre_post_processing/py.integration.cloudbuild.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …sts/pre_post_processing/js.integration.cloudbuild.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | …sample_tests/quickstart/go.integration.cloudbuild.yaml | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …sample_tests/quickstart/py.integration.cloudbuild.yaml | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | …sample_tests/quickstart/js.integration.cloudbuild.yaml | 1 | # Copyright 2025 Google LLC | COMMENT |
| LOW | .ci/dataproc/recreate_dataproc_cluster.cloudbuild.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | .ci/dataproc/recreate_dataproc_cluster.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | .hugo/hugo.cloudflare.toml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | .hugo/data/filters.yaml | 1 | # Copyright 2026 Google LLC | COMMENT |
| LOW | tests/option.go | 1 | // Copyright 2025 Google LLC | COMMENT |
| LOW | tests/embedding.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | tests/server.go | 1 | // Copyright 2024 Google LLC | COMMENT |
| LOW | tests/auth.go | 1 | // Copyright 2024 Google LLC | COMMENT |
| LOW | tests/mcp_tool.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | tests/common.go | 1 | // Copyright 2025 Google LLC | COMMENT |
| LOW | tests/tool.go | 1 | // Copyright 2025 Google LLC | COMMENT |
| LOW | tests/source.go | 1 | // Copyright 2025 Google LLC | COMMENT |
| LOW | tests/mcp_types.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | tests/dgraph/dgraph_integration_test.go | 1 | // Copyright 2025 Google LLC | COMMENT |
| LOW | tests/neo4j/neo4j_integration_test.go | 1 | // Copyright 2024 Google LLC | COMMENT |
| LOW | tests/alloydbomni/alloydb_omni_integration_test.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | tests/clickhouse/clickhouse_integration_test.go | 1 | // Copyright 2025 Google LLC | COMMENT |
| LOW | tests/cloudstorage/cloud_storage_integration_test.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | tests/datalineage/datalineage_integration_test.go | 1 | // Copyright 2026 Google LLC | COMMENT |
| LOW | tests/alloydbpg/alloydb_pg_integration_test.go | 1 | // Copyright 2024 Google LLC | COMMENT |
| LOW | tests/looker/looker_integration_test.go | 1 | // Copyright 2025 Google LLC | COMMENT |
| 952 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL⚡ | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 99 | _ = service.Projects.Locations.Datasets.FhirStores.List(datasetName).Pages(ctx, func(page *healthcare.ListFhirStoresRes | CODE |
| CRITICAL⚡ | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 108 | _, _ = service.Projects.Locations.Datasets.FhirStores.Delete(store.Name).Context(ctx).Do() | CODE |
| CRITICAL⚡ | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 115 | _ = service.Projects.Locations.Datasets.DicomStores.List(datasetName).Pages(ctx, func(page *healthcare.ListDicomStoresR | CODE |
| CRITICAL⚡ | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 124 | _, _ = service.Projects.Locations.Datasets.DicomStores.Delete(store.Name).Context(ctx).Do() | CODE |
| CRITICAL | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 272 | resp, err := service.Projects.Locations.Datasets.FhirStores.Fhir.Create(fhirStoreName, resourceType, resourceBody).Do() | CODE |
| CRITICAL⚡ | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 313 | if fhirStore, err = service.Projects.Locations.Datasets.FhirStores.Create(datasetName, fhirStore).FhirStoreId(fhirStore | CODE |
