Back to Browse

Sassy MCP Server

Developer ToolsUse Caution3.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

One MCP server that replaces 75+ — 278 tools in a single exe, smart-loaded.

About

One MCP server that replaces 75+ — 278 tools in a single exe, smart-loaded.

Security Report

3.8
Use Caution3.8High Risk

SassyMCP is a broad, proprietary desktop-automation server whose README and visible code show strong defaults (localhost bind, DNS-rebinding protection, auto-generated bearer token with restricted file ACLs, fail-closed auth). Its score is held down by an unusually wide permission surface for a Developer Tools server (unrestricted shell execution, screen capture and input injection, clipboard, registry writes, process kill, ADB/SSH control), an admin-scoped token printed to the startup banner, and a rate limiter that fails open by default. The provided source is truncated, so the data-exfiltration and tool-level behaviors flagged by the scanner context could not be verified. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 4 high severity). Package verification found 1 issue.

6 files analyzed · 17 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

process_spawn

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

clipboard

Check that this permission is expected for this type of plugin.

screen_capture

Check that this permission is expected for this type of plugin.

input_injection

Check that this permission is expected for this type of plugin.

registry_write

Check that this permission is expected for this type of plugin.

process_kill

Check that this permission is expected for this type of plugin.

device_control

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-sassyconsultingllc-sassymcp": {
      "args": [
        "-y",
        "sassymcp-billing"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!