registry / novada-mcp / 0.8.9

novada-mcp@0.8.9

One MCP server for all web data. Search, scrape, crawl, proxy, and AI research in one install.

AI Security Review

scanned 4d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The package is an MCP/CLI client for Novada web data APIs with user-invoked network, proxy, browser, and output-writing features aligned with its description.

Static reason

One or more suspicious static signals were detected.

Trigger

User starts the MCP server/CLI and calls a Novada tool.

Impact

External web/API requests and local result files under Downloads; no unconsented install/import-time behavior found.

Mechanism

User-invoked Novada API client and web data tooling

Rationale

Static inspection shows a feature-rich Novada MCP/CLI package whose suspicious primitives are package-aligned and user-invoked, with no concrete install-time, import-time, exfiltration, persistence, or agent-control mutation behavior. Account/proxy capabilities introduce sensitive functionality but are explicit product features with masking and confirmation gates rather than hidden attack behavior.

Evidence

package.jsonbuild/index.jsbuild/cli.jsbuild/config.jsbuild/utils/credentials.jsbuild/utils/output.jsbuild/tools/proxy.jsbuild/tools/browser.jsbuild/tools/static_ip_mgmt.jsbuild/tools/ip_whitelist.js~/Downloads/novada-mcp

Network endpoints6

scraper.novada.comapi.novada.com/g/api/proxyscraperapi.novada.comwebunlocker.novada.comapi-m.novada.comwss://upg-scbr2.novada.com

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

Provides proxy/browser/scraping capabilities that can access external sites when user calls MCP tools.
build/utils/credentials.js can fetch Novada proxy/browser sub-account credentials from api-m.novada.com using NOVADA_API_KEY.
Some tools can write results to ~/Downloads/novada-mcp and account-management tools can perform confirmed write actions.

Evidence against

package.json prepare only runs build chmod; prepublishOnly blocks publishing with .env present, no install-time exfiltration found.
build/index.js registers MCP tools; behavior is runtime user-invoked, not import-time execution.
Network hosts are Novada service endpoints or user-supplied target URLs for advertised search/extract/scrape/proxy features.
Secrets are read from Novada env vars and masked in proxy output; no credential harvesting beyond package-aligned auth use found.
No child_process, native binary loading, persistence, destructive filesystem behavior, or AI-agent config mutation found.
Write/billable management actions inspected require explicit confirm/dry-run style gates.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 75 file(s), 846 KB of source, external domains: api-m.novada.com, api.novada.com, dashboard.novada.com, developer-api.novada.com, docs.example.com, example.com, github.com, scraper.novada.com, scraperapi.novada.com, status.novada.com, web.archive.org, webunlocker.novada.com, www.novada.com

Source & flagged code

7 flagged

build/tools/proxy.jsView file

Lines 104-136javascript

104 ``,

105 `# Set NOVADA_PROXY_PASS in your environment first:`,

106 `curl --proxy "${proxyUrlShell}" <your-url>`,

107 ``,

108 `## Agent Hints`,

109 `- Add this flag to any curl command to route through the proxy.`,

110 `- For multi-step workflows needing the same IP, add session_id param.`,

111 ].join("\n");

112 }

113 // Default: url format

114 return [

115 `## Proxy Configuration`,

116 `type: ${typeLabel}`,

117 params.country ? `targeting: ${params.country.toUpperCase()}${params.city ? ` / ${params.city}` : ""}` : "",

118 params.session_id ? `session: ${params.session_id} (sticky IP)` : "session: rotating (new IP per request)",

119 `proxy_url: ${maskedUrl}`,

120 ``,

121 `## Usage Examples`,

122 ``,

123 `Node.js (axios):`,

124 ` proxy: { host: "${proxyHost}", port: ${proxyPort}, auth: { username: "${username}", password: "<NOVADA_PROXY_PASS>" } }`,

Medium

Secret Pattern

Package contains a possible secret pattern.

build/tools/proxy.jsView on unpkg · L124

125 ``,

126 `Python (requests):`,

127 ` proxies = { "http": "${maskedUrl}", "https": "${maskedUrl}" }`,

128 ` # Replace *** with the value of NOVADA_PROXY_PASS`,

129 ``,

130 `## Agent Hints`,

131 `- proxy_url above shows *** for the password — read NOVADA_PROXY_PASS from your environment to complete it.`,

132 `- For consistent IP across a workflow, set session_id (e.g. "my-session-1").`,

133 `- For web extraction tasks, novada_extract handles proxy routing automatically.`,

134 ].filter(l => l !== "").join("\n");

135}

136//# sourceMappingURL=proxy.js.map

skills/novada-agent/setup.shView file

•path = skills/novada-agent/setup.sh kind = build_helper sizeBytes = 493 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/novada-agent/setup.shView on unpkg

build/tools/proxy_residential.jsView file

Lines 104-137javascript

104 ``,

105 `# Add this flag to any curl command — replace *** with $NOVADA_PROXY_PASS:`,

106 `curl --proxy "${maskedUrl}" <your-url>`,

107 ``,

108 `## agent_instruction`,

109 `Best for geo-restricted content. Use country param for targeting. Residential IPs bypass most anti-bot systems.`,

110 `To get the actual proxy URL with credentials: substitute *** with the runtime value of the NOVADA_PROXY_PASS environment variable.`

build/tools/proxy_account_create.jsView file

Lines 67-107javascript

67/**

68 * Create a proxy sub-account on api-m.novada.com (`/v1/proxy_account/create`).