| CRITICAL⚡ | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 318 | if _, err := service.Projects.Locations.Datasets.FhirStores.Delete(fhirStore.Name).Do(); err != nil { | CODE |
| CRITICAL⚡ | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 327 | if dicomStore, err = service.Projects.Locations.Datasets.DicomStores.Create(datasetName, dicomStore).DicomStoreId(dicom | CODE |
| CRITICAL⚡ | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 332 | if _, err := service.Projects.Locations.Datasets.DicomStores.Delete(dicomStore.Name).Do(); err != nil { | CODE |
| CRITICAL | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 420 | call := service.Projects.Locations.Datasets.DicomStores.StoreInstances(storeName, "studies", buf) | CODE |
| CRITICAL | internal/sources/alloydbadmin/alloydbadmin.go | 194 | resp, err := service.Projects.Locations.Clusters.Instances.Create(urlString, instance).InstanceId(instanceID).Do() | CODE |
| CRITICAL | internal/sources/alloydbadmin/alloydbadmin.go | 223 | resp, err := service.Projects.Locations.Clusters.Users.Create(urlString, user).UserId(userID).Do() | CODE |
| CRITICAL | internal/sources/alloydbadmin/alloydbadmin.go | 255 | resp, err := service.Projects.Locations.Clusters.Instances.Get(urlString).Do() | CODE |
| CRITICAL | internal/sources/alloydbadmin/alloydbadmin.go | 270 | resp, err := service.Projects.Locations.Clusters.Users.Get(urlString).Do() | CODE |
| CRITICAL | internal/sources/alloydbadmin/alloydbadmin.go | 300 | resp, err := service.Projects.Locations.Clusters.Instances.List(urlString).Do() | CODE |
| CRITICAL | internal/sources/alloydbadmin/alloydbadmin.go | 315 | resp, err := service.Projects.Locations.Clusters.Users.List(urlString).Do() | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 103 | if _, err = svc.Projects.Locations.Datasets.FhirStores.Get(dsName).Do(); err != nil { | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 113 | _, err := svc.Projects.Locations.Datasets.FhirStores.Get(name).Do() | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 125 | _, err := svc.Projects.Locations.Datasets.DicomStores.Get(name).Do() | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 435 | resp, err := svc.Projects.Locations.Datasets.FhirStores.Fhir.PatientEverything(name).Do(opts...) | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 454 | resp, err := svc.Projects.Locations.Datasets.FhirStores.Fhir.SearchType(name, "Patient", bytes.NewReader(body)).Do(opts | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 483 | call := svc.Projects.Locations.Datasets.FhirStores.Fhir.Read(name) | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 500 | store, err := svc.Projects.Locations.Datasets.DicomStores.Get(storeName).Do() | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 514 | store, err := svc.Projects.Locations.Datasets.FhirStores.Get(storeName).Do() | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 528 | store, err := svc.Projects.Locations.Datasets.DicomStores.GetDICOMStoreMetrics(storeName).Do() | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 542 | store, err := svc.Projects.Locations.Datasets.FhirStores.GetFHIRStoreMetrics(storeName).Do() | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 556 | stores, err := svc.Projects.Locations.Datasets.DicomStores.List(datasetName).Do() | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 584 | stores, err := svc.Projects.Locations.Datasets.FhirStores.List(datasetName).Do() | CODE |
| CRITICAL | internal/sources/cloudhealthcare/cloud_healthcare.go | 613 | call := svc.Projects.Locations.Datasets.DicomStores.Studies.Series.Instances.Frames.RetrieveRendered(name, dicomWebPath | CODE |
