registry / @studiometa/forge-mcp / 0.4.4

@studiometa/forge-mcp@0.4.4

MCP server for Laravel Forge — Model Context Protocol integration for AI agents

Static Scan Results

scanned 20d ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 158 KB of source, external domains: forge.laravel.com, github.com, www.w3.org

Source & flagged code

4 flagged

dist/version-DNuuHvcD.jsView file

Lines 2375-2464javascript

2375 action: "activate",

2376 server_id: "123",

2377 site_id: "456",

2378 domain_id: "789"

2379 }

2380 }

2381 ]

2382 },

2383 databases: {

2384 description: "Manage MySQL/PostgreSQL databases on a server",

2385 scope: "server (requires server_id)",

2386 actions: {

2387 list: "List databases on a server",

2388 get: "Get database details",

2389 create: "Create a new database (optionally with user)",

2390 delete: "Delete a database"

2391 },

2392 fields: {

2393 name: "Database name",

2394 user: "(create only) Create a database user",

2395 password: "(create only) User password"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/version-DNuuHvcD.jsView on unpkg · L2395

2396 },

2397 examples: [{

2398 description: "List databases",

2399 params: {

2400 resource: "databases",

2401 action: "list",

2402 server_id: "123"

2403 }

2404 }, {

2405 description: "Create database with user",

2406 params: {

2407 resource: "databases",

2408 action: "create",

2409 server_id: "123",

2410 name: "myapp",

2411 user: "admin",

2412 password: "secret123"

Medium

Secret Pattern

Hardcoded password in dist/version-DNuuHvcD.js

dist/version-DNuuHvcD.jsView on unpkg · L2412

2413 }

2414 }]

2415 },

2416 "database-users": {

2417 description: "Manage database users on a server",

2418 scope: "server (requires server_id)",

2419 actions: {

2420 list: "List database users on a server",

2421 get: "Get database user details",

2422 create: "Create a new database user",

2423 delete: "Delete a database user"

2424 },

2425 fields: {

2426 name: "Database user name",

2427 password: "User password",

Medium

Secret Pattern

Hardcoded password in dist/version-DNuuHvcD.js

dist/version-DNuuHvcD.jsView on unpkg · L2427

2428 databases: "(create only) Array of database IDs to grant access to"

2429 },

2430 examples: [{

2431 description: "List database users",

2432 params: {

2433 resource: "database-users",

2434 action: "list",

2435 server_id: "123"

2436 }

2437 }, {

2438 description: "Create a database user",

2439 params: {

2440 resource: "database-users",

2441 action: "create",

2442 server_id: "123",

2443 name: "forge",

2444 password: "secret123",

Medium

Secret Pattern

Hardcoded password in dist/version-DNuuHvcD.js

dist/version-DNuuHvcD.jsView on unpkg · L2444

2445 databases: [1, 2]

2446 }

2447 }]

2448 },

2449 daemons: {

2450 description: "Manage background processes (daemons) — queue workers, websocket servers, etc.",

2451 scope: "server (requires server_id)",

2452 actions: {

2453 list: "List daemons on a server",

2454 get: "Get daemon details",

2455 create: "Create a new daemon",

2456 delete: "Delete a daemon",

2457 restart: "Restart a daemon"

2458 },

2459 fields: {

2460 command: "Shell command to run",

2461 user: "Execution user (default: forge)",

2462 directory: "Working directory",

2463 processes: "Number of processes (default: 1)"

2464 },

Source & flagged code

4 flagged · loading source

dist/version-DNuuHvcD.jsView file

2395patternName = generic_password severity = medium line = 2395 matchedText = password...ord"

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code