MCPgrade

MCP server · trust report

com.savvly/savvly

Published by com.savvly

2 checks that ran failed — version behavior and transport config — so this release can’t be trusted as-is.

Publisher
com.savvly
Repository
github.com/Savvly/savvly-mcp
Install
npm:@savvly/mcp-server, npm:@savvly/mcp-server, npm:@savvly/mcp-server, npm:@savvly/mcp-server, npm:@savvly/mcp-server, npm:@savvly/mcp-server, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.24, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.25, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.26, npm:@savvly/mcp-server, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.31, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.32, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.33, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.38, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.39, npm:@savvly/mcp-server, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.40, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.41, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.42, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.43, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.44, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.45, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.46, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.47, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.48, npm:@savvly/mcp-server, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.55, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.56, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.57, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.58, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.59, npm:@savvly/mcp-server, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.60, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.61, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.65, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.66, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.67, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.68, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.70, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.71, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.72, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.73, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.74, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.75, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.76, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.77, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.78, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.79, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.80, npm:@savvly/mcp-server, pypi:savvly-mcp-server, oci:ghcr.io/savvly/savvly-mcp-server:1.0.81
Versions
50
Inspected
6 of 6 checks · 100%
Scored
2026-07-20 · rubric 1.0.0

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

6 checks4 clean2 flagged

  • Injection surface

    pass25% of grade

    Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

    Scanned 81 text field(s); no instruction-injection patterns found. PASS = no static red flag. A server can serve different tool descriptions at runtime (the rug-pull class), which static scanning cannot see.

  • Supply chain

    pass25% of grade

    Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

    repository linkage verified

  • Credential hygiene

    pass15% of grade

    How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

    No hardcoded secrets, secret-shaped tool parameters, or leaked keys found. PASS = no static red flag; static analysis cannot prove the code honors env-based secret handling at runtime.

  • Permission scope

    pass15% of grade

    Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

    No shell-exec, unbounded/sensitive filesystem, or download-and-run primitives found in scanned source. PASS = no static red flag. Static scanning is blind to code fetched or executed at runtime.

  • Version behavior

    fail10% of grade

    Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

    vs prior 1.0.80 (patch bump): new tool "get_savvly_product_info" appeared; new tool "compare_savvly_vs_alternative" appeared; new tool "project_savvly_lumpsum" touches a sensitive surface (email/exec/net/fs); new tool "project_savvly_monthly" touches a sensitive surface (email/exec/net/fs); new tool "project_retirement_with_savvly" touches a sensitive surface (email/exec/net/fs); new tool "check_savvly_eligibility" appeared; new tool "get_savvly_faq" appeared; new tool "search_savvly_content" appeared.

  • Transport config

    fail10% of grade

    Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

    remote MCP endpoint declares NO authentication (unauthenticated remote — nginx-ui/CVE-2026-33032 class)

Version history

Each release plotted by grade against the safe line at B. A version that sinks below the line has lost its trusted standing — the shape of a rug-pull.

VersionPublishedGradeScoreInspectedChange
v1.0.81 · current2026-07-20 B806/6 · 100%±0
v1.0.802026-07-17 B1003/6 · 55%A→B in v1.0.80
v1.0.762026-07-09 A905/6 · 90%B→A in v1.0.76
v1.0.242026-06-03 B1003/6 · 55%±0
v1.0.192026-05-30 B1003/6 · 55%—