| CRITICAL⚡ | internal/sources/cloudhealthcare/cloud_healthcare.go | 641 | resp, err = svc.Projects.Locations.Datasets.DicomStores.SearchForInstances(name, dicomWebPath).Do(opts...) | CODE |
| CRITICAL⚡ | internal/sources/cloudhealthcare/cloud_healthcare.go | 643 | resp, err = svc.Projects.Locations.Datasets.DicomStores.SearchForSeries(name, dicomWebPath).Do(opts...) | CODE |
| CRITICAL⚡ | internal/sources/cloudhealthcare/cloud_healthcare.go | 645 | resp, err = svc.Projects.Locations.Datasets.DicomStores.SearchForStudies(name, dicomWebPath).Do(opts...) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/dataplex/dataplex_integration_test.go | 2672 | // Step 1: Invoke Generate/Discover/Check Tool | COMMENT |
| LOW | tests/dataplex/dataplex_integration_test.go | 2707 | // Step 2: Poll Operation Status | COMMENT |
| LOW | tests/dataplex/dataplex_integration_test.go | 2780 | // Step 3: Get Run Status | COMMENT |
| LOW | tests/dataplex/dataplex_integration_test.go | 2805 | // Step 4: Get Profile / Insights / Discovery / Quality Results | COMMENT |
| LOW | docs/en/documentation/configuration/toolbox_mcp_auth.md | 15 | ## Step 1: Configure the `generic` Auth Service | COMMENT |
| LOW | docs/en/documentation/configuration/toolbox_mcp_auth.md | 32 | ## Step 2: Deployment | COMMENT |
| LOW | docs/en/documentation/configuration/toolbox_mcp_auth.md | 96 | ## Step 3: Connecting to the Secure MCP Endpoint | COMMENT |
| LOW | …en/documentation/configuration/security/model-armor.md | 66 | ## Step 1: Configure a Model Armor template | COMMENT |
| LOW | …en/documentation/configuration/security/model-armor.md | 96 | ## Step 2: Secure ingress and egress | COMMENT |
| LOW⚡ | …documentation/configuration/embedding-models/_index.md | 52 | ### Step 1 - Define an Embedding Model | COMMENT |
| LOW⚡ | …documentation/configuration/embedding-models/_index.md | 65 | ### Step 2 - Embed Tool Parameters | COMMENT |
| LOW | …ation/connect-to/toolbox-sdks/python-sdk/core/index.md | 401 | ### Step 1: Configure Tools in Toolbox Service | COMMENT |
| LOW | …ation/connect-to/toolbox-sdks/python-sdk/core/index.md | 407 | ### Step 2: Configure SDK Client | COMMENT |
| LOW | …n/connect-to/toolbox-sdks/javascript-sdk/core/index.md | 272 | ### Step 1: Configure Tools in Toolbox Service | COMMENT |
| LOW | …n/connect-to/toolbox-sdks/javascript-sdk/core/index.md | 280 | ### Step 2: Configure SDK Client | COMMENT |
| LOW | …on/connect-to/toolbox-sdks/javascript-sdk/adk/index.md | 256 | ### Step 1: Configure Tools in Toolbox Service | COMMENT |
| LOW | …on/connect-to/toolbox-sdks/javascript-sdk/adk/index.md | 264 | ### Step 2: Configure SDK Client | COMMENT |
| LOW | …ntation/connect-to/toolbox-sdks/java-sdk/core/index.md | 234 | ### Step 1: Configure Tools in MCP Toolbox Service | COMMENT |
| LOW | …ntation/connect-to/toolbox-sdks/java-sdk/core/index.md | 238 | ### Step 2: Configure SDK Client | COMMENT |
| LOW | …entation/connect-to/toolbox-sdks/go-sdk/core/_index.md | 315 | ### Step 1: Configure Tools in Toolbox Service | COMMENT |
| LOW | …entation/connect-to/toolbox-sdks/go-sdk/core/_index.md | 323 | ### Step 2: Configure SDK Client | COMMENT |
| LOW | …ntation/connect-to/toolbox-sdks/go-sdk/tbadk/_index.md | 304 | ### Step 1: Configure Tools in Toolbox Service | COMMENT |
| LOW | …ntation/connect-to/toolbox-sdks/go-sdk/tbadk/_index.md | 312 | ### Step 2: Configure SDK Client | COMMENT |
| LOW⚡ | …n/documentation/getting-started/local_quickstart_js.md | 25 | ## Step 1: Set up your database | COMMENT |
