Server data from the Official MCP Registry
Codebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.
About
Codebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.
Security Report
The visible code is a codebase-analysis MCP server whose network access, filesystem reads, and credential parameters match its stated purpose, and no exfiltration or obfuscation was found. The main concerns are unverified: execSync is imported but its call sites are truncated and cannot be checked for shell injection, and the optional HTTP bridge's auth implementation was not shown. Credentials passed as tool parameters and third-party scorecard lookups are minor issues to be aware of. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
12 files analyzed · 11 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-ashfordeou-grasp": {
"args": [
"-y",
"grasp-mcp-server"
],
"command": "npx"
}
}
}Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.