integram-mcp@0.7.112

MCP server for Integram — connect AI assistants to your workspace via Model Context Protocol

AI Security Review

scanned 4d ago · by lpm-firewall-ai

The manifest has no install lifecycle hook, and inspected runtime paths show no unauthorized account action or credential transfer. The Git-based updater is documented for repository development and is conditional on running from a Git checkout.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

The user launches the CLI and configures its Integram URL and credentials.

Impact

No confirmed unauthorized account action, credential transfer, or install-time mutation was found.

Mechanism

The client authenticates to the configured service; its update check reads this package’s release tags. Automatic Git pulls apply only in a Git checkout used for repository development.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes index.js as the CLI and defines only test and prepublishOnly scripts; prepublishOnly runs a version check.
The runtime updater checks for a Git repository before pulling changes, and the README describes this as development-repository behavior.
The flagged source locations perform update-cache work, start the update check, or report a fatal error; they do not perform account actions.
Login sends caller-configured credentials to the configured Integram URL, and API requests use that same URL.
The update check queries the package registry for this package’s release tags.

Evidence against

A Git checkout automatically pulls upstream changes at startup and hourly, then installs dependencies if the checkout changed; the README documents this behavior for repository development.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

Source & flagged code

3 flagged

index.jsView file

Lines 3113-3169javascript

3113 rememberActivation();

3114 workspace = slug;

3115

3116 // Загрузить инструменты целевого воркспейса: ядро + восстановленная

3117 // из памяти активация (инцидент 05.09.2026 — см. блок у activationMemory).

3118 const { tools, restored } = await loadWorkspaceTools(slug);

3119

3120 log(`Switched to workspace "${slug}", ${activeTools.size} tools loaded (${restored} restored from memory)`);

3121

3122 return {

3123 content: [{ type: 'text', text: `Switched to workspace "${slug}". Loaded ${tools.length} tools (${activeTools.size} active${restored ? `, ${restored} restored from previous activation` : ', core only'}). Use search_tools to activate more.` }],

3124 };

3125 } catch (err) {

3126 return { content: [{ type: 'text', text: `Error switching workspace: ${err.message}` }], isError: true };

3127 }

3128}

3129

3130// ─── Bootstrap ───────────────────────────────────────────────────────────────

3131

3132// ─── Auto-update from git ────────────────────────────────────────────────────

3133

3134import { execSync } from 'child_process';

3135import { realpathSync } from 'fs';

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L3133

3136import { dirname } from 'path';

3137import { fileURLToPath } from 'url';

3138

3139const __dirname = dirname(fileURLToPath(import.meta.url));

3140const AUTO_UPDATE_INTERVAL = 60 * 60 * 1000; // check every hour

3141

3142function tryAutoUpdate() {

3143 try {

3144 execSync('git rev-parse --git-dir', { cwd: __dirname, stdio: 'ignore' });

3145 const before = execSync('git rev-parse HEAD', { cwd: __dirname, encoding: 'utf8' }).trim();

3146 execSync('git pull --ff-only', { cwd: __dirname, stdio: 'ignore', timeout: 15000 });

3147 const after = execSync('git rev-parse HEAD', { cwd: __dirname, encoding: 'utf8' }).trim();

3148 if (before !== after) {

3149 log(`Updated ${before.slice(0, 7)} → ${after.slice(0, 7)}, restarting...`);

3150 try { execSync('npm install --omit=dev', { cwd: __dirname, stdio: 'ignore', timeout: 30000 }); } catch {}

3151 // Allow pending responses to drain before exit

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L3149

3152 log('Shutting down gracefully...');

3153 setTimeout(() => process.exit(0), 2000);

3154 }

3155 } catch { /* not a git repo or offline — skip */ }

3156}

3157

3158async function main() {

3159 tryAutoUpdate();

3160 setInterval(tryAutoUpdate, AUTO_UPDATE_INTERVAL);

3161

3162 // Не ждём: запуск сервера не должен зависеть от доступности реестра npm.

3163 checkForUpdate();

3164 setInterval(checkForUpdate, UPDATE_CHECK_INTERVAL_MS).unref();

3165

3166 log(`integram-mcp ${PKG.version}`);

3167 log(`Connecting to ${BASE_URL}, workspace "${workspace || '(not set)'}"`);

3168

3169 // 1. Login

•matchType = previous_version_dangerous_delta matchedPackage = integram-mcp@0.7.104 matchedIdentity = npm:aW50ZWdyYW0tbWNw:0.7.104 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.jsView on unpkg

Source & flagged code

3 flagged · loading source

index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.jsView on unpkg

3133L3134: import { execSync } from 'child_process'; L3135: import { realpathSync } from 'fs';

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L3133

3149log(`Updated ${before.slice(0, 7)} → ${after.slice(0, 7)}, restarting...`); L3150: try { execSync('npm install --omit=dev', { cwd: __dirname, stdio: 'ignore', timeout: 30000 }); } catch {} L3151: // Allow pending responses to drain before exit

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L3149

Findings

1 Critical3 High3 Medium5 Low

CriticalPrevious Version Dangerous Deltaindex.js

HighChild Processindex.js

HighShell

HighRuntime Package Installindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to integram-mcp@0.7.112.

See all versions of integram-mcp for other recorded verdicts.

Review the evidence and your use of integram-mcp@0.7.112 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-19 10:09:32.947Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.