| LOW⚡ | …n/documentation/getting-started/local_quickstart_js.md | 29 | ## Step 2: Install and configure MCP Toolbox | COMMENT |
| LOW⚡ | …n/documentation/getting-started/local_quickstart_js.md | 33 | ## Step 3: Connect your agent to MCP Toolbox | COMMENT |
| LOW⚡ | …s/en/documentation/getting-started/local_quickstart.md | 33 | ## Step 1: Set up your database | COMMENT |
| LOW⚡ | …s/en/documentation/getting-started/local_quickstart.md | 37 | ## Step 2: Install and configure MCP Toolbox | COMMENT |
| LOW⚡ | …s/en/documentation/getting-started/local_quickstart.md | 41 | ## Step 3: Connect your agent to MCP Toolbox | COMMENT |
| LOW⚡ | …n/documentation/getting-started/local_quickstart_go.md | 25 | ## Step 1: Set up your database | COMMENT |
| LOW⚡ | …n/documentation/getting-started/local_quickstart_go.md | 29 | ## Step 2: Install and configure MCP Toolbox | COMMENT |
| LOW⚡ | …n/documentation/getting-started/local_quickstart_go.md | 33 | ## Step 3: Connect your agent to MCP Toolbox | COMMENT |
| LOW | …documentation/getting-started/mcp_quickstart/_index.md | 17 | ## Step 1: Set up your database | COMMENT |
| LOW | …documentation/getting-started/mcp_quickstart/_index.md | 95 | ## Step 2: Install and configure Toolbox | COMMENT |
| LOW | …documentation/getting-started/mcp_quickstart/_index.md | 224 | ## Step 3: Connect to MCP Inspector | COMMENT |
| LOW | docs/en/integrations/neo4j/samples/mcp_quickstart.md | 16 | ## Step 1: Set up your Neo4j Database and Data | COMMENT |
| LOW | docs/en/integrations/neo4j/samples/mcp_quickstart.md | 32 | ## Step 2: Install and configure Toolbox | COMMENT |
| LOW | docs/en/integrations/neo4j/samples/mcp_quickstart.md | 108 | ## Step 3: Connect to MCP Inspector | COMMENT |
| LOW | docs/en/integrations/looker/samples/looker_gemini.md | 17 | ## Step 1: Get a Looker Client ID and Client Secret | COMMENT |
| LOW | docs/en/integrations/looker/samples/looker_gemini.md | 25 | ## Step 2: Install and configure Toolbox | COMMENT |
| LOW | docs/en/integrations/looker/samples/looker_gemini.md | 82 | ## Step 3: Start Gemini-CLI | COMMENT |
| LOW | …grations/looker/samples/looker_mcp_inspector/_index.md | 17 | ## Step 1: Get a Looker Client ID and Client Secret | COMMENT |
| LOW | …grations/looker/samples/looker_mcp_inspector/_index.md | 25 | ## Step 2: Install and configure Toolbox | COMMENT |
| LOW | …grations/looker/samples/looker_mcp_inspector/_index.md | 75 | ## Step 3: Connect to MCP Inspector | COMMENT |
| LOW | …egrations/looker/samples/looker_gemini_oauth/_index.md | 21 | ## Step 1: Register the OAuth App in Looker | COMMENT |
| LOW | …egrations/looker/samples/looker_gemini_oauth/_index.md | 39 | ## Step 2: Install and configure Toolbox | COMMENT |
| LOW | …egrations/looker/samples/looker_gemini_oauth/_index.md | 93 | ## Step 3: Configure Gemini-CLI | COMMENT |
| LOW | …s/en/integrations/bigquery/samples/local_quickstart.md | 89 | ## Step 1: Set up your BigQuery Dataset and Table | COMMENT |
| LOW | …s/en/integrations/bigquery/samples/local_quickstart.md | 169 | ## Step 2: Install and configure Toolbox | COMMENT |
| LOW | …s/en/integrations/bigquery/samples/local_quickstart.md | 312 | ## Step 3: Connect your agent to Toolbox | COMMENT |
| LOW | …integrations/bigquery/samples/mcp_quickstart/_index.md | 17 | ## Step 1: Set up your BigQuery Dataset and Table | COMMENT |
| LOW | …integrations/bigquery/samples/mcp_quickstart/_index.md | 88 | ## Step 2: Install and configure Toolbox | COMMENT |
| LOW | …integrations/bigquery/samples/mcp_quickstart/_index.md | 214 | ## Step 3: Connect to MCP Inspector | COMMENT |
| LOW | docs/en/integrations/snowflake/samples/sample.md | 24 | ## Step 1: Set up your environment | COMMENT |
