Home / googleapis / mcp-toolbox
Repository Analysis

googleapis/mcp-toolbox

MCP Toolbox for Databases is an open source MCP server for databases.

5.1 Low AI signal View on GitHub
5.1
Adjusted Score
5.1
Raw Score
100%
Time Factor
2026-05-29
Last Push
15,395
Stars
Go
Language
281,824
Lines of Code
1583
Files
1001
Pattern Hits
2026-05-31
Scan Date

Score History

No multi-scan history yet — run the scanner again to build trend data.

Severity Breakdown

CRITICAL 32HIGH 17MEDIUM 10LOW 942

Pattern Findings

1001 matches across 14 categories. Click a row to expand file-level details.

Over-Commented Block907 hits · 907 pts
SeverityFileLineSnippet
LOW.golangci.yaml1# Copyright 2024 Google LLC.
LOWmain.go1// Copyright 2024 Google LLC
LOWcmd/root_test.go1// Copyright 2024 Google LLC
LOWcmd/root.go1// Copyright 2024 Google LLC
LOWcmd/internal/config.go1// Copyright 2026 Google LLC
LOWcmd/internal/options.go1// Copyright 2026 Google LLC
LOWcmd/internal/imports.go1// Copyright 2026 Google LLC
LOWcmd/internal/flags.go1// Copyright 2026 Google LLC
LOWcmd/internal/options_test.go1// Copyright 2024 Google LLC
LOWcmd/internal/config_test.go1// Copyright 2026 Google LLC
LOWcmd/internal/invoke/command.go1// Copyright 2026 Google LLC
LOWcmd/internal/invoke/command_test.go1// Copyright 2026 Google LLC
LOWcmd/internal/migrate/command.go1// Copyright 2026 Google LLC
LOWcmd/internal/migrate/command_test.go1// Copyright 2026 Google LLC
LOWcmd/internal/skills/command.go1// Copyright 2026 Google LLC
LOWcmd/internal/skills/command_test.go1// Copyright 2026 Google LLC
LOWcmd/internal/skills/generator.go1// Copyright 2026 Google LLC
LOWcmd/internal/skills/generator_test.go1// Copyright 2026 Google LLC
LOWcmd/internal/serve/command.go1// Copyright 2026 Google LLC
LOWcmd/internal/serve/command_test.go1// Copyright 2026 Google LLC
LOW.gemini/config.yaml1# Copyright 2025 Google LLC
LOW.ci/versioned.release.cloudbuild.yaml1# Copyright 2024 Google LLC
LOW.ci/integration.cloudbuild.yaml1# Copyright 2024 Google LLC
LOW.ci/integration.cloudbuild.yaml721 # - id: "dgraph"
LOW.ci/test_prompts_with_coverage.sh1#!/bin/bash
LOW.ci/continuous.release.cloudbuild.yaml1# Copyright 2024 Google LLC
LOW.ci/sample_tests/run_tests.sh1# Copyright 2026 Google LLC
LOW…sts/pre_post_processing/go.integration.cloudbuild.yaml1# Copyright 2026 Google LLC
LOW…sts/pre_post_processing/py.integration.cloudbuild.yaml1# Copyright 2026 Google LLC
LOW…sts/pre_post_processing/js.integration.cloudbuild.yaml1# Copyright 2026 Google LLC
LOW…sample_tests/quickstart/go.integration.cloudbuild.yaml1# Copyright 2025 Google LLC
LOW…sample_tests/quickstart/py.integration.cloudbuild.yaml1# Copyright 2025 Google LLC
LOW…sample_tests/quickstart/js.integration.cloudbuild.yaml1# Copyright 2025 Google LLC
LOW.hugo/hugo.cloudflare.toml1# Copyright 2026 Google LLC
LOW.hugo/data/filters.yaml1# Copyright 2026 Google LLC
LOWtests/option.go1// Copyright 2025 Google LLC
LOWtests/embedding.go1// Copyright 2026 Google LLC
LOWtests/server.go1// Copyright 2024 Google LLC
LOWtests/auth.go1// Copyright 2024 Google LLC
LOWtests/mcp_tool.go1// Copyright 2026 Google LLC
LOWtests/common.go1// Copyright 2025 Google LLC
LOWtests/tool.go1// Copyright 2025 Google LLC
LOWtests/source.go1// Copyright 2025 Google LLC
LOWtests/mcp_types.go1// Copyright 2026 Google LLC
LOWtests/dgraph/dgraph_integration_test.go1// Copyright 2025 Google LLC
