Announcing Beacon: Self-improving memory for coding agents

← All MCP servers

MCP server

io.tooltrace/mcp-server

mcp:tooltrace-io/mcp-server

Web tools for AI agents: scrape pages to Markdown, audit SEO, detect tech stacks, check sitemaps

awesome-mcp-servers Glama MCP Registry

Verdict

No issues found

No suspicious or malicious behavior was found.

Analyzed Oct 26, 2026, 12:04 UTC at 0692e7e

0

findings

—

highest severity

0

threat classes

14

files scanned

222/222

checks satisfied

0

package advisories

Why this verdict

benign: 222 checks satisfied, no findings for mcp-server:.

Security findings 0

No security findings

No suspicious or malicious behavior was found; 1 candidate finding was refuted on review.

Execution chain 161

What it calls, runs, installs, reads and writes, with the line that does it.

Environment variables 3

PORT

src/http.ts:24 · read

TOOLTRACE_API_BASE

src/server.ts:21 · read

TOOLTRACE_API_KEY

src/server.ts:35 · read

GitHub repositories 2

tooltrace-io/mcp-server

package.json:11 · url

tooltrace-io/mcp-server

server.json:6 · url

Network calls 10

<dynamic>

src/server.ts:48 · call

<dynamic>

src/server.ts:211 · via:callApi

<dynamic>

src/server.ts:241 · via:callApi

<dynamic>

src/server.ts:276 · via:callApi

<dynamic>

src/server.ts:311 · via:callApi

<dynamic>

src/server.ts:341 · via:callApi

<dynamic>

src/server.ts:371 · via:callApi

<dynamic>

src/server.ts:396 · via:callApi

api.tooltrace.io

src/server.ts:21 · url_literal

tooltrace.io

src/server.ts:40 · url_literal

Packages 1

npm:@tooltrace/mcp-server@0.1.2

server.json:14 · launch:server.json

URLs 145

https://api.tooltrace.io/v1

src/server.ts:21

https://github.com/sponsors/colinhacks

package-lock.json:1227

https://github.com/sponsors/epoberezkin

package-lock.json:113

https://github.com/sponsors/express-rate-limit

package-lock.json:456

https://github.com/sponsors/fastify

package-lock.json:475

https://github.com/sponsors/ljharb

package-lock.json:205

https://github.com/sponsors/ljharb

package-lock.json:529

https://github.com/sponsors/ljharb

package-lock.json:553

https://github.com/sponsors/ljharb

package-lock.json:578

https://github.com/sponsors/ljharb

package-lock.json:590

https://github.com/sponsors/ljharb

package-lock.json:819

https://github.com/sponsors/ljharb

package-lock.json:906

https://github.com/sponsors/ljharb

package-lock.json:1056

https://github.com/sponsors/ljharb

package-lock.json:1072

https://github.com/sponsors/ljharb

package-lock.json:1090

https://github.com/sponsors/ljharb

package-lock.json:1109

https://github.com/sponsors/panva

package-lock.json:692

https://github.com/sponsors/sindresorhus

package-lock.json:738

https://github.com/ToolTrace-io/mcp-server

package.json:11

https://github.com/ToolTrace-io/mcp-server

https://mcp.tooltrace.io/mcp

https://opencollective.com/express

package-lock.json:154

https://opencollective.com/express

package-lock.json:167

https://opencollective.com/express

package-lock.json:218

https://opencollective.com/express

package-lock.json:262

https://opencollective.com/express

package-lock.json:440

https://opencollective.com/express

package-lock.json:502

https://opencollective.com/express

package-lock.json:631

https://opencollective.com/express

package-lock.json:647

https://opencollective.com/express

package-lock.json:726

https://opencollective.com/express

package-lock.json:763

https://opencollective.com/express

package-lock.json:785

https://opencollective.com/express

package-lock.json:798

https://opencollective.com/express

package-lock.json:868

https://opencollective.com/express

package-lock.json:919

https://opencollective.com/express

package-lock.json:991

https://opencollective.com/express

package-lock.json:1010

https://opencollective.com/express

package-lock.json:1145

https://opencollective.com/express

package-lock.json:1158

https://opencollective.com/fastify

package-lock.json:479

https://registry.npmjs.org/@hono/node-server/-/node-server-2.1.1.tgz

package-lock.json:27

https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.30.0.tgz

package-lock.json:39

https://registry.npmjs.org/@types/node/-/node-22.20.1.tgz

package-lock.json:79

https://registry.npmjs.org/accepts/-/accepts-2.0.0.tgz

package-lock.json:89

https://registry.npmjs.org/ajv-formats/-/ajv-formats-3.0.1.tgz

package-lock.json:118

https://registry.npmjs.org/ajv/-/ajv-8.20.0.tgz

package-lock.json:102

