← Back to search

genkitx-mcp

firebase Apache-2.0 5,989 stars Scanned 48d ago

A Genkit plugin that provides interoperability between Genkit and Model Context Protocol (MCP). Both client and server use cases are supported.

D
55.1 / 100

Versions

1.14.1 latest
May 26, 2026
1.0.0
May 20, 2026
py/v0.6.0
May 21, 2026
py/v0.6.0-rc.1
May 21, 2026
1.35.0
May 21, 2026
+ show 97 more show less
1.34.0
May 12, 2026
go/v1.8.0
May 6, 2026
go/v1.7.0
Apr 29, 2026
1.33.0
Apr 24, 2026
1.33.0-rc.1
Apr 21, 2026
1.33.0-rc.0
Apr 14, 2026
1.32.0
Apr 10, 2026
1.32.0-rc.0
Apr 10, 2026
go/v1.6.1
Apr 6, 2026
go/v1.6.0
Apr 2, 2026
go/v1.5.1
Mar 31, 2026
py/v0.5.2
Mar 27, 2026
1.31.0
Mar 27, 2026
go/v1.5.0
Mar 19, 2026
py/v0.5.2-rc.2
Mar 18, 2026
py/v0.5.2-rc.1
Mar 18, 2026
1.30.1
Mar 13, 2026
1.30.0-rc.0
Mar 3, 2026
py/v0.5.1
Feb 20, 2026
1.29.0
Feb 20, 2026
1.29.0-rc.0
Feb 11, 2026
py/v0.5.0
Feb 4, 2026
1.28.0
Jan 22, 2026
go/v1.4.0
Jan 15, 2026
go/v1.3.0
Jan 7, 2026
1.27.0
Dec 19, 2025
1.27.0-rc.2
Dec 19, 2025
1.27.0-rc.1
Dec 18, 2025
1.27.0-rc.0
Dec 16, 2025
1.26.0
Dec 12, 2025
1.26.0-rc.1
Dec 12, 2025
1.26.0-rc.0
Dec 12, 2025
1.25.0
Dec 3, 2025
go/v1.2.0
Nov 18, 2025
genkit@1.24.0
Nov 18, 2025
genkit@1.23.0
Nov 13, 2025
genkit@1.22.0
Oct 28, 2025
go/v1.1.0
Oct 14, 2025
genkit@1.21.0
Oct 7, 2025
go/v1.0.5
Oct 2, 2025
genkit@1.20.0
Sep 26, 2025
genkit@1.19.3
Sep 19, 2025
go/v1.0.4
Sep 18, 2025
go/v1.0.3
Sep 15, 2025
go/v1.0.2
Sep 11, 2025
go/v1.0.1
Sep 10, 2025
go/v1.0.0
Sep 9, 2025
genkit@1.19.2
Sep 9, 2025
go/v1.0.0-rc
Sep 9, 2025
genkit@1.19.1
Sep 8, 2025
genkit@1.19.0
Sep 8, 2025
genkit@1.18.0
Aug 29, 2025
go/v0.7.0
Aug 25, 2025
genkit@1.17.1
Aug 24, 2025
genkit@1.17.0
Aug 22, 2025
genkit@1.17.0-rc.0
Aug 21, 2025
genkit@1.16.1
Aug 12, 2025
genkit@1.16.0
Aug 7, 2025
genkit@1.15.5
Jul 25, 2025
genkit@1.15.2
Jul 21, 2025
genkit@1.15.1
Jul 18, 2025
genkit@1.14.1
Jul 10, 2025
go/v0.6.2
Jul 2, 2025
go/v0.6.1
Jun 30, 2025
genkit@1.14.0
Jun 27, 2025
genkit@1.13.0
Jun 19, 2025
go/v0.6.0
Jun 13, 2025
genkit@1.12.0
Jun 8, 2025
genkit@1.11.1
Jun 2, 2025
genkit@1.11.0
May 30, 2025
genkit-python@0.4.0
May 26, 2025
genkit@1.10.0
May 21, 2025
genkit@1.9.0
May 14, 2025
go/v0.5.4
May 13, 2025
genkit@1.8.0
May 5, 2025
go/v0.5.3
May 1, 2025
genkit-python@0.3.2
Apr 29, 2025
genkit-python@0.3.1
Apr 29, 2025
genkit@1.7.0
Apr 25, 2025
go/v0.5.2
Apr 18, 2025
genkit@1.6.2
Apr 18, 2025
go/v0.5.1
Apr 9, 2025
genkit-cli@1.6.1
Apr 9, 2025
go/v0.5.0
Apr 9, 2025
genkit@1.6.0
Apr 8, 2025
genkit@1.5.0
Apr 5, 2025
go/v0.3.0
Mar 28, 2025
genkit@1.4.0
Mar 27, 2025
genkit@1.3.0
Mar 19, 2025
genkit@1.2.0
Mar 13, 2025
genkit@1.1.0
Mar 6, 2025
genkit@1.0.5
Feb 19, 2025
genkit@1.0.4
Feb 7, 2025
genkit@1.0.0-rc.16
Feb 4, 2025
genkit@1.0.0-rc.15
Feb 4, 2025
genkit@1.0.0-rc.7
Jan 28, 2025
genkit@1.0.0-rc.6
Jan 27, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 79