69 *

70 * Two-step confirm gate: without `confirm: true`, the tool returns a preview

71 * payload and does NOT hit the API. Agents MUST surface the preview to the

72 * human user and only re-call with `confirm: true` after explicit approval.

73 *

74 * Request body is multipart/form-data per the API contract — handled centrally

75 * by devApiPost. Fields posted: product, account, password, status,

76 * remark?, limit_flow?.

77 */

build/tools/proxy_mobile.jsView file

Lines 107-141javascript

107 ``,

108 `# Add this flag to any curl command — replace *** with $NOVADA_PROXY_PASS:`,

109 `curl --proxy "${maskedUrl}" <your-url>`,

110 ``,

111 `## agent_instruction`,

112 `Mobile IPs. Best for mobile-targeted content and apps. Pair with mobile User-Agent for best results.`,

113 `To get the actual proxy URL with credentials: substitute *** with the runtime value of the NOVADA_PROXY_PASS environment variable.`

build/tools/proxy_datacenter.jsView file

Lines 95-128javascript

95 ``,

96 `# Add this flag to any curl command — replace *** with $NOVADA_PROXY_PASS:`,

97 `curl --proxy "${maskedUrl}" <your-url>`,

98 ``,

99 `## agent_instruction`,

100 `Fastest proxies. Best for high-volume, non-anti-bot targets. If blocked, upgrade to novada_proxy_isp or novada_proxy_residential.`,

101 `To get the actual proxy URL with credentials: substitute *** with the runtime value of the NOVADA_PROXY_PASS environment variable.`

build/tools/proxy_isp.jsView file

Lines 97-130javascript

97 ``,

98 `# Add this flag to any curl command — replace *** with $NOVADA_PROXY_PASS:`,

99 `curl --proxy "${maskedUrl}" <your-url>`,

100 ``,

101 `## agent_instruction`,

102 `ISP proxies look like real home users. Best for social/ecommerce. Use novada_proxy_residential for stronger anti-bot scenarios.`,

103 `To get the actual proxy URL with credentials: substitute *** with the runtime value of the NOVADA_PROXY_PASS environment variable.`

Source & flagged code

7 flagged · loading source

build/tools/proxy.jsView file

124patternName = generic_password severity = medium line = 124 matchedText = ` proxy... }`,

Medium

Secret Pattern

Package contains a possible secret pattern.

build/tools/proxy.jsView on unpkg · L124

skills/novada-agent/setup.shView file

•path = skills/novada-agent/setup.sh kind = build_helper sizeBytes = 493 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/novada-agent/setup.shView on unpkg

build/tools/proxy_residential.jsView file

124patternName = generic_password severity = medium line = 124 matchedText = ` proxy... }`,

Medium

Secret Pattern

Hardcoded password in build/tools/proxy_residential.js

build/tools/proxy_residential.jsView on unpkg · L124

build/tools/proxy_account_create.jsView file

87patternName = generic_password severity = medium line = 87 matchedText = password...**",

Medium

Secret Pattern

Hardcoded password in build/tools/proxy_account_create.js

build/tools/proxy_account_create.jsView on unpkg · L87

build/tools/proxy_mobile.jsView file

127patternName = generic_password severity = medium line = 127 matchedText = ` proxy... }`,

Medium

Secret Pattern

Hardcoded password in build/tools/proxy_mobile.js

build/tools/proxy_mobile.jsView on unpkg · L127

build/tools/proxy_datacenter.jsView file

115patternName = generic_password severity = medium line = 115 matchedText = ` proxy... }`,

Medium

Secret Pattern

Hardcoded password in build/tools/proxy_datacenter.js

build/tools/proxy_datacenter.jsView on unpkg · L115

build/tools/proxy_isp.jsView file

117patternName = generic_password severity = medium line = 117 matchedText = ` proxy... }`,

Medium

Secret Pattern

Hardcoded password in build/tools/proxy_isp.js

build/tools/proxy_isp.jsView on unpkg · L117

Findings

10 Medium5 Low

MediumSecret Patternbuild/tools/proxy.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperskills/novada-agent/setup.sh