https://registry.npmjs.org/body-parser/-/body-parser-2.3.0.tgz

package-lock.json:135

https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz

package-lock.json:172

https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz

package-lock.json:181

https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz

package-lock.json:194

https://registry.npmjs.org/content-disposition/-/content-disposition-1.1.0.tgz

package-lock.json:210

https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz

package-lock.json:223

https://registry.npmjs.org/content-type/-/content-type-2.1.0.tgz

package-lock.json:159

https://registry.npmjs.org/content-type/-/content-type-2.1.0.tgz

package-lock.json:790

https://registry.npmjs.org/content-type/-/content-type-2.1.0.tgz

package-lock.json:1150

https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.2.2.tgz

package-lock.json:241

https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz

package-lock.json:232

https://registry.npmjs.org/cors/-/cors-2.8.6.tgz

package-lock.json:250

https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz

package-lock.json:267

https://registry.npmjs.org/debug/-/debug-4.4.3.tgz

package-lock.json:281

https://registry.npmjs.org/depd/-/depd-2.0.0.tgz

package-lock.json:298

https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz

package-lock.json:307

https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz

package-lock.json:321

https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz

package-lock.json:327

https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz

package-lock.json:336

https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz

package-lock.json:345

https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz

package-lock.json:354

https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz

package-lock.json:366

https://registry.npmjs.org/etag/-/etag-1.8.1.tgz

package-lock.json:372

https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.1.1.tgz

package-lock.json:393

https://registry.npmjs.org/eventsource/-/eventsource-3.0.7.tgz

package-lock.json:381

https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.7.0.tgz

package-lock.json:445

https://registry.npmjs.org/express/-/express-5.2.1.tgz

package-lock.json:402

https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz

package-lock.json:464

https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.6.tgz

package-lock.json:470

https://registry.npmjs.org/finalhandler/-/finalhandler-2.1.1.tgz

package-lock.json:486

https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz

package-lock.json:507

https://registry.npmjs.org/fresh/-/fresh-2.0.0.tgz

package-lock.json:516

https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz

package-lock.json:525

https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz

package-lock.json:534

https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz

package-lock.json:558

https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz

package-lock.json:571

https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz

package-lock.json:583

https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz

package-lock.json:595

https://registry.npmjs.org/hono/-/hono-4.13.5.tgz

package-lock.json:607

https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz

package-lock.json:616

https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.3.tgz

package-lock.json:636

https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz

package-lock.json:652

https://registry.npmjs.org/ip-address/-/ip-address-10.7.0.tgz

package-lock.json:658

https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz

package-lock.json:667

https://registry.npmjs.org/is-promise/-/is-promise-4.0.0.tgz

package-lock.json:676

https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz

package-lock.json:682

https://registry.npmjs.org/jose/-/jose-6.2.10.tgz

package-lock.json:688

https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-1.0.0.tgz

package-lock.json:697

https://registry.npmjs.org/json-schema-typed/-/json-schema-typed-8.0.2.tgz

package-lock.json:703

https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz

package-lock.json:709

https://registry.npmjs.org/media-typer/-/media-typer-1.1.1.tgz

package-lock.json:718

https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-2.0.0.tgz

package-lock.json:731

https://registry.npmjs.org/mime-db/-/mime-db-1.54.0.tgz

package-lock.json:743

