MCPgrade

MCP server · trust report

io.github.grafana/mcp-grafana

Published by io.github.grafana

version-controlanalytics

Only 3 of 6 checks could run, which is below the bar to certify — nothing that ran raised a red flag.

Publisher
io.github.grafana
Repository
github.com/grafana/mcp-grafana
Install
oci:docker.io/grafana/mcp-grafana:0.10.0, oci:docker.io/grafana/mcp-grafana:0.11.0, oci:docker.io/grafana/mcp-grafana:0.11.1, oci:docker.io/grafana/mcp-grafana:0.11.2, oci:docker.io/grafana/mcp-grafana:0.11.3, oci:docker.io/grafana/mcp-grafana:0.11.4, oci:docker.io/grafana/mcp-grafana:0.11.5, oci:docker.io/grafana/mcp-grafana:0.11.6, oci:docker.io/grafana/mcp-grafana:0.12.0, oci:docker.io/grafana/mcp-grafana:0.12.1, oci:docker.io/grafana/mcp-grafana:0.13.0, oci:docker.io/grafana/mcp-grafana:0.13.1, oci:docker.io/grafana/mcp-grafana:0.14.0, oci:docker.io/grafana/mcp-grafana:0.15.2, oci:docker.io/grafana/mcp-grafana:0.16.0, oci:docker.io/grafana/mcp-grafana:0.17.0, oci:docker.io/grafana/mcp-grafana:0.17.1, oci:docker.io/grafana/mcp-grafana:0.17.2, oci:docker.io/grafana/mcp-grafana:0.7.7, oci:docker.io/grafana/mcp-grafana:0.7.7-rc.3, oci:docker.io/grafana/mcp-grafana:0.9.0, oci:docker.io/grafana/mcp-grafana:1.0.0, oci:docker.io/grafana/mcp-grafana:1.1.0, oci:docker.io/grafana/mcp-grafana:1.2.0, oci:docker.io/grafana/mcp-grafana:1.3.0
Versions
25
Inspected
3 of 6 checks · 45%
Scored
2026-09-04 · rubric 1.0.0

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

6 checks3 clean3 not inspected

  • Injection surface

    unscannable25% of grade

    Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

    No tool descriptions, server instructions, prompts, or resources were fetched; nothing to scan for injection.

  • Supply chain

    pass25% of grade

    Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

    repository linkage verified

  • Credential hygiene

    unscannable15% of grade

    How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

    No source files, package manifest, or tool schemas were fetched; cannot assess credential handling.

  • Permission scope

    unscannable15% of grade

    Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

    No source files, package.json, or pyproject were fetched; cannot infer capability scope.

  • Version behavior

    pass10% of grade

    Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

    tool surface, capabilities, install scripts, and publisher unchanged vs prior version v1.2.0 (minor bump); no rug-pull drift.

  • Transport config

    pass10% of grade

    Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

    remote endpoint "https://mcp.grafana.com/mcp" uses TLS (https); remote endpoint uses OAuth (strongest auth mode)

Version history

Each release plotted by grade against the safe line at B. A version that sinks below the line has lost its trusted standing — the shape of a rug-pull.

VersionPublishedGradeScoreInspectedChange
vv1.3.0 · current2026-08-28 insufficient—3/6 · 45%±0
vv1.2.02026-08-25 insufficient—3/6 · 45%±0
vv1.1.02026-08-10 insufficient—3/6 · 45%±0
vv1.0.02026-07-28 insufficient—2/6 · 35%±0
vv0.17.22026-07-13 insufficient—2/6 · 35%±0
vv0.13.02026-04-29 insufficient—1/6 · 25%±0
vv0.12.02026-04-23 insufficient—2/6 · 35%±0
vv0.11.62026-04-09 insufficient—1/6 · 25%±0
vv0.11.02026-02-19 insufficient—1/6 · 25%—