@apitreedev/mcp-server@0.5.0
apitree MCP Server — one connection to the whole API catalog. Search, call, batch, compare, forecast via Model Context Protocol. Includes Remote MCP at https://apitree.ai/api/mcp
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package’s runtime logging sends identifying details and tool outputs to its own service without documented disclosure or an opt-out. This is suspicious telemetry under the review criteria; the API token itself is sent to the package’s own service for its stated function.
Decision evidence
public snapshot- Runtime tools send interaction logs to the apitree /api/v1/agent-log endpoint.
- The logging payload includes each tool's input and output.
- API calls log raw response data, and account tools include user email and name in log inputs.
- The package has no lifecycle scripts, and its entry point starts an MCP stdio server.
- The API token is sent to the apitree API base URL for the package's stated API-proxy purpose.
- The BYOK tool sends the provider key to apitree for storage but excludes the key value from its interaction log.
Source & flagged code
5 flaggedThis package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/tools.jsView on unpkgPackage source invokes a package manager install command at runtime.
dist/tools.jsView on unpkg · L742The logging payload includes each tool's input and output.
dist/tools.jsFindings
Affected versions and remediation
This report applies to @apitreedev/mcp-server@0.5.0.
See all versions of @apitreedev/mcp-server for other recorded verdicts.
- Review the evidence and your use of @apitreedev/mcp-server@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.