registry / @okostream/mcp / 0.5.0
@okostream/mcp@0.5.0
Unsupported: update to @okostream/mcp@latest for current OKO access and onboarding.
MCP server for managing OKO Stream webinars as an organizer.
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic inspection shows a documented OKO MCP server with runtime-authenticated Firebase/API operations and guarded local image handling, not an install-time hijack or covert data theft chain. Suspicious scanner hits are explained by package-aligned network/env use and public Firebase client defaults.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs oko-mcp/npx @okostream/mcp and invokes MCP tools with OKO_API_KEY.
Impact
Can modify OKO account resources when authorized; no evidence of covert exfiltration or install-time compromise.
Mechanism
Authenticated OKO/Firebase MCP operations and optional image upload handling.
AI rationale
Static inspection shows a documented OKO MCP server with runtime-authenticated Firebase/API operations and guarded local image handling, not an install-time hijack or covert data theft chain. Suspicious scanner hits are explained by package-aligned network/env use and public Firebase client defaults.
Evidence
package.jsonREADME.mddist/server.jsdist/env.jsdist/auth.jsdist/firebase.jsdist/firebaseDefaults.jsdist/tools.jsdist/utils.jsdist/videoUrl.js
Network endpoints5
us-central1-okostreamcore.cloudfunctions.net/exchangeApiKeyokostreamcore-default-rtdb.firebaseio.comokostreamcore-chat.firebaseio.comokostreamcore.firebaseapp.comokostreamcore.firebasestorage.app
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- dist/tools.js exposes write/delete MCP tools for OKO webinar, chat, workspace, Telegram, and participant operations.
- dist/env.js loads ~/.env and process env, including OKO_API_KEY and Firebase overrides.
- dist/tools.js can read user-selected local image files and HTTPS image URLs for upload workflows.
Evidence against
- package.json has no preinstall/install/postinstall hooks; prepublishOnly only builds before publishing.
- dist/server.js only starts an MCP stdio server and registers guides/tools at runtime.
- dist/auth.js sends OKO_API_KEY only to configured OKO exchange URL and signs into Firebase with returned token.
- dist/firebaseDefaults.js contains public Firebase client config, documented in README.md as non-secret defaults.
- dist/tools.js local image reads are user-invoked, constrained to OKO_IMAGE_ROOTS, size/type checked, and not broad harvesting.
- No child_process, eval, dynamic require/import, native binary loading, persistence, or AI-agent config mutation found.
Behavioral surface
CryptoEnvironmentVars
Source & flagged code
2 flaggeddist/firebaseDefaults.jsView file
3patternName = google_api_key
severity = high
line = 3
matchedText = apiKey: ...Ag",
High
High Secret
Package contains a high-severity secret pattern.
dist/firebaseDefaults.jsView on unpkg · L33patternName = google_api_key
severity = high
line = 3
matchedText = apiKey: ...Ag",
High
Findings
2 High2 Medium6 Low
HighHigh Secretdist/firebaseDefaults.js
HighSecret Patterndist/firebaseDefaults.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @okostream/mcp@0.5.0.
See all versions of @okostream/mcp for other recorded verdicts.
- Review the evidence and your use of @okostream/mcp@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.