MCPgrade

MCP server · trust report

com.savvly/savvly

Published by com.savvly

2 checks that ran failed — version behavior and transport config — so this release can’t be trusted as-is.

Publisher
com.savvly
Repository
github.com/Savvly/savvly-mcp
Install
npm:@savvly/mcp-server, npm:@savvly/mcp-server, npm:@savvly/mcp-server, npm:@savvly/mcp-server, npm:@savvly/mcp-server, npm:@savvly/mcp-server, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.24, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.25, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.26, npm:@savvly/mcp-server, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.31, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.32, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.33, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.38, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.39, npm:@savvly/mcp-server, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.40, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.41, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.42, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.43, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.44, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.45, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.46, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.47, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.48, npm:@savvly/mcp-server, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.55, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.56, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.57, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.58, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.59, npm:@savvly/mcp-server, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.60, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.61, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.65, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.66, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.67, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.68, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.70, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.71, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.72, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.73, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.74, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.75, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.76, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.77, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.78, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.79, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.80, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.81, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.82, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.84, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.85, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.86, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.87, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.88, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.89, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.90, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.91, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.92
Versions
60
MCP revision
2025-11-25 · superseded
Inspected
6 of 6 checks · 100%
Scored
2026-09-04 · rubric 1.0.0

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

6 checks4 clean2 flagged

  • Injection surface

    pass25% of grade

    Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

    Scanned 81 text field(s); no instruction-injection patterns found. PASS = no static red flag. A server can serve different tool descriptions at runtime (the rug-pull class), which static scanning cannot see.

  • Supply chain

    pass25% of grade

    Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

    repository linkage verified

  • Credential hygiene

    pass15% of grade

    How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

    No hardcoded secrets, secret-shaped tool parameters, or leaked keys found. PASS = no static red flag; static analysis cannot prove the code honors env-based secret handling at runtime.

  • Permission scope

    pass15% of grade

    Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

    No shell-exec, unbounded/sensitive filesystem, or download-and-run primitives found in scanned source. PASS = no static red flag. Static scanning is blind to code fetched or executed at runtime.

  • Version behavior

    fail10% of grade

    Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

    vs prior 1.0.90 (patch bump): new hardcoded outbound host/BCC destination(s): github.com.

  • Transport config

    fail10% of grade

    Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

    remote MCP endpoint declares NO authentication (unauthenticated remote — nginx-ui/CVE-2026-33032 class)

Version history

Each release plotted by grade against the safe line at B. A version that sinks below the line has lost its trusted standing — the shape of a rug-pull.

VersionPublishedGradeScoreInspectedChange
v1.0.92 · current2026-08-23 B806/6 · 100%A→B in v1.0.92
v1.0.902026-08-20 A906/6 · 100%±0
v1.0.882026-08-04 A905/6 · 90%±0
v1.0.862026-07-29 A905/6 · 90%B→A in v1.0.86
v1.0.822026-07-27 B856/6 · 100%±0
v1.0.812026-07-20 B806/6 · 100%±0
v1.0.802026-07-17 B1003/6 · 55%A→B in v1.0.80
v1.0.762026-07-09 A905/6 · 90%±0
v1.0.662026-06-24 A905/6 · 90%±0
v1.0.472026-06-16 A905/6 · 90%±0
v1.0.332026-06-07 A905/6 · 90%±0
v1.0.262026-06-03 A905/6 · 90%B→A in v1.0.26
v1.0.242026-06-03 B1004/6 · 65%A→B in v1.0.24
v1.0.232026-06-02 A905/6 · 90%B→A in v1.0.23
v1.0.192026-05-30 B1003/6 · 55%—