Back to search
B
84.9 /100

io.github.PremierInc/azure-devops

Author microsoft
Transport streamable_http
Scanned 48d ago

The MCP server for Azure DevOps, bringing the power of Azure DevOps directly to your agents.

MCP Registry

Versions

v0.0.1scored
first seen May 19, 2026

Trust breakdown

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 1

refs/heads/${branchName}
annotations: none low

Permissions 3

network Server uses network capabilities via: fetch()
medium
filesystem Server uses filesystem capabilities via: fs sync ops
low
env_vars Server uses env_vars capabilities via: process.env
low

Scan Findings 20

low
Tool 'refs/heads/${branchName}' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client ID in microsoft-azure-devops-mcp-c7ad712/src/oauth.ts auth_checker · 85%
high
Hardcoded OAuth client ID in microsoft-azure-devops-mcp-c7ad712/test/src/pat-auth.test.ts auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in microsoft-azure-devops-mcp-c7ad712/src/index.ts:72 entropy_analyzer · 75%
medium
Buffer.from base64 in microsoft-azure-devops-mcp-c7ad712/test/src/pat-auth.test.ts:330 entropy_analyzer · 75%
medium
Buffer.from base64 in microsoft-azure-devops-mcp-c7ad712/test/src/pat-auth.test.ts:341 entropy_analyzer · 75%
medium
Buffer.from base64 in microsoft-azure-devops-mcp-c7ad712/test/src/pat-auth.test.ts:352 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: refs/heads/${branchName} manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (8) manifest_parser · 80%
medium
Hardcoded OAuth client ID in microsoft-azure-devops-mcp-c7ad712/src/oauth.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in microsoft-azure-devops-mcp-c7ad712/test/src/pat-auth.test.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 643 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%