registry / @mastra/mcp-docs-server / 1.2.2

@mastra/mcp-docs-server@1.2.2

MCP server for accessing Mastra.ai documentation, changelogs, and news.

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 15 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 82.9 KB of source, external domains: github.com, mastra.ai

Source & flagged code

9 flagged

.docs/docs/server/auth/google.mdView file

Lines 12-52markdown

122. Set up an OAuth client for web applications

133. Add your Mastra SSO callback URL to the authorized redirect URIs

144. Configure Google Workspace groups if you plan to use RBAC

16For Google Groups RBAC, also configure a Google Workspace service account with domain-wide delegation and grant it the Directory API read-only group scope:

18```text

19https://www.googleapis.com/auth/admin.directory.group.readonly

20```

22Make sure your environment variables are set.

24```env

25GOOGLE_CLIENT_ID=your-client-id.apps.googleusercontent.com

26GOOGLE_CLIENT_SECRET=your-client-secret

27GOOGLE_REDIRECT_URI=http://localhost:4111/api/auth/sso/callback

28GOOGLE_COOKIE_PASSWORD=a-random-string-at-least-32-characters-long

29GOOGLE_ALLOWED_DOMAINS=example.com

31GOOGLE_SERVICE_ACCOUNT_EMAIL=service-account@project.iam.gserviceaccount.com

32GOOGLE_SERVICE_ACCOUNT_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"

Critical

Secret Pattern

RSA private key in .docs/docs/server/auth/google.md

.docs/docs/server/auth/google.mdView on unpkg · L32

33GOOGLE_WORKSPACE_ADMIN_EMAIL=admin@example.com

34```

36> **Note:** `GOOGLE_COOKIE_PASSWORD` encrypts session cookies. If omitted, an auto-generated value is used that doesn't survive server restarts. Set it explicitly for production.

37>

38> `MastraAuthGoogle` reads the `GOOGLE_*` auth variables automatically. The service-account variables shown above are read by the configuration code you pass to `MastraRBACGoogle`.

40## Installation

42Before you can use the `MastraAuthGoogle` class, install the `@mastra/auth-google` package.

44**npm**:

46```bash

47npm install @mastra/auth-google

48```

50**pnpm**:

52```bash

.docs/reference/workspace/google-drive-filesystem.mdView file

Lines 81-121markdown

811. Open the target folder in [Google Drive](https://drive.google.com/).

822. Select **Share**.

833. Paste the service account's `client_email` address.

844. Set the role to **Editor** (for read and write) or **Viewer** (for read-only access). Select

.docs/reference/vectors/pg.mdView file

Lines 33-73markdown

33### Connection String

35```ts

36import { PgVector } from '@mastra/pg'

38const vectorStore = new PgVector({

39 id: 'pg-vector'

.docs/reference/storage/redis.mdView file

Lines 15-55markdown

15```typescript

16import { RedisStore } from '@mastra/redis'

18const storage = new RedisStore({

19 id: 'redis-storage',

20 connectionString:

.docs/reference/storage/mssql.mdView file

Lines 57-107markdown

57 id: 'mssql-storage-1',

58 connectionString:

59 'Server=localhost,1433;Database=mydb;User Id=sa;Password=password;Encrypt=true;TrustServerCertificate=true',

60})

62// Using a connection string with a custom schema name

63const store2 = new MSSQLStore({

64 id: 'mssql-storage-2',

65 connectionString:

66 'Server=localhost,1433;Database=mydb;User Id=sa;Password=password;Encrypt=true;TrustServerCertificate=true',

.docs/reference/storage/clickhouse.mdView file

Lines 239-279markdown

239

240ClickHouse runs anywhere you can reach it over HTTP. Two common choices:

241

242- **[ClickHouse Cloud](https://clickhouse.com/cloud)**: Managed service with a free trial tier. Provides connection details directly compatible with `url`, `username`, and `password`.

243- **Self-hosted**

.docs/reference/storage/postgresql.mdView file

Lines 85-125markdown

85 connectionString: 'postgresql://user:password@localhost:5432/mydb',

86})

88// Using a connection string with pool options

89const store2 = new PostgresStore({

90 id: 'pg-storage-2',

91 connectionString: 'postgresql://user:password@localhost:5432/mydb',

92 schemaName: 'custom_schema',

93 max: 30, // Max pool connections

94 idleTimeoutMillis: 60000, // Idle timeout

.docs/reference/voice/google.mdView file

179patternName = private_key_rsa severity = critical line = 179 matchedText = private_...--',

Critical

Secret Pattern

RSA private key in .docs/reference/voice/google.md

.docs/reference/voice/google.mdView on unpkg · L179

Source & flagged code

9 flagged · loading source

.docs/docs/server/auth/google.mdView file

32patternName = private_key_rsa severity = critical line = 32 matchedText = GOOGLE_S...-\n"

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code