| LOW | docs/en/integrations/snowflake/samples/sample.md | 44 | ## Step 2: Install Toolbox | COMMENT |
| LOW | docs/en/integrations/snowflake/samples/sample.md | 69 | ## Step 3: Configure the tools | COMMENT |
| LOW | docs/en/integrations/snowflake/samples/sample.md | 116 | ## Step 4: Run the Toolbox server | COMMENT |
| LOW | docs/en/integrations/snowflake/samples/sample.md | 124 | ## Step 5: Connect to MCP Inspector | COMMENT |
| LOW | docs/en/integrations/alloydb/samples/mcp_quickstart.md | 41 | ## Step 1: Set up your AlloyDB database | COMMENT |
| LOW | docs/en/integrations/alloydb/samples/mcp_quickstart.md | 114 | ## Step 2: Install Toolbox | COMMENT |
| 12 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | cmd/internal/config_test.go | 1492 | t.Setenv("API_KEY", "your_api_key") | CODE |
| HIGH | cmd/internal/config_test.go | 1550 | t.Setenv("ELASTICSEARCH_APIKEY", "your_api_key") | CODE |
| HIGH | …onfiguration/pre-post-processing/js/langchain/agent.js | 18 | const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key | CODE |
| HIGH | …tion/configuration/pre-post-processing/js/adk/agent.js | 4 | process.env.GOOGLE_GENAI_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key | CODE |
| HIGH | …s/en/documentation/getting-started/local_quickstart.md | 124 | echo 'GOOGLE_API_KEY="YOUR_API_KEY"' > my_agent/.env | CODE |
| HIGH | …ion/getting-started/quickstart/js/genkit/quickstart.js | 5 | const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key | CODE |
| HIGH | …/getting-started/quickstart/js/langchain/quickstart.js | 7 | const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key | CODE |
| HIGH | …tation/getting-started/quickstart/js/adk/quickstart.js | 21 | process.env.GOOGLE_GENAI_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key | CODE |
| HIGH | …tion/getting-started/quickstart/js/genAI/quickstart.js | 6 | const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …guration/pre-post-processing/python/langchain/agent.py | 0 | you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho | STRING |
| HIGH | …/configuration/pre-post-processing/python/adk/agent.py | 0 | you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho | STRING |
| HIGH | …ing-started/quickstart/python/llamaindex/quickstart.py | 0 | you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho | STRING |
| HIGH | …ting-started/quickstart/python/langchain/quickstart.py | 0 | you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho | STRING |
| HIGH | …on/getting-started/quickstart/python/adk/quickstart.py | 0 | you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho | STRING |
| HIGH | …s/en/integrations/bigquery/samples/local_quickstart.md | 0 | you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho | STRING |
| HIGH | …n/getting-started/quickstart/python/core/quickstart.py | 0 | you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/http/http_mcp_test.go | 423 | idToken = "dummy-token" | CODE |
| LOW | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 343 | "address":[{"use":"home","line":["123 Main St"],"city":"san fransisco","state":"CA","postalCode":"12345","country":"US | CODE |
| LOW | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 346 | "telecom":[{"system":"phone","value":"555-1234","use":"home"},{"system":"email","value":"john@foo.com","use":"work"}], | CODE |
| LOW | …s/cloudhealthcare/cloud_healthcare_integration_test.go | 1441 | requestBody: bytes.NewBuffer([]byte(`{"storeID":"` + fhirStoreID + `", "givenName":"john","addressSubstring":"main | CODE |
