registry / Destructive action / @okostream/mcp / 0.12.15

@okostream/mcp@0.12.15

Control OKO Stream webinars from Claude, Codex, and other MCP clients.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No concrete malicious install hook, exfiltration path beyond the stated OKO authentication exchange, or stealth persistence was found. The package nevertheless has significant credential-bearing MCP and destructive remote-control capability, so it should be warned rather than automatically marked clean.

Static reason

No blocking static signals were detected.

Trigger

Start the MCP server and invoke an authenticated tool through an MCP client.

Impact

A client with a valid, deletion-scoped key could alter or remove the organizer's remote webinar data.

Mechanism

Scoped remote webinar administration through Firebase and OKO APIs.

AI rationale

Evidence

dist/server.js~/.env

Network endpoints1

us-central1-okostreamcore.cloudfunctions.net/exchangeApiKey

Decision evidence

public snapshot

AI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The executable MCP server loads a home-directory dotenv file at startup.
When configured, it sends the named OKO API key to the OKO key-exchange endpoint.
It exposes authenticated destructive webinar deletion tools, though they require explicit confirmation and scoped authorization.

Evidence against

The manifest has no registry install lifecycle hook; prepublishOnly is publisher-side.
The observed endpoint is an OKO service endpoint and the request is limited to the configured OKO API key and version.
Deletion paths require an events:delete scope and confirmation fields.
No package-authored child-process execution, arbitrary code loading, persistence, or broad local-file harvesting was found.

Behavioral surface

Source

Eval

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 0 file(s), 256 KB of source, external domains: example.com, raw.githubusercontent.com

Source & flagged code

6 flagged

dist/server.jsView file

1232// validation function arguments L1233: data: new codegen_1.Name("data"), L1234: // data passed to validation function ... L2259: id = normalizeId(id); L2260: return resolver.resolve(baseId, id); L2261: } ... L3122: for (i = 0; i < input.length; i++) { L3123: code = input[i].charCodeAt(0); L3124: if (code === 48) { ... L9700: L9701: // node_modules/@grpc/grpc-js/package.json L9702: var require_package = __commonJS({

High

Browser Session Account Hijack

Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.

dist/server.jsView on unpkg · L1232

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/server.jsView on unpkg

•path = dist/server.js kind = oversized_source_file sizeBytes = 4580749 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

Findings

2 High4 Medium6 Low

HighBrowser Session Account Hijackdist/server.js

HighSemantic Analysis Limiteddist/server.js

MediumOversized Source Filedist/server.js

MediumOversized Cli Entrypointdist/server.js

MediumStructural Risk Force Deep Review

MediumAi Review Evidencedist/server.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/server.js

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @okostream/mcp@0.12.15.

See all versions of @okostream/mcp for other recorded verdicts.

Review the evidence and your use of @okostream/mcp@0.12.15 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-13 04:49:58.395Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / Destructive action / @okostream/mcp / 0.12.15

@okostream/mcp@0.12.15

Control OKO Stream webinars from Claude, Codex, and other MCP clients.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Static reason

No blocking static signals were detected.

Trigger

Start the MCP server and invoke an authenticated tool through an MCP client.

Impact

A client with a valid, deletion-scoped key could alter or remove the organizer's remote webinar data.

Mechanism

Scoped remote webinar administration through Firebase and OKO APIs.

AI rationale

Evidence

dist/server.js~/.env

Network endpoints1

us-central1-okostreamcore.cloudfunctions.net/exchangeApiKey

Decision evidence

public snapshot

AI called this Suspicious at 78.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The executable MCP server loads a home-directory dotenv file at startup.
When configured, it sends the named OKO API key to the OKO key-exchange endpoint.
It exposes authenticated destructive webinar deletion tools, though they require explicit confirmation and scoped authorization.

Evidence against

The manifest has no registry install lifecycle hook; prepublishOnly is publisher-side.
The observed endpoint is an OKO service endpoint and the request is limited to the configured OKO API key and version.
Deletion paths require an events:delete scope and confirmation fields.
No package-authored child-process execution, arbitrary code loading, persistence, or broad local-file harvesting was found.

Behavioral surface

Source

Eval

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 0 file(s), 256 KB of source, external domains: example.com, raw.githubusercontent.com

Source & flagged code

6 flagged

dist/server.jsView file

High

Browser Session Account Hijack

Browser source reuses an authenticated session to collect identity data and mutate account settings while reporting externally.

dist/server.jsView on unpkg · L1232

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/server.jsView on unpkg

•path = dist/server.js kind = oversized_source_file sizeBytes = 4580749 magicHex = [redacted]

Medium

Oversized Source File

Package contains source files above the normal full-analysis size ceiling.

Findings

2 High4 Medium6 Low

HighBrowser Session Account Hijackdist/server.js

HighSemantic Analysis Limiteddist/server.js

MediumOversized Source Filedist/server.js

MediumOversized Cli Entrypointdist/server.js

MediumStructural Risk Force Deep Review

MediumAi Review Evidencedist/server.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/server.js

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @okostream/mcp@0.12.15.

See all versions of @okostream/mcp for other recorded verdicts.

Review the evidence and your use of @okostream/mcp@0.12.15 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-13 04:49:58.395Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.