registry / @mastra/mcp-docs-server / 1.2.4

@mastra/mcp-docs-server@1.2.4

MCP server for accessing Mastra.ai documentation, changelogs, and news.

Static Scan Results

scanned 19d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 15 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

EnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 82.9 KB of source, external domains: github.com, mastra.ai

Source & flagged code

9 flagged

.docs/docs/server/auth/google.mdView file

Lines 14-54markdown

142. Set up an OAuth client for web applications

153. Add your Mastra SSO callback URL to the authorized redirect URIs

164. Configure Google Workspace groups if you plan to use RBAC

18For Google Groups RBAC, also configure a Google Workspace service account with domain-wide delegation and grant it the Directory API read-only group scope:

20```text

21https://www.googleapis.com/auth/admin.directory.group.readonly

22```

24Make sure your environment variables are set.

26```env

27GOOGLE_CLIENT_ID=your-client-id.apps.googleusercontent.com

28GOOGLE_CLIENT_SECRET=your-client-secret

29GOOGLE_REDIRECT_URI=http://localhost:4111/api/auth/sso/callback

30GOOGLE_COOKIE_PASSWORD=a-random-string-at-least-32-characters-long

31GOOGLE_ALLOWED_DOMAINS=example.com

33GOOGLE_SERVICE_ACCOUNT_EMAIL=service-account@project.iam.gserviceaccount.com

34GOOGLE_SERVICE_ACCOUNT_PRIVATE_KEY="-----BEGIN PRIVATE KEY-----\n...\n-----END PRIVATE KEY-----\n"

Critical

Secret Pattern

RSA private key in .docs/docs/server/auth/google.md

.docs/docs/server/auth/google.mdView on unpkg · L34

35GOOGLE_WORKSPACE_ADMIN_EMAIL=admin@example.com

36```

38> **Note:** `GOOGLE_COOKIE_PASSWORD` encrypts session cookies. If omitted, an auto-generated value is used that doesn't survive server restarts. Set it explicitly for production.

39>

40> `MastraAuthGoogle` reads the `GOOGLE_*` auth variables automatically. The service-account variables shown above are read by the configuration code you pass to `MastraRBACGoogle`.

42## Installation

44Before you can use the `MastraAuthGoogle` class, install the `@mastra/auth-google` package.

46**npm**:

48```bash

49npm install @mastra/auth-google

50```

52**pnpm**:

54```bash

.docs/reference/workspace/google-drive-filesystem.mdView file

Lines 83-123markdown

831. Open the target folder in [Google Drive](https://drive.google.com/).

842. Select **Share**.

853. Paste the service account's `client_email` address.

864. Set the role to **Editor** (for read and write) or **Viewer** (for read-only access). Select

.docs/reference/vectors/pg.mdView file

Lines 35-75markdown

35### Connection String

37```ts

38import { PgVector } from '@mastra/pg'

40const vectorStore = new PgVector({

41 id: 'pg-vector'

.docs/reference/storage/redis.mdView file

Lines 17-57markdown

17```typescript

18import { RedisStore } from '@mastra/redis'

20const storage = new RedisStore({

21 id: 'redis-storage',

22 connectionString:

.docs/reference/storage/mssql.mdView file

Lines 59-109markdown

59 id: 'mssql-storage-1',

60 connectionString:

61 'Server=localhost,1433;Database=mydb;User Id=sa;Password=password;Encrypt=true;TrustServerCertificate=true',

62})

64// Using a connection string with a custom schema name

65const store2 = new MSSQLStore({

66 id: 'mssql-storage-2',

67 connectionString:

68 'Server=localhost,1433;Database=mydb;User Id=sa;Password=password;Encrypt=true;TrustServerCertificate=true',

.docs/reference/storage/clickhouse.mdView file

Lines 241-281markdown

241

242ClickHouse runs anywhere you can reach it over HTTP. Two common choices:

243

244- **[ClickHouse Cloud](https://clickhouse.com/cloud)**: Managed service with a free trial tier. Provides connection details directly compatible with `url`, `username`, and `password`.

245- **Self-hosted**

.docs/reference/storage/postgresql.mdView file

Lines 87-127markdown

87 connectionString: 'postgresql://user:password@localhost:5432/mydb',

88})

90// Using a connection string with pool options

91const store2 = new PostgresStore({

92 id: 'pg-storage-2',

93 connectionString: 'postgresql://user:password@localhost:5432/mydb',

94 schemaName: 'custom_schema',

95 max: 30, // Max pool connections

96 idleTimeoutMillis: 60000, // Idle timeout

.docs/reference/voice/google.mdView file

181patternName = private_key_rsa severity = critical line = 181 matchedText = private_...--',

Critical

Secret Pattern

RSA private key in .docs/reference/voice/google.md

.docs/reference/voice/google.mdView on unpkg · L181

Source & flagged code

9 flagged · loading source

.docs/docs/server/auth/google.mdView file

34patternName = private_key_rsa severity = critical line = 34 matchedText = GOOGLE_S...-\n"

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code