registry / mcp-vk-ads / 1.2.1

mcp-vk-ads@1.2.1

MCP server for the VK Ads (VK Реклама) API — manage ad plans, ad groups, banners and pull statistics from AI agents.

AI Security Review

scanned 8h ago · by lpm-firewall-ai

This is an MCP server with user-invoked tools that can create, modify, stop, or delete VK Ads objects using a supplied token. No covert install-time or foreign-control-surface behavior is established.

Static reason

No blocking static signals were detected.

Trigger

Running the mcp-vk-ads binary and invoking a write-capable MCP tool with valid VK Ads credentials.

Impact

An authorized or overly-permitted MCP client could alter or delete advertising campaigns, groups, and banners.

Mechanism

Authenticated VK Ads API mutation through MCP tools

Rationale

No concrete malicious behavior was found. It nevertheless provides a high-impact, agent-accessible advertising-account mutation capability, so it warrants a warning rather than a publication block.

Evidence

package.jsondist/config.jsdist/client.jsdist/index.jsdist/tools/raw.jsdist/tools/util.jsdist/tools/adPlans.jsdist/tools/adGroups.jsdist/tools/banners.js

Network endpoints1

ads.vk.com/api

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

dist/tools/raw.js permits confirmed POST/DELETE VK Ads calls.
dist/tools/{adPlans,adGroups,banners}.js exposes create, update, and delete-status actions.
dist/client.js sends VK_ADS_TOKEN as a Bearer token to its configured API base.

Evidence against

package.json has no preinstall/install/postinstall hook; prepare only builds dist.
dist/config.js defaults to https://ads.vk.com/api and only reads VK Ads configuration.
dist/client.js rejects raw paths resolving to a foreign origin before fetch.
No child-process, eval, dynamic loading, filesystem writes, or non-VK exfiltration found.

Behavioral surface

Source

EnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 46.1 KB of source, external domains: ads.vk.com

Source & flagged code

2 flagged

dist/tools/raw.jsView file

•Published source reference

Medium

Ai Review Evidence

dist/tools/raw.js permits confirmed POST/DELETE VK Ads calls.

dist/tools/raw.jsView on unpkg

dist/client.jsView file

•Published source reference

Medium

Ai Review Evidence

dist/client.js sends VK_ADS_TOKEN as a Bearer token to its configured API base.

dist/client.jsView on unpkg

Source & flagged code

2 flagged · loading source

dist/tools/raw.jsView file

•Published source reference

Medium

Ai Review Evidence

dist/tools/raw.js permits confirmed POST/DELETE VK Ads calls.

dist/tools/raw.jsView on unpkg

dist/client.jsView file

•Published source reference

Medium

Ai Review Evidence

dist/client.js sends VK_ADS_TOKEN as a Bearer token to its configured API base.

dist/client.jsView on unpkg

Findings

5 Medium5 Low

MediumNetwork

MediumEnvironment Vars

MediumAi Review Evidencedist/tools/raw.js

MediumAi Review Evidence

MediumAi Review Evidencedist/client.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LPM CLI

Entrypoints

bin → mcp-vk-ads

Runtimenode >=20

Artifact60.6 KB · 15 files1 signature(s)

Install lifecycleprepareprepublishOnly

Behavioral surface

EnvironmentVarsFilesystemNetworkHighEntropyStringsUrlStringsManifest: clean

Source & flagged code

2 flagged

dist/tools/raw.jsView file

•Published source reference

Medium

Ai Review Evidence

dist/tools/raw.js permits confirmed POST/DELETE VK Ads calls.

dist/tools/raw.jsView on unpkg

dist/client.jsView file

•Published source reference

Medium

Ai Review Evidence

dist/client.js sends VK_ADS_TOKEN as a Bearer token to its configured API base.

dist/client.jsView on unpkg