LOWtests/neo4j/neo4j_integration_test.go1// Copyright 2024 Google LLC
LOWtests/alloydbomni/alloydb_omni_integration_test.go1// Copyright 2026 Google LLC
LOWtests/clickhouse/clickhouse_integration_test.go1// Copyright 2025 Google LLC
LOWtests/cloudstorage/cloud_storage_integration_test.go1// Copyright 2026 Google LLC
LOWtests/alloydbpg/alloydb_pg_integration_test.go1// Copyright 2024 Google LLC
LOWtests/looker/looker_integration_test.go1// Copyright 2025 Google LLC
LOWtests/bigtable/bigtable_integration_test.go1// Copyright 2025 Google LLC
LOWtests/mariadb/mariadb_integration_test.go1// Copyright 2025 Google LLC
LOWtests/firestore/firestore_integration_test.go1// Copyright 2025 Google LLC
LOWtests/redis/redis_test.go1// Copyright 2025 Google LLC
LOWtests/auth/auth_integration_test.go1// Copyright 2026 Google LLC
LOWtests/dataplex/dataplex_integration_test.go1// Copyright 2025 Google LLC
LOWtests/cloudsqlpg/cloud_sql_pg_create_instances_test.go1// Copyright 2025 Google LLC
LOWtests/cloudsqlpg/cloud_sql_pg_integration_test.go1// Copyright 2024 Google LLC
LOWtests/cloudsqlpg/cloud_sql_pg_vectorassist_test.go1// Copyright 2026 Google LLC
847 more matches not shown…
Hallucination Indicators32 hits · 375 pts
SeverityFileLineSnippet
CRITICAL…s/cloudhealthcare/cloud_healthcare_integration_test.go99 _ = service.Projects.Locations.Datasets.FhirStores.List(datasetName).Pages(ctx, func(page *healthcare.ListFhirStoresRes
CRITICAL…s/cloudhealthcare/cloud_healthcare_integration_test.go108 _, _ = service.Projects.Locations.Datasets.FhirStores.Delete(store.Name).Context(ctx).Do()
CRITICAL…s/cloudhealthcare/cloud_healthcare_integration_test.go115 _ = service.Projects.Locations.Datasets.DicomStores.List(datasetName).Pages(ctx, func(page *healthcare.ListDicomStoresR
CRITICAL…s/cloudhealthcare/cloud_healthcare_integration_test.go124 _, _ = service.Projects.Locations.Datasets.DicomStores.Delete(store.Name).Context(ctx).Do()
CRITICAL…s/cloudhealthcare/cloud_healthcare_integration_test.go272 resp, err := service.Projects.Locations.Datasets.FhirStores.Fhir.Create(fhirStoreName, resourceType, resourceBody).Do()
CRITICAL…s/cloudhealthcare/cloud_healthcare_integration_test.go313 if fhirStore, err = service.Projects.Locations.Datasets.FhirStores.Create(datasetName, fhirStore).FhirStoreId(fhirStore
CRITICAL…s/cloudhealthcare/cloud_healthcare_integration_test.go318 if _, err := service.Projects.Locations.Datasets.FhirStores.Delete(fhirStore.Name).Do(); err != nil {
CRITICAL…s/cloudhealthcare/cloud_healthcare_integration_test.go327 if dicomStore, err = service.Projects.Locations.Datasets.DicomStores.Create(datasetName, dicomStore).DicomStoreId(dicom
CRITICAL…s/cloudhealthcare/cloud_healthcare_integration_test.go332 if _, err := service.Projects.Locations.Datasets.DicomStores.Delete(dicomStore.Name).Do(); err != nil {
CRITICAL…s/cloudhealthcare/cloud_healthcare_integration_test.go420 call := service.Projects.Locations.Datasets.DicomStores.StoreInstances(storeName, "studies", buf)
CRITICALinternal/sources/alloydbadmin/alloydbadmin.go194 resp, err := service.Projects.Locations.Clusters.Instances.Create(urlString, instance).InstanceId(instanceID).Do()
CRITICALinternal/sources/alloydbadmin/alloydbadmin.go223 resp, err := service.Projects.Locations.Clusters.Users.Create(urlString, user).UserId(userID).Do()
CRITICALinternal/sources/alloydbadmin/alloydbadmin.go255 resp, err := service.Projects.Locations.Clusters.Instances.Get(urlString).Do()