https://registry.npmjs.org/mime-types/-/mime-types-3.0.2.tgz

package-lock.json:752

https://registry.npmjs.org/ms/-/ms-2.1.3.tgz

package-lock.json:768

https://registry.npmjs.org/negotiator/-/negotiator-1.1.0.tgz

package-lock.json:774

https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz

package-lock.json:803

https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz

package-lock.json:812

https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz

package-lock.json:824

https://registry.npmjs.org/once/-/once-1.4.0.tgz

package-lock.json:836

https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz

package-lock.json:845

https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz

package-lock.json:854

https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.4.2.tgz

package-lock.json:863

https://registry.npmjs.org/pkce-challenge/-/pkce-challenge-5.0.1.tgz

package-lock.json:873

https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz

package-lock.json:882

https://registry.npmjs.org/qs/-/qs-6.15.3.tgz

package-lock.json:895

https://registry.npmjs.org/range-parser/-/range-parser-1.3.0.tgz

package-lock.json:911

https://registry.npmjs.org/raw-body/-/raw-body-3.0.2.tgz

package-lock.json:924

https://registry.npmjs.org/require-from-string/-/require-from-string-2.0.2.tgz

package-lock.json:939

https://registry.npmjs.org/router/-/router-2.2.0.tgz

package-lock.json:948

https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz

package-lock.json:964

https://registry.npmjs.org/send/-/send-1.2.1.tgz

package-lock.json:970

https://registry.npmjs.org/serve-static/-/serve-static-2.2.1.tgz

package-lock.json:996

https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz

package-lock.json:1015

https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz

package-lock.json:1021

https://registry.npmjs.org/shebang-regex/-/shebang-regex-3.0.0.tgz

package-lock.json:1033

https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz

package-lock.json:1061

https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz

package-lock.json:1077

https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz

package-lock.json:1095

https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz

package-lock.json:1042

https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz

package-lock.json:1114

https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz

package-lock.json:1123

https://registry.npmjs.org/type-is/-/type-is-2.1.0.tgz

package-lock.json:1132

https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz

package-lock.json:1163

https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz

package-lock.json:1177

https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz

package-lock.json:1184

https://registry.npmjs.org/vary/-/vary-1.1.2.tgz

package-lock.json:1193

https://registry.npmjs.org/which/-/which-2.0.2.tgz

package-lock.json:1202

https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz

package-lock.json:1217

https://registry.npmjs.org/zod-to-json-schema/-/zod-to-json-schema-3.25.2.tgz

package-lock.json:1232

https://registry.npmjs.org/zod/-/zod-4.5.2.tgz

package-lock.json:1223

https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json

https://tooltrace.io/mcp

https://tooltrace.io/mcp

https://tooltrace.io/signup

https://tooltrace.io/signup

https://tooltrace.io/signup

smithery.yaml:17

https://tooltrace.io/signup

src/http.ts:161

https://tooltrace.io/signup

src/server.ts:40

Refuted findings 1

Candidates the review stage examined and rejected, kept for transparency.

Data exfiltration

highRefutedlow confidence

The API base URL that receives the X-ToolTrace-Key header and all requested URLs can be redirected via the TOOLTRACE_API_BASE environment variable, so a manipulated environment would send the API key to another host; the default is the vendor's own API and the override is documented as being for tests or self-hosting.

src/server.ts:21

const API_BASE = process.env.TOOLTRACE_API_BASE ?? "https://api.tooltrace.io/v1";

Why it was refuted

The API base override is an ordinary, commented configuration knob for tests/self-hosting; the default is the vendor's own API, which is the declared core capability and the sole destination for the env API key. Exploiting it requires the attacker to already control the process environment, which gives no new capability, and there is no instruction or hidden chain directing data elsewhere.