integram-mcp@0.7.151

MCP server for Integram — connect AI assistants to your workspace via Model Context Protocol

AI Security Review

scanned 4d ago · by lpm-firewall-ai

The manifest has no npm install lifecycle hook, and source inspection found no concrete attack behavior. The package-manager command is part of a conditional runtime Git updater; authentication and account operations target the configured service and explicit tool actions.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Running the CLI starts authentication, background checks, and the MCP server.

Impact

No confirmed harmful effect was identified.

Mechanism

Login and authenticated API requests use the configured service base URL. The updater checks for a Git checkout and runs dependency installation only after detecting a changed checkout.

AI rationale

Evidence

package.jsonindex.js

Network endpoints1

localhost:8081 (configurable via INTEGRAM_URL)

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The manifest exposes index.js as the CLI and has no preinstall, install, or postinstall hook.
Login sends caller-provided credentials to the configured service; authenticated API requests use the same configured base URL.
Workspace changes are exposed as tool calls, and deleting a workspace requires a separate confirmation.
Startup update checks run from the CLI; the updater acts only in a Git checkout and installs dependencies only after the checkout changes.

Evidence against

The source includes child-process and package-manager commands, but they belong to conditional Git-based runtime updating rather than an npm install hook.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 5 file(s), 214 KB of source, external domains: registry.npmjs.org, www.npmjs.com

Source & flagged code

3 flagged

index.jsView file

Lines 2340-2408javascript

2340

2341 // Загрузить инструменты целевого воркспейса: ядро + восстановленная

2342 // из памяти активация (инцидент 05.09.2026 — см. блок у activationMemory).

2343 const { tools, restored } = await loadWorkspaceTools(slug);

2344

2345 log(`Switched to workspace "${slug}", ${activeTools.size} tools loaded (${restored} restored from memory)`);

2346 memoryBriefingWs = null;

2347 checkMemoryBriefing();

2348

2349 return {

2350 content: [{ type: 'text', text: `Switched to workspace "${slug}". Loaded ${tools.length} tools (${activeTools.size} active${restored ? `, ${restored} restored from previous activation` : ', core only'}). Use search_tools to activate more.` }],

2351 };

2352 } catch (err) {

2353 return { content: [{ type: 'text', text: `Error switching workspace: ${err.message}` }], isError: true };

2354 }

2355}

2356

2357// ─── Bootstrap ───────────────────────────────────────────────────────────────

2358

2359// ─── Auto-update from git ────────────────────────────────────────────────────

2360

2361import { execSync } from 'child_process';

2362import { realpathSync } from 'fs';

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L2360

2363import { dirname } from 'path';

2364import { fileURLToPath } from 'url';

2365

2366const __dirname = dirname(fileURLToPath(import.meta.url));

2367const AUTO_UPDATE_INTERVAL = 60 * 60 * 1000; // check every hour

2368

2369function tryAutoUpdate() {

2370 try {

2371 // Слепое пятно git pull: в дев-дереве репо уезжает вперёд ЛОКАЛЬНЫМИ

2372 // коммитами (bump-on-change поднимает версию при правках mcp-server),

2373 // и pull отвечает «Already up to date», не замечая смены кода под

2374 // процессом. Поэтому версия из package.json на диске сверяется с

2375 // запущенной ПЕРВЫМ делом — расхождение само по себе повод к рестарту.

2376 const diskVersion = createRequire(import.meta.url)('./package.json').version;

2377 if (cmpVersion(diskVersion, PKG.version) !== 0) {

2378 log(`Version on disk is ${diskVersion}, running ${PKG.version} — restarting to pick it up...`);

2379 log('Shutting down gracefully...');

2380 setTimeout(() => process.exit(0), 2000);

2381 return;

2382 }

2383 execSync('git rev-parse --git-dir', { cwd: __dirname, stdio: 'ignore' });

2384 const before = execSync('git rev-parse HEAD', { cwd: __dirname, encoding: 'utf8' }).trim();

2385 execSync('git pull --ff-only', { cwd: __dirname, stdio: 'ignore', timeout: 15000 });

2386 const after = execSync('git rev-parse HEAD', { cwd: __dirname, encoding: 'utf8' }).trim();

2387 if (before !== after) {

2388 log(`Updated ${before.slice(0, 7)} → ${after.slice(0, 7)}, restarting...`);

2389 try { execSync('npm install --omit=dev', { cwd: __dirname, stdio: 'ignore', timeout: 30000 }); } catch {}

2390 // Allow pending responses to drain before exit

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L2388

2391 log('Shutting down gracefully...');

2392 setTimeout(() => process.exit(0), 2000);

2393 }

2394 } catch { /* not a git repo or offline — skip */ }

2395}

2396

2397async function main() {

2398 tryAutoUpdate();

2399 setInterval(tryAutoUpdate, AUTO_UPDATE_INTERVAL);

2400

2401 // Не ждём: запуск сервера не должен зависеть от доступности реестра npm.

2402 checkForUpdate();

2403 setInterval(checkForUpdate, UPDATE_CHECK_INTERVAL_MS).unref();

2404

2405 log(`integram-mcp ${PKG.version}`);

2406 log(`Connecting to ${BASE_URL}, workspace "${workspace || '(not set)'}"`);

2407

2408 // 1. Login

•matchType = previous_version_dangerous_delta matchedPackage = integram-mcp@0.7.104 matchedIdentity = npm:aW50ZWdyYW0tbWNw:0.7.104 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.jsView on unpkg

Source & flagged code

3 flagged · loading source

index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

index.jsView on unpkg

2360L2361: import { execSync } from 'child_process'; L2362: import { realpathSync } from 'fs';

High

Child Process

Package source references child process execution.

index.jsView on unpkg · L2360

2388log(`Updated ${before.slice(0, 7)} → ${after.slice(0, 7)}, restarting...`); L2389: try { execSync('npm install --omit=dev', { cwd: __dirname, stdio: 'ignore', timeout: 30000 }); } catch {} L2390: // Allow pending responses to drain before exit

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

index.jsView on unpkg · L2388

Findings

1 Critical3 High3 Medium5 Low

CriticalPrevious Version Dangerous Deltaindex.js

HighChild Processindex.js

HighShell

HighRuntime Package Installindex.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to integram-mcp@0.7.151.

See all versions of integram-mcp for other recorded verdicts.

Review the evidence and your use of integram-mcp@0.7.151 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-19 10:12:27.595Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.