CRITICALinternal/sources/alloydbadmin/alloydbadmin.go270 resp, err := service.Projects.Locations.Clusters.Users.Get(urlString).Do()
CRITICALinternal/sources/alloydbadmin/alloydbadmin.go300 resp, err := service.Projects.Locations.Clusters.Instances.List(urlString).Do()
CRITICALinternal/sources/alloydbadmin/alloydbadmin.go315 resp, err := service.Projects.Locations.Clusters.Users.List(urlString).Do()
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go95 if _, err = svc.Projects.Locations.Datasets.FhirStores.Get(dsName).Do(); err != nil {
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go105 _, err := svc.Projects.Locations.Datasets.FhirStores.Get(name).Do()
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go117 _, err := svc.Projects.Locations.Datasets.DicomStores.Get(name).Do()
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go328 resp, err := svc.Projects.Locations.Datasets.FhirStores.Fhir.PatientEverything(name).Do(opts...)
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go347 resp, err := svc.Projects.Locations.Datasets.FhirStores.Fhir.SearchType(name, "Patient", bytes.NewReader(body)).Do(opts
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go376 call := svc.Projects.Locations.Datasets.FhirStores.Fhir.Read(name)
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go393 store, err := svc.Projects.Locations.Datasets.DicomStores.Get(storeName).Do()
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go407 store, err := svc.Projects.Locations.Datasets.FhirStores.Get(storeName).Do()
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go421 store, err := svc.Projects.Locations.Datasets.DicomStores.GetDICOMStoreMetrics(storeName).Do()
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go435 store, err := svc.Projects.Locations.Datasets.FhirStores.GetFHIRStoreMetrics(storeName).Do()
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go449 stores, err := svc.Projects.Locations.Datasets.DicomStores.List(datasetName).Do()
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go477 stores, err := svc.Projects.Locations.Datasets.FhirStores.List(datasetName).Do()
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go506 call := svc.Projects.Locations.Datasets.DicomStores.Studies.Series.Instances.Frames.RetrieveRendered(name, dicomWebPath
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go534 resp, err = svc.Projects.Locations.Datasets.DicomStores.SearchForInstances(name, dicomWebPath).Do(opts...)
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go536 resp, err = svc.Projects.Locations.Datasets.DicomStores.SearchForSeries(name, dicomWebPath).Do(opts...)
CRITICALinternal/sources/cloudhealthcare/cloud_healthcare.go538 resp, err = svc.Projects.Locations.Datasets.DicomStores.SearchForStudies(name, dicomWebPath).Do(opts...)
Magic Placeholder Names9 hits · 45 pts
SeverityFileLineSnippet
HIGHcmd/internal/config_test.go1466 t.Setenv("API_KEY", "your_api_key")
HIGHcmd/internal/config_test.go1524 t.Setenv("ELASTICSEARCH_APIKEY", "your_api_key")
HIGH…onfiguration/pre-post-processing/js/langchain/agent.js18const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key
HIGH…tion/configuration/pre-post-processing/js/adk/agent.js4process.env.GOOGLE_GENAI_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key
HIGH…s/en/documentation/getting-started/local_quickstart.md124 echo 'GOOGLE_API_KEY="YOUR_API_KEY"' > my_agent/.env