celsiusToFahrenheit
annotations: none low

Converts Celsius to Fahrenheit

celsius number inputSchema object
add
annotations: none low

add two numbers together

a number b number action string schema object inputSchema object outputSchema number
test_http
annotations: none low

lookupUsers
annotations: none low

use this tool to list users

id number schema array nickname string outputSchema array
math/add
annotations: none low

add two numbers

a number b number object string subject string modelName string inputSchema string modelVersion string outputSchema string streamSchema string
screenshot
annotations: none low

takes a screenshot

temp number unit enum schema object celsius number inputSchema string outputSchema string streamSchema any
math/subtract
annotations: none low

subtract two numbers

a number b number object string subject string modelName string inputSchema string modelVersion string outputSchema string streamSchema string
tellAFunnyJoke
annotations: none low

Tells jokes about an input topic. Use this tool whenever user asks you to tell a joke.

joke string model string topic string schema object subject string imageUrl string modelName string inputSchema object outputSchema string
jokeSubjectGenerator
annotations: none low

can be called to generate a subject for a joke

age number type enum surname string inputSchema object outputSchema string streamSchema any
gablorkenTool
annotations: none low

can be used to calculate gablorken value

age number type enum answer number surname string inputSchema object outputSchema string streamSchema any
characterGenerator
annotations: none low

can be used to generate a character. Seed it with some input.

age number type enum answer number surname string inputSchema number outputSchema string streamSchema any
exitTool
annotations: none low

call this tool when you have the final answer

answer number schema object inputSchema string outputSchema string streamSchema any
getColor
annotations: none low

gets a random color

schema array enemies array friends array inputSchema string outputSchema string streamSchema any
transferMoney
annotations: none low

Transfers money between accounts.

amount number status string message string inputSchema string outputSchema string
getWeather
annotations: none low

Get the weather for the given location.

city string time number hours number state string message string timezone string conditions string inputSchema object outputSchema string temperatureF number
getTime
annotations: none low

Get the current time

city string time number hours number state string message string timezone string inputSchema object outputSchema string
getSomePreformattedText
annotations: none low

Gets some pre-formatted text to display on the UI.

message string inputSchema object outputSchema string
getSomeMarkdown
annotations: none low

Gets some markdown formatted text to display on the UI.

message string inputSchema object outputSchema string
fetchCatalog
annotations: none low

Fetches the complete product catalog with all available items

searchCatalog
annotations: none low

Search for products by name, category, or keyword

inputSchema object
fetchMostPopularItems
annotations: none low

Fetches the most popular items in the catalog (top 3)

processPayment
annotations: none low

Process a payment for an order

amount number orderId string inputSchema object
getStoreInfo
annotations: none low

