MCP server

Backwork

mcp:tylergibbs1/backwork-mcp

Medicare and commercial payer policies, prior auth, claim risk, and medical codes from Backwork.

awesome-mcp-servers Glama MCP Registry

Verdict

Inconclusive

The analysis could not cover enough of the artifact to decide.

Analyzed Oct 26, 2026, 11:28 UTC at 3b0e300

findings

—

highest severity

threat classes

files scanned

1,495/1,495

checks satisfied

package advisories

Why this verdict

mcp-server . Inconclusive

inconclusive: gap dynamic_metadata at src/index.ts
inconclusive: gap glob_budget_exceeded at openapi/backwork-openapi.json

plugin plugins/backwork No issues found

benign: 42 checks satisfied, no findings for plugin:plugins/backwork

skill plugins/backwork/skills/claim-denial-appeal-prep No issues found

benign: 17 checks satisfied, no findings for skill:plugins/backwork/skills/claim-denial-appeal-prep

skill plugins/backwork/skills/coverage-check No issues found

benign: 17 checks satisfied, no findings for skill:plugins/backwork/skills/coverage-check

skill plugins/backwork/skills/policy-change-review No issues found

benign: 20 checks satisfied, no findings for skill:plugins/backwork/skills/policy-change-review

skill plugins/backwork/skills/prior-auth-research No issues found

benign: 17 checks satisfied, no findings for skill:plugins/backwork/skills/prior-auth-research

Security findings 0

No individual findings recorded

The inconclusive verdict rests on the coverage gaps below; 1 candidate finding was refuted on review.

Refuted findings 1

Candidates the review stage examined and rejected, kept for transparency.

Supply chain

mediumRefutedlow confidence

The install guide tells the agent to add an MCP server entry that runs `npx -y @backwork/mcp` with no version pin, so whatever the registry currently serves is fetched and executed on each start with the user's API key in its environment.

llms-install.md:47

"args": ["-y", "@backwork/mcp"]

Why it was refuted

This is the standard documented install of the vendor's own package, `@backwork/mcp`, from the official npm registry via npx, using an env API key for the wrapped service. That matches the pinned official-registry install and env-API-key carve-outs, and the missing version pin alone is not an attack chain. The package is the declared core capability, with nothing concealed and no instruction to fetch from an unusual source.

Coverage gaps 2

Parts of the artifact the static analysis could not fully examine.

glob_budget_exceeded reference source exceeds 262144 characters

openapi/backwork-openapi.json

dynamic_metadata line 908: tool None config is computed: primaryConfig

src/index.ts