HIGH…ion/getting-started/quickstart/js/genkit/quickstart.js5const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key
HIGH…/getting-started/quickstart/js/langchain/quickstart.js7const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key
HIGH…tation/getting-started/quickstart/js/adk/quickstart.js21process.env.GOOGLE_GENAI_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key
HIGH…tion/getting-started/quickstart/js/genAI/quickstart.js6const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY || 'your-api-key'; // Replace it with your API key
Cross-File Repetition8 hits · 40 pts
SeverityFileLineSnippet
HIGH…guration/pre-post-processing/python/langchain/agent.py0you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho
HIGH…/configuration/pre-post-processing/python/adk/agent.py0you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho
HIGH…ing-started/quickstart/python/llamaindex/quickstart.py0you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho
HIGH…ting-started/quickstart/python/langchain/quickstart.py0you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho
HIGH…on/getting-started/quickstart/python/adk/quickstart.py0you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho
HIGH…s/en/integrations/bigquery/samples/local_quickstart.md0you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho
HIGH…s/en/integrations/bigquery/samples/local_quickstart.md0you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho
HIGH…s/en/integrations/bigquery/samples/local_quickstart.md0you're a helpful hotel assistant. you handle hotel searching, booking and cancellations. when the user searches for a ho
Fake / Example Data14 hits · 14 pts
SeverityFileLineSnippet
LOW…s/cloudhealthcare/cloud_healthcare_integration_test.go343 "address":[{"use":"home","line":["123 Main St"],"city":"san fransisco","state":"CA","postalCode":"12345","country":"US
LOW…s/cloudhealthcare/cloud_healthcare_integration_test.go346 "telecom":[{"system":"phone","value":"555-1234","use":"home"},{"system":"email","value":"john@foo.com","use":"work"}],
LOW…s/cloudhealthcare/cloud_healthcare_integration_test.go1441 requestBody: bytes.NewBuffer([]byte(`{"storeID":"` + fhirStoreID + `", "givenName":"john","addressSubstring":"main
LOW…esearchdicomseries/cloudhealthcaresearchdicomseries.go104 parameters.NewBooleanParameterWithDefault(common.EnablePatientNameFuzzyMatchingKey, false, `Whether to enable fuzzy ma
LOW…hdicominstances/cloudhealthcaresearchdicominstances.go107 parameters.NewBooleanParameterWithDefault(common.EnablePatientNameFuzzyMatchingKey, false, `Whether to enable fuzzy ma
LOW…earchdicomstudies/cloudhealthcaresearchdicomstudies.go100 parameters.NewBooleanParameterWithDefault(common.EnablePatientNameFuzzyMatchingKey, false, `Whether to enable fuzzy ma
LOW…egrations/firestore/tools/firestore-update-document.md87 "stringValue": "Jane Doe"
LOW…cs/en/integrations/mongodb/tools/mongodb-insert-one.md40`tool_code: create_new_user(data='{"email": "new.user@example.com", "name": "Jane Doe", "status": "active"}')`
LOWdocs/en/integrations/cassandra/tools/cassandra-cql.md50 "email": "user@example.com",
LOWdocs/en/integrations/alloydb/samples/mcp_quickstart.md101 (1, 'John Doe', 'john.doe@example.com'),
LOW…hcare/tools/cloud-healthcare-search-dicom-instances.md53| fuzzymatching | boolean | false | Whether to enable fuzzy matching for patient names. Fuzzy matching