Get store information including hours, location, and contact details

getProductDetails
annotations: none low

Get detailed information about a specific product by ID

inputSchema object
todaysMenu
annotations: none low

Use this tool to retrieve all the items on today's menu

inputSchema object outputSchema object
someListFilesTool
annotations: none low

lists files

inputSchema object outputSchema string streamSchema any
toolA
annotations: none low

toolA it is

foo string output string
toolB
annotations: none low

toolB it is

testTool
annotations: none low

description

dynamicTestTool1
annotations: none low

description

dynamicMultipartTool
annotations: none low

description

simpleTool
annotations: none low

description

interruptingTool
annotations: none low

description

resumableTool
annotations: none low

description

truth
annotations: none low

always returns true

resumable
annotations: none low

interrupts unless resumed with {status: "ok"}

good_tool
annotations: none low

a tool

inputSchema object outputSchema string
bad_tool
annotations: none low

a tool

inputSchema object outputSchema string
bad_tool_approved
annotations: none low

a tool

inputSchema object outputSchema string
${params.serverName}/${tool.name}
annotations: none low

outputSchema any
${options.name}/${tool.name}
annotations: none low

get_weather
annotations: none low

Get the weather for a city

city string inputSchema object
echoTool
annotations: none low

echo

inputSchema string outputSchema any
get_current_weather
annotations: none low

gets weather

format string location string inputSchema string
fooz
annotations: none low

gets fooz

inputSchema string
test
annotations: none low

test

test_meta
annotations: none low

test

dynamic
annotations: none low

test

regular
annotations: none low

test

multipart
annotations: none low

test

outputSchema number
interruptTool
annotations: none low

interrupt tool

inputSchema object outputSchema string
test/tool
annotations: none low

desc

inputSchema object outputSchema string
other/tool
annotations: none low

desc

inputSchema object outputSchema string
test/tool1
annotations: none low

desc

inputSchema object outputSchema string
other/tool2
annotations: none low

desc

inputSchema object outputSchema string
mockTool
annotations: none low

A mock tool

inputSchema object outputSchema string
middlewareTool
annotations: none low

injected by middleware

inputSchema object outputSchema string
injectedTool
annotations: none low

injected tool description

arg string inputSchema object outputSchema string
namespaced/add
annotations: none low

add two numbers together

a number b number inputSchema object outputSchema number
multiTool
annotations: none low

a tool with multiple parts

fallbackTool
annotations: none low

a tool with fallback output

menuLookupTool
annotations: none low

use this tool to look up the menu for a given date

date string inputSchema object outputSchema string
reservationTool
annotations: none low

use this tool to try to book a reservation

date string inputSchema object
reservationAgent
annotations: none low

Reservation Agent can help manage guest reservations

weatherTool
annotations: none low

use this tool to display weather

ignore string location string inputSchema object outputSchema string
datePicker
annotations: none low

user can use this UI tool to enter a date (prefer this over asking the user to enter the date manually)

ignore string inputSchema object outputSchema string
searchEvents
annotations: none low

use this when asked about any time/location for school events including extra curriculars like clubs

date string reason string studentId number inputSchema object
reportAbsence
annotations: none low

use this tool to mark a specific student as absent on one or more days

date string reason string subject string studentId number inputSchema object outputSchema string
reportTardy
annotations: none low

use this tool to mark a specific student tardy for a given date

date string reason string subject string studentId number inputSchema object outputSchema string
upcomingHolidays
annotations: none low

can retrieve information about upcoming holidays

subject string studentId number inputSchema object outputSchema string
getRecentGrades
annotations: none low

retrieves recent grades for a specific student

subject string studentId number inputSchema object
get_usage_guide
annotations: none low

Use this tool to look up the official Genkit usage guide, including project setup instructions and API best practices. ALWAYS call this before implementing Genkit features.

list_flows
annotations: none low

Use this to discover available Genkit flows or inspect the input schema of Genkit flows to know how to successfully call them.

run_flow
annotations: none low

Runs the flow with the provided input

start_runtime
annotations: none low

Use this to start a Genkit runtime process (This is typically the entry point to the users app). Once started, the runtime will be picked up by the \

list_genkit_docs
annotations: none low

Use this to see a list of available Genkit documentation files. Returns `filePaths` that can be passed to `read_genkit_docs`.

search_genkit_docs
annotations: none low

Use this to search the Genkit documentation using keywords. Returns ranked results with `filePaths` for `read_genkit_docs`. Warning: Generic terms (e.g. "the", "and") may return false positives; use specific technical terms (e.g. "rag", "firebase", "context").

read_genkit_docs
annotations: none low

Use this to read the full content of specific Genkit documentation files. You must provide `filePaths` from the list/search tools.

get_trace
annotations: none low

Returns the trace details.

