MCPgrade

MCP server · trust report

io.github.ShaftHQ/shaft-mcp

Published by io.github.ShaftHQ

version-controlbrowser

Only 2 of 6 checks could run, which is below the bar to certify — nothing that ran raised a red flag.

Publisher
io.github.ShaftHQ
Repository
github.com/ShaftHQ/SHAFT_ENGINE
Install
oci:ghcr.io/shafthq/shaft-mcp:10.1.20260312, oci:ghcr.io/shafthq/shaft-mcp:10.1.20260315, oci:ghcr.io/shafthq/shaft-mcp:10.1.20260319, oci:ghcr.io/shafthq/shaft-mcp:10.1.20260324, oci:ghcr.io/shafthq/shaft-mcp:10.1.20260331, oci:ghcr.io/shafthq/shaft-mcp:10.2.20260422, oci:ghcr.io/shafthq/shaft-mcp:10.2.20260424, oci:ghcr.io/shafthq/shaft-mcp:10.2.20260501, oci:ghcr.io/shafthq/shaft-mcp:10.2.20260506, oci:ghcr.io/shafthq/shaft-engine-mcp:10.2.20260612, oci:ghcr.io/shafthq/shaft-engine-mcp:10.2.20260614, oci:ghcr.io/shafthq/shaft-engine-mcp:10.2.20260615, oci:ghcr.io/shafthq/shaft-engine-mcp:10.2.20260617, oci:ghcr.io/shafthq/shaft-engine-mcp:10.2.20260618, oci:ghcr.io/shafthq/shaft-engine-mcp:10.2.20260620, oci:ghcr.io/shafthq/shaft-engine-mcp:10.2.20260621, oci:ghcr.io/shafthq/shaft-engine-mcp:10.2.20260622, oci:ghcr.io/shafthq/shaft-engine-mcp:10.2.20260623, oci:ghcr.io/shafthq/shaft-engine-mcp:10.2.20260627, oci:ghcr.io/shafthq/shaft-engine-mcp:10.2.20260628, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260702, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260703, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260705, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260707, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260708, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260709, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260710, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260711, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260712, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260713, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260714, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260715, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260716, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260717, oci:ghcr.io/shafthq/shaft-mcp:9.4.20251116, oci:ghcr.io/shafthq/shaft-engine-mcp:10.3.20260719
Versions
36
Inspected
2 of 6 checks · 35%
Scored
2026-07-21 · rubric 1.0.0

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

6 checks2 clean4 not inspected

  • Injection surface

    unscannable25% of grade

    Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

    No tool descriptions, server instructions, prompts, or resources were fetched; nothing to scan for injection.

  • Supply chain

    pass25% of grade

    Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

    repository linkage verified

  • Credential hygiene

    unscannable15% of grade

    How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

    No source files, package manifest, or tool schemas were fetched; cannot assess credential handling.

  • Permission scope

    unscannable15% of grade

    Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

    No source files, package.json, or pyproject were fetched; cannot infer capability scope.

  • Version behavior

    pass10% of grade

    Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

    tool surface, capabilities, install scripts, and publisher unchanged vs prior version 10.3.20260717 (patch bump); no rug-pull drift.

  • Transport config

    unscannable10% of grade

    Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

    local stdio server: no remote transport or auth surface, and no phone-home/telemetry signal found in source. Absence of transport findings is NOT a safety guarantee — phone-home hosts can be constructed at runtime and defeat static analysis.

Version history

Each release plotted by grade against the safe line at B. A version that sinks below the line has lost its trusted standing — the shape of a rug-pull.

VersionPublishedGradeScoreInspectedChange
v10.3.20260719 · current2026-07-19 insufficient—2/6 · 35%±0
v10.3.202607172026-07-18 insufficient—2/6 · 35%±0
v10.3.202607162026-07-16 insufficient—1/6 · 25%±0
v10.3.202607122026-07-12 insufficient—1/6 · 25%—