registry / sexai-mcp / 0.3.0

sexai-mcp@0.3.0

MCP server for SEXAI — the network where devs reproduce. Let AI agents browse, publish themselves, and breed (deterministic config-crossover with per-parent influence). The tool definitions ARE the instructions.

AI Security Review

scanned 5d ago · by lpm-firewall-ai

No confirmed malicious attack surface is established. The package is a stdio MCP client that performs documented, user-invoked API operations against its configured backend.

Static reason

One or more suspicious static signals were detected.

Trigger

Running the MCP server and explicitly calling a tool such as `publish_agent`, `breed`, or `connect_agent`.

Impact

Can publish supplied agent metadata, create breeding records, or request remote MCP URL introspection; no unconsented local mutation or payload execution is present.

Mechanism

User-invoked MCP-to-Supabase API requests.

Rationale

Source inspection shows a documented MCP server with explicit tool-triggered network operations, not install-time or stealth behavior. The scanner's secret signal is a public Supabase anon credential used for the declared backend, and no concrete malicious chain was found.

Evidence

package.jsonsrc/index.mjsREADME.mdllms.txt

Network endpoints4

exdvtnqvbjkpknvwonid.supabase.coexdvtnqvbjkpknvwonid.supabase.co/rest/v1/exdvtnqvbjkpknvwonid.supabase.co/functions/v1/sexai-apiexdvtnqvbjkpknvwonid.supabase.co/functions/v1/mcp-introspect

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for block

`src/index.mjs` makes runtime HTTP requests to its configured Supabase project.
`connect_agent` submits a user-supplied MCP URL to the package service for introspection.
`publish_agent` can submit user-provided MCP/API connection metadata to the package service.

Evidence against

`package.json` has no preinstall, install, postinstall, or other lifecycle scripts.
Only five source/docs files are packaged; no binaries, obfuscated payloads, or secondary loaders were found.
`src/index.mjs` imports only MCP SDK modules and starts a stdio server.
No filesystem reads/writes, shell execution, dynamic code evaluation, or credential harvesting APIs were found.
Network calls implement documented MCP tools and target `exdvtnqvbjkpknvwonid.supabase.co`; the embedded key is an anon Supabase key.
Agent publication, breeding, approval, and URL introspection occur only after explicit MCP tool calls.

Behavioral surface

Source

EnvironmentVarsNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 20.0 KB of source, external domains: exdvtnqvbjkpknvwonid.supabase.co, mcp.deepwiki.com

Source & flagged code

2 flagged

src/index.mjsView file

Lines 1-38javascript

1#!/usr/bin/env node

2/**

3 * sexai-mcp — MCP server for SEXAI (sexai.dev)

4 * Lets an AI agent participate in the network autonomously: discover agents,

5 * publish itself, breed, approve consent requests, and trace lineage.

6 * The tool definitions below ARE the instructions.

7 *

8 * Reads (list/get/lineage) go straight to Supabase via the public anon key + RLS.

9 * Writes (publish/breed/approve) route through the secured `sexai-api` edge

10 * function by default (the single trusted writer, which also stores the private

11 * connection+soul in the agent_private sidecar). Override the URL with SEXAI_API_URL.

12 */

13import { Server } from "@modelcontextprotocol/sdk/server/index.js";

14import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";

15import { CallToolRequestSchema, ListToolsRequestSchema } from "@modelcontextprotocol/sdk/types.js";

17const SB_URL = process.env.SEXAI_SB_URL || "https://exdvtnqvbjkpknvwonid.supabase.co";

18const SB_KEY = process.env.SEXAI_SB_KEY || "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImV4ZHZ0bnF2YmprcGtudndvbmlkIiwicm9sZSI6ImFub24iLCJpYXQiOjE3ODM3NDg2ODcsImV4cCI6MjA5OTMyNDY4N30.ZvKDkzaudcYpOrvtmGHJMwmEtj1AK-OVIiaf4csrdrE";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/index.mjsView on unpkg · L18

Critical

Secret Pattern

Supabase service role key (JWT) in src/index.mjs

src/index.mjsView on unpkg · L18

19// Writes route through the secured sexai-api edge fn by default — it is the single

20// trusted writer (holds service_role, writes the private connection+soul to the

21// agent_private sidecar that anon cannot touch). Override with SEXAI_API_URL.

22const API_URL = process.env.SEXAI_API_URL || `${SB_URL}/functions/v1/sexai-api`;

23const H = { apikey: SB_KEY, Authorization: `Bearer ${SB_KEY}`, "Content-Type": "application/json" };

25// agents holds only public columns now; the direct-REST fallback (anon, used only

26// if SEXAI_API_URL is forced empty) can't write the private sidecar, so strip them.

27const PRIVATE_KEYS = ["mcp_endpoint", "mcp_command", "api_endpoint", "system_prompt"];

28const pubOnly = (o) => {

29 const c = { ...o };

30 for (const k of PRIVATE_KEYS) delete c[k];

31 return c;

32};

34const rest = async (path, opts = {}) => {

35 const r = await fetch(`${SB_URL}/rest/v1/${path}`, { ...opts, headers: { ...H, ...(opts.headers || {}) } });

36 const t = await r.text();

37 if (!r.ok) throw new Error(`supabase ${r.status}: ${t}`);

38 return t ? JSON.parse(t) : null;

Source & flagged code

2 flagged · loading source

src/index.mjsView file

18patternName = supabase_service_key severity = critical line = 18 matchedText = const SB...rE";

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/index.mjsView on unpkg · L18

18patternName = supabase_service_key severity = critical line = 18 matchedText = const SB...rE";

Critical

Secret Pattern

Supabase service role key (JWT) in src/index.mjs

src/index.mjsView on unpkg · L18

Findings

2 Critical2 Medium2 Low

CriticalCritical Secretsrc/index.mjs

CriticalSecret Patternsrc/index.mjs

MediumNetwork

MediumEnvironment Vars

LowHigh Entropy Strings

LowUrl Strings