Permissions 4

network medium
Server uses network capabilities via: fetch(), httpx, node-fetch, socket, urllib, websocket
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, open(), os, path, pathlib, tempfile
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 209

info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%
low
Tool 'list_genkit_docs' has no annotations annotation_checker · 100%
low
Tool 'search_genkit_docs' has no annotations annotation_checker · 100%
low
Tool 'read_genkit_docs' has no annotations annotation_checker · 100%
low
Tool 'get_trace' has no annotations annotation_checker · 100%
critical
Tool poisoning in 'get_usage_guide': Directive language: 'always' poisoning · 85%
critical
Tool poisoning in 'get_usage_guide': Cross-tool sequencing directive poisoning · 85%
critical
Tool poisoning in 'read_genkit_docs': Directive language: 'you must' poisoning · 85%
medium
OAuth implementation without PKCE auth_checker · 75%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Excessive dependency count: 963 direct dependencies dependency_analyzer · 90%
info
OSV.dev API query failed dependency_analyzer · 100%
high
Hardcoded Password found in js/plugins/cloud-sql-pg/README.md secret_scanner · 65%
high
Generic API Key Assignment found in genkit-tools/common/src/utils/analytics.ts secret_scanner · 75%
medium
High-entropy string (6.02 bits/char) in go/plugins/googlegenai/gemini_test.go:692 entropy_analyzer · 55%
medium
High-entropy string (6.02 bits/char) in go/plugins/googlegenai/gemini_test.go:727 entropy_analyzer · 55%
medium
Buffer.from base64 in js/plugins/firebase/src/context.ts:373 entropy_analyzer · 75%
info
SLSA Build Level 3 detected slsa_assessor · 85%
high
High-risk OAuth scope: https://www.googleapis.com/auth/cloud-platform oauth_scope_analyzer · 80%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 2346 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: truth manifest_parser · 75%
info
Tool: resumable manifest_parser · 75%
info
Tool: add manifest_parser · 75%
info
Tool: test_http manifest_parser · 70%
info
Tool: lookupUsers manifest_parser · 75%
info
Tool: math/add manifest_parser · 75%
info
Tool: math/subtract manifest_parser · 75%
info
Tool: tellAFunnyJoke manifest_parser · 75%
info
Tool: jokeSubjectGenerator manifest_parser · 75%
info
Tool: gablorkenTool manifest_parser · 75%
info
Tool: characterGenerator manifest_parser · 75%
info
Tool: exitTool manifest_parser · 75%
info
Tool: getColor manifest_parser · 75%
info
Tool: transferMoney manifest_parser · 75%
info
Tool: getWeather manifest_parser · 75%
info
Tool: getTime manifest_parser · 75%
info
Tool: getSomePreformattedText manifest_parser · 75%
info
Tool: getSomeMarkdown manifest_parser · 75%
info
Tool: fetchCatalog manifest_parser · 75%
info
Tool: searchCatalog manifest_parser · 75%
info
Tool: fetchMostPopularItems manifest_parser · 75%
info
Tool: processPayment manifest_parser · 75%
info
Tool: getStoreInfo manifest_parser · 75%
info
Tool: getProductDetails manifest_parser · 75%
info
Tool: todaysMenu manifest_parser · 75%
info
Tool: someListFilesTool manifest_parser · 75%
info
Tool: celsiusToFahrenheit manifest_parser · 75%
info
Tool: screenshot manifest_parser · 75%
info
Tool: toolA manifest_parser · 75%
info
Tool: toolB manifest_parser · 75%
info
Tool: testTool manifest_parser · 75%
info
Tool: dynamicTestTool1 manifest_parser · 75%
info
Tool: dynamicMultipartTool manifest_parser · 75%
info
Tool: simpleTool manifest_parser · 75%
info
Tool: interruptingTool manifest_parser · 75%
info
Tool: resumableTool manifest_parser · 75%
info
Tool: good_tool manifest_parser · 75%
info
Tool: bad_tool manifest_parser · 75%
info
Tool: bad_tool_approved manifest_parser · 75%
info
Tool: ${params.serverName}/${tool.name} manifest_parser · 75%
info
Tool: ${options.name}/${tool.name} manifest_parser · 75%
info
Tool: get_weather manifest_parser · 75%
info
Tool: echoTool manifest_parser · 75%
info
Tool: get_current_weather manifest_parser · 75%
info
Tool: fooz manifest_parser · 75%