| LOW | …esearchdicomseries/cloudhealthcaresearchdicomseries.go | 164 | parameters.NewBooleanParameter(common.EnablePatientNameFuzzyMatchingKey, `Whether to enable fuzzy matching for patient | CODE |
| LOW | …hdicominstances/cloudhealthcaresearchdicominstances.go | 179 | parameters.NewBooleanParameter(common.EnablePatientNameFuzzyMatchingKey, `Whether to enable fuzzy matching for patient | CODE |
| LOW | …earchdicomstudies/cloudhealthcaresearchdicomstudies.go | 148 | parameters.NewBooleanParameter(common.EnablePatientNameFuzzyMatchingKey, `Whether to enable fuzzy matching for patient | CODE |
| LOW | internal/sources/cloudgda/cloud_gda_test.go | 187 | client, cleanup, err := gdaSrc.GetClient(ctx, "dummy-token") | CODE |
| LOW | docs/KNOWLEDGE_CATALOG_README.md | 49 | * "Create a new Data Product named 'my-product' with owner 'user@example.com'." | COMMENT |
| LOW | …egrations/firestore/tools/firestore-update-document.md | 87 | "stringValue": "Jane Doe" | CODE |
| LOW | …cs/en/integrations/mongodb/tools/mongodb-insert-one.md | 40 | `tool_code: create_new_user(data='{"email": "new.user@example.com", "name": "Jane Doe", "status": "active"}')` | CODE |
| LOW | docs/en/integrations/scylladb/tools/scylladb-cql.md | 46 | "email": "user@example.com", | CODE |
| LOW | docs/en/integrations/cassandra/tools/cassandra-cql.md | 50 | "email": "user@example.com", | CODE |
| LOW | docs/en/integrations/alloydb/samples/mcp_quickstart.md | 101 | (1, 'John Doe', 'john.doe@example.com'), | CODE |
| LOW | …hcare/tools/cloud-healthcare-search-dicom-instances.md | 53 | | fuzzymatching | boolean | false | Whether to enable fuzzy matching for patient names. Fuzzy matching | CODE |
| LOW | …lthcare/tools/cloud-healthcare-search-dicom-studies.md | 49 | | fuzzymatching | boolean | false | Whether to enable fuzzy matching for patient names. Fuzzy matching | CODE |
| LOW | …althcare/tools/cloud-healthcare-search-dicom-series.md | 51 | | fuzzymatching | boolean | false | Whether to enable fuzzy matching for patient names. Fuzzy matching | CODE |
| LOW | docs/en/samples/prompts_quickstart_gemini_cli.md | 138 | (455, 'Pizza Palace', '123 Main St'), | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .ci/lint-docs-source-page.sh | 53 | # --------------------- | COMMENT |
| MEDIUM | .ci/lint-docs-sample-filters.sh | 3 | # ============================================================================== | COMMENT |
| MEDIUM | .ci/lint-docs-sample-filters.sh | 7 | # ============================================================================== | COMMENT |
| MEDIUM | .ci/lint-docs-tool-page.sh | 54 | # --------------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW⚡ | pypi/src/toolbox_server/main.py | 19 | except Exception as e: | CODE |
| MEDIUM⚡ | pypi/src/toolbox_server/main.py | 25 | print("Error: toolbox-server requires Python 3.9 or higher.", file=sys.stderr) | CODE |
| MEDIUM⚡ | pypi/src/toolbox_server/main.py | 31 | print(f"Error: {e}", file=sys.stderr) | CODE |
| LOW | pypi/src/toolbox_server/main.py | 45 | except Exception as e: | CODE |
| MEDIUM | pypi/src/toolbox_server/main.py | 46 | print(f"Error running toolbox binary: {e}", file=sys.stderr) | CODE |
| LOW | …en/documentation/configuration/security/model-armor.md | 207 | except Exception as e: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | …neo4j/neo4jexecutecypher/classifier/classifier_test.go | 42 | // reflect.DeepEqual provides a robust comparison for complex types, including sorted slices. | COMMENT |
| MEDIUM | internal/util/parameters/parameters_test.go | 1399 | // Use cmp.Diff for robust comparison | COMMENT |
