← Back to search Server uses env_vars capabilities via: process.env Server uses network capabilities via: fetch(), https Server uses filesystem capabilities via: fs, fs sync ops, path Server uses shell capabilities via: child_process, execSync()
@1337xcode/cortex
Code intelligence MCP server. Indexes your repository into a queryable call graph for AI coding agents.
? Not scanned yet
Versions
1.1.0latestJun 4, 2026
1.0.4May 25, 2026
1.0.3May 25, 2026
1.0.2May 25, 2026
1.0.1May 19, 2026
+ show 9 moreshow less
1.0.0May 18, 2026
0.5.9May 18, 2026
0.5.8May 17, 2026
0.5.7May 17, 2026
0.5.6May 17, 2026
0.5.4May 17, 2026
0.5.2May 15, 2026
0.5.1May 15, 2026
0.1.0May 15, 2026
Tools 0
No tools indexed yet.
Permissions 4
env_vars low network medium filesystem low shell high Scan Findings 67
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: @astrojs/rss@4.0.18 (GHSA-8j5q-mfj2-5q9q)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-26w7-cxv4-gfx2)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-2pvr-wf23-7pc7)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-376h-93r7-7g6f)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-49w6-73cw-chjr)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-4g3v-8h47-v7g6)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-5ff5-9fcw-vg88)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-7pw4-f3q4-r2p2)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-8hv8-536x-4wqp)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-f48w-9m4c-m7f5)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-fvmw-cj7j-j39q)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-g735-7g2w-hh3f)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-ggxq-hp9w-j794)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-hr2q-hp5q-x767)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-j687-52p2-xcff)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-jrpj-wcv7-9fh9)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-whqg-ppgf-wp8c)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-wrwg-2hg8-v723)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-x3h8-62x9-952g)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-xf8x-j4p2-f749)
medium
Vulnerable dependency: astro@5.0.0 (GHSA-xr5h-phrj-8vxv)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-39q2-94rc-95cp)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-55q2-fjhq-7xh7)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-76mc-f452-cxcm)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-c2j3-45gr-mqc4)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-cj63-jhhr-wcxv)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-cjmm-f4jc-qw8r)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-cmwh-pvxp-8882)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-crv5-9vww-q3g8)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-gvmj-g25r-r7wr)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-h7mw-gpvr-xq4m)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-h8r8-wccr-v5f2)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-hpcv-96wg-7vj8)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-r47g-fvhr-h676)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-rp9w-3fw7-7cwq)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-v2wj-7wpq-c8vv)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-v8jm-5vwx-cfxm)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-v9jr-rg53-9pgp)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-vhxf-7vqr-mrjg)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-vxr8-fq34-vvx9)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-x4vx-rjvf-j5p4)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-2v8p-3f2j-5mp7)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-3rrr-jr9j-h3q3)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-6x64-9x62-f2gx)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-c4c3-pg64-4m4v)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-rhh3-jpg6-66xh)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-82fw-gwwq-j7x9)
medium
Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq)
info
package.json metadata
info
Required env vars (1)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 1135 components
critical
AWS Access Key ID found in 1337Xcode-Cortex-05096dc/src/security/secrets.rs
critical
GitHub Personal Access Token found in 1337Xcode-Cortex-05096dc/src/security/secrets.rs
critical
RSA Private Key found in 1337Xcode-Cortex-05096dc/src/security/secrets.rs
high
Hardcoded Password found in 1337Xcode-Cortex-05096dc/src/security/secrets.rs
critical
AWS Access Key ID found in 1337Xcode-Cortex-05096dc/src/indexer/pipeline.rs
critical
AWS Access Key ID found in 1337Xcode-Cortex-05096dc/src/mcp/dispatch.rs
medium
No build provenance detected (SLSA L0)