info
Tool: test manifest_parser · 75%
info
Tool: test_meta manifest_parser · 75%
info
Tool: dynamic manifest_parser · 75%
info
Tool: regular manifest_parser · 75%
info
Tool: multipart manifest_parser · 75%
info
Tool: interruptTool manifest_parser · 75%
info
Tool: test/tool manifest_parser · 75%
info
Tool: other/tool manifest_parser · 75%
info
Tool: test/tool1 manifest_parser · 75%
info
Tool: other/tool2 manifest_parser · 75%
info
Tool: mockTool manifest_parser · 75%
info
Tool: middlewareTool manifest_parser · 75%
info
Tool: injectedTool manifest_parser · 75%
info
Tool: namespaced/add manifest_parser · 75%
info
Tool: multiTool manifest_parser · 75%
info
Tool: fallbackTool manifest_parser · 75%
info
Tool: menuLookupTool manifest_parser · 75%
info
Tool: reservationTool manifest_parser · 75%
info
Tool: reservationAgent manifest_parser · 75%
info
Tool: weatherTool manifest_parser · 75%
info
Tool: datePicker manifest_parser · 75%
info
Tool: searchEvents manifest_parser · 75%
info
Tool: reportAbsence manifest_parser · 75%
info
Tool: reportTardy manifest_parser · 75%
info
Tool: upcomingHolidays manifest_parser · 75%
info
Tool: getRecentGrades manifest_parser · 75%
info
Tool: get_usage_guide manifest_parser · 85%
info
Tool: list_flows manifest_parser · 85%
info
Tool: run_flow manifest_parser · 85%
info
Tool: start_runtime manifest_parser · 85%
info
Tool: list_genkit_docs manifest_parser · 85%
info
Tool: search_genkit_docs manifest_parser · 85%
info
Tool: read_genkit_docs manifest_parser · 85%
info
Tool: get_trace manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (63) manifest_parser · 80%
low
Tool 'add' has no annotations annotation_checker · 100%
low
Tool 'test_http' has no annotations annotation_checker · 100%
low
Tool 'lookupUsers' has no annotations annotation_checker · 100%
low
Tool 'math/add' has no annotations annotation_checker · 100%
low
Tool 'math/subtract' has no annotations annotation_checker · 100%
low
Tool 'tellAFunnyJoke' has no annotations annotation_checker · 100%
low
Tool 'jokeSubjectGenerator' has no annotations annotation_checker · 100%
low
Tool 'gablorkenTool' has no annotations annotation_checker · 100%
low
Tool 'characterGenerator' has no annotations annotation_checker · 100%
low
Tool 'exitTool' has no annotations annotation_checker · 100%
low
Tool 'getColor' has no annotations annotation_checker · 100%
low
Tool 'transferMoney' has no annotations annotation_checker · 100%
low
Tool 'getWeather' has no annotations annotation_checker · 100%
low
Tool 'getTime' has no annotations annotation_checker · 100%
low
Tool 'getSomePreformattedText' has no annotations annotation_checker · 100%
low
Tool 'getSomeMarkdown' has no annotations annotation_checker · 100%
low
Tool 'fetchCatalog' has no annotations annotation_checker · 100%
low
Tool 'searchCatalog' has no annotations annotation_checker · 100%
low
Tool 'fetchMostPopularItems' has no annotations annotation_checker · 100%
low
Tool 'processPayment' has no annotations annotation_checker · 100%
low
Tool 'getStoreInfo' has no annotations annotation_checker · 100%
low
Tool 'getProductDetails' has no annotations annotation_checker · 100%
low
Tool 'todaysMenu' has no annotations annotation_checker · 100%
low
Tool 'someListFilesTool' has no annotations annotation_checker · 100%
low
Tool 'celsiusToFahrenheit' has no annotations annotation_checker · 100%
low
Tool 'screenshot' has no annotations annotation_checker · 100%
low
Tool 'toolA' has no annotations annotation_checker · 100%
low
Tool 'toolB' has no annotations annotation_checker · 100%
low
Tool 'testTool' has no annotations annotation_checker · 100%
low
Tool 'dynamicTestTool1' has no annotations annotation_checker · 100%
low
Tool 'test/tool' has no annotations annotation_checker · 100%
low
Tool 'dynamicMultipartTool' has no annotations annotation_checker · 100%
low
Tool 'simpleTool' has no annotations annotation_checker · 100%
low
Tool 'interruptingTool' has no annotations annotation_checker · 100%
low
