Back to Browse

Web MCP Server

Developer ToolsModerate5.3MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

ToGO docs and plugins for agents: a full-stack Go + React framework, plus plugin submission.

About

ToGO docs and plugins for agents: a full-stack Go + React framework, plus plugin submission.

Remote endpoints: streamable-http: https://mcp.to-go.dev/mcp

Security Report

5.3
Moderate5.3Moderate Risk

This is a public, read-only MCP server for togo documentation and the plugin marketplace. It has no malicious patterns, exfiltration, shell execution, or hardcoded secrets, and its only credential is an optional GITHUB_TOKEN read from the environment. The main concerns are low-severity: user-supplied slugs are interpolated into fetch URLs without encoding, error messages are returned to clients, and there is no rate limiting on endpoints that can trigger up to five GitHub API calls. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 4 high severity).

4 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!