| MEDIUM | internal/server/mcp/vdraft/method.go | 89 | // skip checking clientCapabilities since Toolbox do not utilize any of those | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | …documentation/configuration/embedding-models/_index.md | 58 | name: gemini-model # Name of the embedding model | CODE |
| MEDIUM | …documentation/configuration/embedding-models/_index.md | 105 | embeddedBy: gemini-model # refers to the name of a defined embedding model | CODE |
| MEDIUM | docs/en/reference/faq.md | 63 | ## Can I use _$BAR_ orchestration framework to use tools from Toolbox? | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pypi/tests/test_main.py | 7 | def test_get_binary_path_returns_existing_file(): | CODE |
| LOW | pypi/tests/test_main.py | 12 | def test_get_binary_path_returns_executable_file(): | CODE |
| LOW | internal/server/static/js/auth.js | 116 | export function createGoogleAuthMethodItem(toolId, authProfileName) { | CODE |
| LOW | internal/server/static/js/toolDisplay.js | 265 | function createAuthTokenInfoDropdown() { | CODE |
| LOW | …configuration/pre-post-processing/python/agent_test.py | 42 | def test_script_runs_without_errors(self, script_output): | CODE |
| LOW | …n/getting-started/quickstart/python/quickstart_test.py | 50 | def test_script_runs_without_errors(self, script_output): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .ci/trigger_exit_gate.sh | 20 | # Usage: | COMMENT |
| LOW | …ools/neo4j/neo4jexecutecypher/classifier/classifier.go | 184 | // Usage example: | COMMENT |
| LOW | …ools/neo4j/neo4jexecutecypher/classifier/classifier.go | 408 | // Usage example: | COMMENT |
| LOW | …ools/neo4j/neo4jexecutecypher/classifier/classifier.go | 424 | // Usage example: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | .ci/lint-docs-sample-filters.sh | 40 | # Check if the exact tag exists in our valid list | COMMENT |
| LOW | .ci/test_prompts_with_coverage.sh | 69 | # Check if the coverage is below the defined threshold. | COMMENT |
| LOW | .ci/generate_release_table.sh | 4 | # Check if VERSION has been set | COMMENT |
| LOW | .ci/dataproc/recreate_dataproc_cluster.sh | 38 | # Check if the cluster exists and get its status, capturing output to handle NOT_FOUND | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .ci/generate_release_table.sh | 44 | # Define the descriptions - ensure this array's order matches FILES | COMMENT |
| MEDIUM | .ci/dataproc/recreate_dataproc_cluster.sh | 68 | # Create the cluster | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/dataplex/dataplex_integration_test.go | 2672 | // Step 1: Invoke Generate/Discover/Check Tool | COMMENT |
| LOW | tests/dataplex/dataplex_integration_test.go | 2707 | // Step 2: Poll Operation Status | COMMENT |
| LOW | tests/dataplex/dataplex_integration_test.go | 2780 | // Step 3: Get Run Status | COMMENT |
| LOW | tests/dataplex/dataplex_integration_test.go | 2805 | // Step 4: Get Profile / Insights / Discovery / Quality Results | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …configuration/pre-post-processing/python/agent_test.py | 18 | CODE | |
| LOW | …n/getting-started/quickstart/python/quickstart_test.py | 17 | CODE | |
| LOW | …n/getting-started/quickstart/python/quickstart_test.py | 19 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …guration/pre-post-processing/python/langchain/agent.py | 23 | CODE | |
| LOW | …n/getting-started/quickstart/python/core/quickstart.py | 35 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …guration/pre-post-processing/python/langchain/agent.py | 56 | CODE |