Tool 'resumableTool' has no annotations annotation_checker · 100%
low
Tool 'truth' has no annotations annotation_checker · 100%
low
Tool 'resumable' has no annotations annotation_checker · 100%
low
Tool 'good_tool' has no annotations annotation_checker · 100%
low
Tool 'bad_tool' has no annotations annotation_checker · 100%
low
Tool 'bad_tool_approved' has no annotations annotation_checker · 100%
low
Tool '${params.serverName}/${tool.name}' has no annotations annotation_checker · 100%
low
Tool '${options.name}/${tool.name}' has no annotations annotation_checker · 100%
low
Tool 'get_weather' has no annotations annotation_checker · 100%
low
Tool 'echoTool' has no annotations annotation_checker · 100%
low
Tool 'get_current_weather' has no annotations annotation_checker · 100%
low
Tool 'fooz' has no annotations annotation_checker · 100%
low
Tool 'test' has no annotations annotation_checker · 100%
low
Tool 'test_meta' has no annotations annotation_checker · 100%
low
Tool 'dynamic' has no annotations annotation_checker · 100%
low
Tool 'regular' has no annotations annotation_checker · 100%
low
Tool 'multipart' has no annotations annotation_checker · 100%
low
Tool 'interruptTool' has no annotations annotation_checker · 100%
low
Tool 'other/tool' has no annotations annotation_checker · 100%
low
Tool 'test/tool1' has no annotations annotation_checker · 100%
low
Tool 'other/tool2' has no annotations annotation_checker · 100%
low
Tool 'mockTool' has no annotations annotation_checker · 100%
low
Tool 'middlewareTool' has no annotations annotation_checker · 100%
low
Tool 'injectedTool' has no annotations annotation_checker · 100%
low
Tool 'namespaced/add' has no annotations annotation_checker · 100%
low
Tool 'multiTool' has no annotations annotation_checker · 100%
low
Tool 'fallbackTool' has no annotations annotation_checker · 100%
low
Tool 'menuLookupTool' has no annotations annotation_checker · 100%
low
Tool 'reservationTool' has no annotations annotation_checker · 100%
low
Tool 'reservationAgent' has no annotations annotation_checker · 100%
low
Tool 'weatherTool' has no annotations annotation_checker · 100%
low
Tool 'datePicker' has no annotations annotation_checker · 100%
low
Tool 'searchEvents' has no annotations annotation_checker · 100%
low
Tool 'reportAbsence' has no annotations annotation_checker · 100%
low
Tool 'reportTardy' has no annotations annotation_checker · 100%
low
Tool 'upcomingHolidays' has no annotations annotation_checker · 100%
low
Tool 'getRecentGrades' has no annotations annotation_checker · 100%
low
Tool 'get_usage_guide' has no annotations annotation_checker · 100%
low
Tool 'list_flows' has no annotations annotation_checker · 100%
low
Tool 'run_flow' has no annotations annotation_checker · 100%
low
Tool 'start_runtime' has no annotations annotation_checker · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: test_http manifest_parser · 70%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (56) manifest_parser · 80%
low
Tool 'test_http' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Excessive dependency count: 947 direct dependencies dependency_analyzer · 90%
info
OSV.dev API query failed dependency_analyzer · 100%
high
Hardcoded Password found in js/plugins/cloud-sql-pg/README.md secret_scanner · 65%
high
Generic API Key Assignment found in genkit-tools/common/src/utils/analytics.ts secret_scanner · 75%
medium
High-entropy string (6.02 bits/char) in go/plugins/googlegenai/gemini_test.go:692 entropy_analyzer · 55%
medium
High-entropy string (6.02 bits/char) in go/plugins/googlegenai/gemini_test.go:727 entropy_analyzer · 55%
medium
Buffer.from base64 in js/plugins/firebase/src/context.ts:373 entropy_analyzer · 75%
info
SLSA Build Level 3 detected slsa_assessor · 85%
high
High-risk OAuth scope: https://www.googleapis.com/auth/cloud-platform oauth_scope_analyzer · 80%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 2329 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%
info
package.json metadata manifest_parser · 100%