registry / @studiometa/forge-mcp / 0.4.5

@studiometa/forge-mcp@0.4.5

MCP server for Laravel Forge — Model Context Protocol integration for AI agents

Static Scan Results

scanned 14h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 9 file(s), 161 KB of source, external domains: forge.laravel.com, github.com, www.w3.org

Source & flagged code

4 flagged

dist/version-BdjPN_IX.jsView file

Lines 2420-2509javascript

2420 action: "activate",

2421 server_id: "123",

2422 site_id: "456",

2423 domain_id: "789"

2424 }

2425 }

2426 ]

2427 },

2428 databases: {

2429 description: "Manage MySQL/PostgreSQL databases on a server",

2430 scope: "server (requires server_id)",

2431 actions: {

2432 list: "List databases on a server",

2433 get: "Get database details",

2434 create: "Create a new database (optionally with user)",

2435 delete: "Delete a database"

2436 },

2437 fields: {

2438 name: "Database name",

2439 user: "(create only) Create a database user",

2440 password: "(create only) User password"

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/version-BdjPN_IX.jsView on unpkg · L2440

2441 },

2442 examples: [{

2443 description: "List databases",

2444 params: {

2445 resource: "databases",

2446 action: "list",

2447 server_id: "123"

2448 }

2449 }, {

2450 description: "Create database with user",

2451 params: {

2452 resource: "databases",

2453 action: "create",

2454 server_id: "123",

2455 name: "myapp",

2456 user: "admin",

2457 password: "secret123"

Medium

Secret Pattern

Hardcoded password in dist/version-BdjPN_IX.js

dist/version-BdjPN_IX.jsView on unpkg · L2457

2458 }

2459 }]

2460 },

2461 "database-users": {

2462 description: "Manage database users on a server",

2463 scope: "server (requires server_id)",

2464 actions: {

2465 list: "List database users on a server",

2466 get: "Get database user details",

2467 create: "Create a new database user",

2468 delete: "Delete a database user"

2469 },

2470 fields: {

2471 name: "Database user name",

2472 password: "User password",

Medium

Secret Pattern

Hardcoded password in dist/version-BdjPN_IX.js

dist/version-BdjPN_IX.jsView on unpkg · L2472

2473 databases: "(create only) Array of database IDs to grant access to"

2474 },

2475 examples: [{

2476 description: "List database users",

2477 params: {

2478 resource: "database-users",

2479 action: "list",

2480 server_id: "123"

2481 }

2482 }, {

2483 description: "Create a database user",

2484 params: {

2485 resource: "database-users",

2486 action: "create",

2487 server_id: "123",

2488 name: "forge",

2489 password: "secret123",

Medium

Secret Pattern

Hardcoded password in dist/version-BdjPN_IX.js

dist/version-BdjPN_IX.jsView on unpkg · L2489

2490 databases: [1, 2]

2491 }

2492 }]

2493 },

2494 daemons: {

2495 description: "Manage background processes (daemons) — queue workers, websocket servers, etc.",

2496 scope: "server (requires server_id)",

2497 actions: {

2498 list: "List daemons on a server",

2499 get: "Get daemon details",

2500 create: "Create a new daemon",

2501 delete: "Delete a daemon",

2502 restart: "Restart a daemon"

2503 },

2504 fields: {

2505 command: "Shell command to run",

2506 user: "Execution user (default: forge)",

2507 directory: "Working directory",

2508 processes: "Number of processes (default: 1)"

2509 },

Source & flagged code

4 flagged · loading source

dist/version-BdjPN_IX.jsView file

2440patternName = generic_password severity = medium line = 2440 matchedText = password...ord"

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code