MediumStructural Risk Force Deep Review

MediumSecret Patternbuild/tools/proxy_residential.js

MediumSecret Patternbuild/tools/proxy_account_create.js

MediumSecret Patternbuild/tools/proxy_mobile.js

MediumSecret Patternbuild/tools/proxy_datacenter.js

MediumSecret Patternbuild/tools/proxy_isp.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

build/tools/proxy.jsView file

Lines 104-136javascript

104 ``,

105 `# Set NOVADA_PROXY_PASS in your environment first:`,

106 `curl --proxy "${proxyUrlShell}" <your-url>`,

107 ``,

108 `## Agent Hints`,

109 `- Add this flag to any curl command to route through the proxy.`,

110 `- For multi-step workflows needing the same IP, add session_id param.`,

111 ].join("\n");

112 }

113 // Default: url format

114 return [

115 `## Proxy Configuration`,

116 `type: ${typeLabel}`,

117 params.country ? `targeting: ${params.country.toUpperCase()}${params.city ? ` / ${params.city}` : ""}` : "",

118 params.session_id ? `session: ${params.session_id} (sticky IP)` : "session: rotating (new IP per request)",

119 `proxy_url: ${maskedUrl}`,

120 ``,

121 `## Usage Examples`,

122 ``,

123 `Node.js (axios):`,

124 ` proxy: { host: "${proxyHost}", port: ${proxyPort}, auth: { username: "${username}", password: "<NOVADA_PROXY_PASS>" } }`,

Medium

Secret Pattern

Package contains a possible secret pattern.

build/tools/proxy.jsView on unpkg · L124

125 ``,

126 `Python (requests):`,

127 ` proxies = { "http": "${maskedUrl}", "https": "${maskedUrl}" }`,

128 ` # Replace *** with the value of NOVADA_PROXY_PASS`,

129 ``,

130 `## Agent Hints`,

131 `- proxy_url above shows *** for the password — read NOVADA_PROXY_PASS from your environment to complete it.`,

132 `- For consistent IP across a workflow, set session_id (e.g. "my-session-1").`,

133 `- For web extraction tasks, novada_extract handles proxy routing automatically.`,

134 ].filter(l => l !== "").join("\n");

135}

136//# sourceMappingURL=proxy.js.map

skills/novada-agent/setup.shView file

•path = skills/novada-agent/setup.sh kind = build_helper sizeBytes = 493 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/novada-agent/setup.shView on unpkg

build/tools/proxy_residential.jsView file

Lines 104-137javascript

104 ``,

105 `# Add this flag to any curl command — replace *** with $NOVADA_PROXY_PASS:`,

106 `curl --proxy "${maskedUrl}" <your-url>`,

107 ``,

108 `## agent_instruction`,

109 `Best for geo-restricted content. Use country param for targeting. Residential IPs bypass most anti-bot systems.`,

110 `To get the actual proxy URL with credentials: substitute *** with the runtime value of the NOVADA_PROXY_PASS environment variable.`

build/tools/proxy_account_create.jsView file

Lines 67-107javascript

67/**

68 * Create a proxy sub-account on api-m.novada.com (`/v1/proxy_account/create`).

69 *

70 * Two-step confirm gate: without `confirm: true`, the tool returns a preview

71 * payload and does NOT hit the API. Agents MUST surface the preview to the

72 * human user and only re-call with `confirm: true` after explicit approval.

73 *

74 * Request body is multipart/form-data per the API contract — handled centrally

75 * by devApiPost. Fields posted: product, account, password, status,

76 * remark?, limit_flow?.

77 */

build/tools/proxy_mobile.jsView file

Lines 107-141javascript

107 ``,

108 `# Add this flag to any curl command — replace *** with $NOVADA_PROXY_PASS:`,

109 `curl --proxy "${maskedUrl}" <your-url>`,

110 ``,

111 `## agent_instruction`,

112 `Mobile IPs. Best for mobile-targeted content and apps. Pair with mobile User-Agent for best results.`,

113 `To get the actual proxy URL with credentials: substitute *** with the runtime value of the NOVADA_PROXY_PASS environment variable.`

build/tools/proxy_datacenter.jsView file

Lines 95-128javascript

95 ``,

96 `# Add this flag to any curl command — replace *** with $NOVADA_PROXY_PASS:`,

97 `curl --proxy "${maskedUrl}" <your-url>`,

98 ``,

99 `## agent_instruction`,

100 `Fastest proxies. Best for high-volume, non-anti-bot targets. If blocked, upgrade to novada_proxy_isp or novada_proxy_residential.`,

101 `To get the actual proxy URL with credentials: substitute *** with the runtime value of the NOVADA_PROXY_PASS environment variable.`

build/tools/proxy_isp.jsView file

Lines 97-130javascript

97 ``,

98 `# Add this flag to any curl command — replace *** with $NOVADA_PROXY_PASS:`,

99 `curl --proxy "${maskedUrl}" <your-url>`,

100 ``,

101 `## agent_instruction`,

102 `ISP proxies look like real home users. Best for social/ecommerce. Use novada_proxy_residential for stronger anti-bot scenarios.`,

103 `To get the actual proxy URL with credentials: substitute *** with the runtime value of the NOVADA_PROXY_PASS environment variable.`