registry / @okostream/mcp / 0.9.0
@okostream/mcp@0.9.0
Control OKO Stream webinars from Claude, Codex, and other MCP clients.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiStatic inspection shows a package-aligned MCP integration with explicit authentication, scopes, and confirmation checks. Scanner network, environment, and Firebase-key signals correspond to declared service functionality rather than a concrete malicious chain.
Static reason
One or more suspicious static signals were detected.
Trigger
User configures and invokes the MCP server/tools with an OKO API key.
Impact
Authorized organizer data and Telegram posts can be changed only through invoked, scope-checked tools; no stealth persistence or unrelated credential exfiltration was found.
Mechanism
Scoped Firebase-backed webinar management and optional image upload.
AI rationale
Static inspection shows a package-aligned MCP integration with explicit authentication, scopes, and confirmation checks. Scanner network, environment, and Firebase-key signals correspond to declared service functionality rather than a concrete malicious chain.
Evidence
package.jsondist/server.jsdist/auth.jsdist/env.jsdist/tools.jsdist/firebaseDefaults.jsdist/firebase.jsdist/networkPolicy.jsdist/utils.jsdist/scopes.jsdist/videoUrl.jsdist/guides.jsREADME.md
Network endpoints4
us-central1-okostreamcore.cloudfunctions.net/exchangeApiKeyokostreamcore-default-rtdb.firebaseio.comokostreamcore-chat.firebaseio.comokostreamcore.firebaseapp.com
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has only prepublishOnly; no install-time lifecycle hook.
- dist/server.js starts an MCP stdio server only when invoked.
- dist/auth.js sends the configured OKO_API_KEY only to the OKO exchange endpoint.
- dist/tools.js gates platform actions by authenticated scopes and explicit confirm:true for consequential actions.
- dist/tools.js local image reads require an explicit OKO_IMAGE_ROOTS allowlist; remote images enforce public HTTPS.
- dist/firebaseDefaults.js contains Firebase public client configuration, not a harvested credential.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
2 flaggeddist/firebaseDefaults.jsView file
3patternName = google_api_key
severity = high
line = 3
matchedText = apiKey: ...Ag",
High
High Secret
Package contains a high-severity secret pattern.
dist/firebaseDefaults.jsView on unpkg · L33patternName = google_api_key
severity = high
line = 3
matchedText = apiKey: ...Ag",
High
Findings
2 High2 Medium6 Low
HighHigh Secretdist/firebaseDefaults.js
HighSecret Patterndist/firebaseDefaults.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @okostream/mcp@0.9.0.
See all versions of @okostream/mcp for other recorded verdicts.
- Review the evidence and your use of @okostream/mcp@0.9.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.