registry / @okostream/mcp / 0.5.3
@okostream/mcp@0.5.3
Unsupported: update to @okostream/mcp@latest for current OKO access and onboarding.
MCP server for managing OKO Stream webinars as an organizer.
AI Security Review
scanned 4mo ago · by lpm-firewall-aiThe scanner's Firebase API-key pattern is public client configuration, while the actual organizer secret is read only to authenticate against the declared OKO service. Source inspection found no install-time execution or concrete exfiltration, persistence, remote payload, or AI-agent-control mutation chain.
Static reason
One or more suspicious static signals were detected.
Trigger
User configures and starts the oko-mcp MCP server, then invokes a tool.
Impact
Authorized organizer data and webinar state can be read or modified through user-invoked, scope-checked tools.
Mechanism
Scoped Firebase/OKO API calls and confirmed webinar-management actions.
AI rationale
The scanner's Firebase API-key pattern is public client configuration, while the actual organizer secret is read only to authenticate against the declared OKO service. Source inspection found no install-time execution or concrete exfiltration, persistence, remote payload, or AI-agent-control mutation chain.
Evidence
package.jsondist/server.jsdist/env.jsdist/auth.jsdist/tools.jsdist/firebaseDefaults.js
Network endpoints3
us-central1-okostreamcore.cloudfunctions.net/exchangeApiKeyokostreamcore-default-rtdb.firebaseio.comokostreamcore-chat.firebaseio.com
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has only prepublishOnly; no install-time hook.
- dist/server.js starts an MCP stdio server only when invoked.
- dist/auth.js exchanges the configured OKO API key with the package service.
- dist/tools.js limits local images and blocks private-network image URLs.
- dist/tools.js requires confirm:true for destructive and external side-effect tools.
- No shell execution, dynamic code loading, persistence, or credential harvesting found.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
2 flaggeddist/firebaseDefaults.jsView file
3patternName = google_api_key
severity = high
line = 3
matchedText = apiKey: ...Ag",
High
High Secret
Package contains a high-severity secret pattern.
dist/firebaseDefaults.jsView on unpkg · L33patternName = google_api_key
severity = high
line = 3
matchedText = apiKey: ...Ag",
High
Findings
2 High2 Medium6 Low
HighHigh Secretdist/firebaseDefaults.js
HighSecret Patterndist/firebaseDefaults.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @okostream/mcp@0.5.3.
See all versions of @okostream/mcp for other recorded verdicts.
- Review the evidence and your use of @okostream/mcp@0.5.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.