LOW…lthcare/tools/cloud-healthcare-search-dicom-studies.md49| fuzzymatching | boolean | false | Whether to enable fuzzy matching for patient names. Fuzzy matching
LOW…althcare/tools/cloud-healthcare-search-dicom-series.md51| fuzzymatching | boolean | false | Whether to enable fuzzy matching for patient names. Fuzzy matching
LOWdocs/en/samples/prompts_quickstart_gemini_cli.md138 (455, 'Pizza Palace', '123 Main St'),
Decorative Section Separators4 hits · 12 pts
SeverityFileLineSnippet
MEDIUM.ci/lint-docs-source-page.sh53# ---------------------
MEDIUM.ci/lint-docs-sample-filters.sh3# ==============================================================================
MEDIUM.ci/lint-docs-sample-filters.sh7# ==============================================================================
MEDIUM.ci/lint-docs-tool-page.sh54# ---------------------
Excessive Try-Catch Wrapping6 hits · 12 pts
SeverityFileLineSnippet
LOWpypi/setup.py78 except Exception as e:
LOWpypi/src/toolbox_server/main.py19 except Exception as e:
MEDIUMpypi/src/toolbox_server/main.py25 print("Error: toolbox-server requires Python 3.9 or higher.", file=sys.stderr)
MEDIUMpypi/src/toolbox_server/main.py31 print(f"Error: {e}", file=sys.stderr)
LOWpypi/src/toolbox_server/main.py45 except Exception as e:
MEDIUMpypi/src/toolbox_server/main.py46 print(f"Error running toolbox binary: {e}", file=sys.stderr)
AI Slop Vocabulary2 hits · 6 pts
SeverityFileLineSnippet
MEDIUM…neo4j/neo4jexecutecypher/classifier/classifier_test.go42 // reflect.DeepEqual provides a robust comparison for complex types, including sorted slices.
MEDIUMinternal/util/parameters/parameters_test.go1359 // Use cmp.Diff for robust comparison
Redundant / Tautological Comments3 hits · 4 pts
SeverityFileLineSnippet
LOW.ci/lint-docs-sample-filters.sh40 # Check if the exact tag exists in our valid list
LOW.ci/test_prompts_with_coverage.sh69# Check if the coverage is below the defined threshold.
LOW.ci/generate_release_table.sh4# Check if VERSION has been set
Example Usage Blocks3 hits · 4 pts
SeverityFileLineSnippet
LOW…ools/neo4j/neo4jexecutecypher/classifier/classifier.go184// Usage example:
LOW…ools/neo4j/neo4jexecutecypher/classifier/classifier.go408// Usage example:
LOW…ools/neo4j/neo4jexecutecypher/classifier/classifier.go424// Usage example:
Deep Nesting4 hits · 4 pts
SeverityFileLineSnippet
LOWpypi/setup.py20
LOWpypi/setup.py38
LOW…guration/pre-post-processing/python/langchain/agent.py23
LOW…n/getting-started/quickstart/python/core/quickstart.py35
Unused Imports4 hits · 4 pts
SeverityFileLineSnippet
LOWpypi/tests/test_wrapper.py3
LOW…configuration/pre-post-processing/python/agent_test.py18
LOW…n/getting-started/quickstart/python/quickstart_test.py17
LOW…n/getting-started/quickstart/python/quickstart_test.py19
Hyper-Verbose Identifiers4 hits · 4 pts
SeverityFileLineSnippet
LOWinternal/server/static/js/auth.js116export function createGoogleAuthMethodItem(toolId, authProfileName) {
LOWinternal/server/static/js/toolDisplay.js265function createAuthTokenInfoDropdown() {
LOW…configuration/pre-post-processing/python/agent_test.py42 def test_script_runs_without_errors(self, script_output):
LOW…n/getting-started/quickstart/python/quickstart_test.py50 def test_script_runs_without_errors(self, script_output):
Self-Referential Comments1 hit · 3 pts
SeverityFileLineSnippet
MEDIUM.ci/generate_release_table.sh14# Define the descriptions - ensure this array's order matches FILES