com.apideck/mcp

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

• Injection surface

  unscannable25% of grade

  Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

  No tool descriptions, server instructions, prompts, or resources were fetched; nothing to scan for injection.

• Supply chain

  warn25% of grade

  Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

  package name "@apideck/mcp" is edit-distance 2 from popular package "yup" (typosquat candidate); dependency "@stricli/core" is edit-distance 1 from popular package "cors" (typosquat candidate)

• Credential hygiene

  pass15% of grade

  How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

  Reads secrets from the environment (e.g. esm/src/mcp-server/analytics.js) — the recommended intake shape. PASS = no static red flag; static analysis cannot prove the code honors env-based secret handling at runtime.

• Permission scope

  warn15% of grade

  Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

  discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingAgedCreditorsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingAgedDebtorsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingAttachmentsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingAttachmentsDownload.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingAttachmentsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingAttachmentsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingAttachmentsUpload.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBalanceSheetGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankAccountsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankAccountsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankAccountsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankAccountsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankAccountsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankFeedAccountsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankFeedAccountsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankFeedAccountsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankFeedAccountsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankFeedAccountsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankFeedStatementsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankFeedStatementsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankFeedStatementsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankFeedStatementsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBankFeedStatementsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBillPaymentsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBillPaymentsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBillPaymentsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBillPaymentsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBillPaymentsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBillsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBillsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBillsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBillsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingBillsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCategoriesGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCategoriesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCompaniesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCompanyInfoGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCreditNotesCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCreditNotesDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCreditNotesGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCreditNotesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCreditNotesUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCustomersCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCustomersDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCustomersGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCustomersList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingCustomersUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingDepartmentsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingDepartmentsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingDepartmentsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingDepartmentsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingDepartmentsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingEmployeesCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingEmployeesDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingEmployeesGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingEmployeesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingEmployeesUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpenseCategoriesCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpenseCategoriesDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpenseCategoriesGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpenseCategoriesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpenseCategoriesUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpenseReportsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpenseReportsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpenseReportsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpenseReportsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpenseReportsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpensesCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpensesDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpensesGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpensesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingExpensesUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingInvoiceItemsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingInvoiceItemsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingInvoiceItemsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingInvoiceItemsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingInvoiceItemsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingInvoicesCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingInvoicesDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingInvoicesGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingInvoicesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingInvoicesUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingJournalEntriesCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingJournalEntriesDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingJournalEntriesGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingJournalEntriesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingJournalEntriesUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingLedgerAccountsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingLedgerAccountsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingLedgerAccountsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingLedgerAccountsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingLedgerAccountsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingLocationsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingLocationsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingLocationsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingLocationsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingLocationsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingPaymentsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingPaymentsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingPaymentsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingPaymentsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingPaymentsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingProfitAndLossGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingProjectsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingProjectsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingProjectsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingProjectsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingProjectsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingPurchaseOrdersCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingPurchaseOrdersDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingPurchaseOrdersGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingPurchaseOrdersList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingPurchaseOrdersUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingQuotesCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingQuotesDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingQuotesGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingQuotesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingQuotesUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingRefundsCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingRefundsDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingRefundsGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingRefundsList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingRefundsUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingSubsidiariesCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingSubsidiariesDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingSubsidiariesGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingSubsidiariesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingSubsidiariesUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingSuppliersCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingSuppliersDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingSuppliersGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingSuppliersList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingSuppliersUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingTaxRatesCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingTaxRatesDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingTaxRatesGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingTaxRatesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingTaxRatesUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingTrackingCategoriesCreate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingTrackingCategoriesDelete.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingTrackingCategoriesGet.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingTrackingCategoriesList.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/mcp-server/tools/accountingTrackingCategoriesUpdate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/models/api.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: esm/src/models/application.js: path traversal ('../') combined with file access Capability DISCLOSURE, not a verdict: static analysis sees the primitive is present and reachable, not whether its use is attacker-controlled.

• Version behavior

  unscannable10% of grade

  Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

  no prior version to diff (first sight of com.apideck/[email protected]); version-drift / rug-pull cannot be evaluated. Cold-start risk is covered by point-in-time checks (injection_surface, supply_chain, credential_hygiene), not here.

• Transport config

  warn10% of grade

  Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

  sends telemetry to third-party SDK (posthog) — disclosure, verify opt-in; manifest/source references tracking behavior — disclosure