@hostinger/mcp@1.60.1
MCP server for Hostinger API
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe active request path can forward a Hostinger credential to any API_BASE_URL chosen by the caller. The default endpoint is package-aligned, but the unrestricted override leaves a concrete credential exposure risk.
Static reason
One or more suspicious static signals were detected.
Trigger
A user or process sets API_BASE_URL and invokes an MCP tool.
Impact
A configured untrusted endpoint could receive a Hostinger credential and request data.
Mechanism
The runtime combines the configured base URL with an API path, adds a bearer authorization header, and sends the request through Axios.
AI rationale
The active request path can forward a Hostinger credential to any API_BASE_URL chosen by the caller. The default endpoint is package-aligned, but the unrestricted override leaves a concrete credential exposure risk.
Evidence
src/core/runtime.jssrc/core/oauth.js
Network endpoints1
developers.hostinger.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The runtime accepts an unrestricted API base URL from an environment variable.
- It builds requests from that base URL without a destination allowlist.
- It obtains a bearer token and adds it to the request authorization header before sending the request.
- The token resolver supports Hostinger token environment variables.
Evidence against
- The default API endpoint is Hostinger's developer domain.
- The request occurs only when an MCP tool is invoked.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedbuild.jsView file
2L3: import { exec } from 'child_process';
L4: import fs from 'fs';
High
18console.log('Compiling TypeScript...');
L19: exec('npx tsc', (error, stdout, stderr) => {
L20: if (error) {
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
build.jsView on unpkg · L18src/core/runtime.jsView file
42this.debug = process.env.DEBUG === "true";
this.baseUrl = process.env.API_BASE_URL || "https://developers.hostinger.com";
this.headers = this.parseHeaders(pro
Medium
Ai Review Evidence
The runtime accepts an unrestricted API base URL from an environment variable.
src/core/runtime.jsView on unpkg · L42Findings
3 High5 Medium4 Low
HighChild Processbuild.js
HighShell
HighRuntime Package Installbuild.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumAi Review Evidencesrc/core/runtime.js
MediumAi Review Evidencesrc/core/runtime.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @hostinger/mcp@1.60.1.
See all versions of @hostinger/mcp for other recorded verdicts.
- Review the evidence and your use of @hostinger/mcp@1.60.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.