registry / @okostream/mcp / 0.7.2
@okostream/mcp@0.7.2
Unsupported: update to @okostream/mcp@latest for current OKO access and onboarding.
Control OKO Stream webinars from Claude, Codex, and other MCP clients.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiStatic inspection shows a user-configured, package-aligned MCP integration with scoped credentials and confirmation gates. The Firebase API key flagged by the scanner is public Firebase project configuration, not a private credential or malicious payload.
Static reason
One or more suspicious static signals were detected.
Trigger
User configures and runs the MCP server, then invokes a tool.
Impact
Authorized organizer data and webinar state can be read or changed through user-invoked MCP tools.
Mechanism
Scoped OKO API-key exchange, Firebase-backed webinar tools, and opt-in image import.
AI rationale
Static inspection shows a user-configured, package-aligned MCP integration with scoped credentials and confirmation gates. The Firebase API key flagged by the scanner is public Firebase project configuration, not a private credential or malicious payload.
Evidence
package.jsondist/server.jsdist/auth.jsdist/env.jsdist/tools.jsdist/firebaseDefaults.js~/.env
Network endpoints3
us-central1-okostreamcore.cloudfunctions.net/exchangeApiKeyokostreamcore-default-rtdb.firebaseio.comokostreamcore-chat.firebaseio.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- `dist/auth.js` sends the user-provided OKO API key only to the configured OKO exchange endpoint during authentication.
- `dist/tools.js` can read explicitly allowlisted local images and perform scoped webinar operations after MCP tool calls.
Evidence against
- `package.json` has no preinstall/install/postinstall hook; `prepublishOnly` only builds before publishing.
- `dist/server.js` is a stdio MCP server started by explicit user configuration; it does not modify agent configuration.
- `dist/tools.js` disables local reads unless `OKO_IMAGE_ROOTS` is set, enforces path containment, and requires explicit confirmation for side effects.
- `dist/tools.js` restricts remote image retrieval to public HTTPS with DNS/IP validation and redirect limits.
- No shell execution, eval/vm use, persistence, credential harvesting, or foreign control-surface writes found in package source.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
Source & flagged code
2 flaggeddist/firebaseDefaults.jsView file
3patternName = google_api_key
severity = high
line = 3
matchedText = apiKey: ...Ag",
High
High Secret
Package contains a high-severity secret pattern.
dist/firebaseDefaults.jsView on unpkg · L33patternName = google_api_key
severity = high
line = 3
matchedText = apiKey: ...Ag",
High
Findings
2 High2 Medium6 Low
HighHigh Secretdist/firebaseDefaults.js
HighSecret Patterndist/firebaseDefaults.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @okostream/mcp@0.7.2.
See all versions of @okostream/mcp for other recorded verdicts.
- Review the evidence and your use of @okostream/mcp@0.7.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.