← Back to search

xcodebuildmcp

getsentry MIT 5,684 stars Scanned 48d ago

XcodeBuildMCP is a Model Context Protocol server that provides tools for Xcode project management, simulator management, and app utilities.

npm ↗
B
84.6 / 100

Versions

1.0.0 latest
May 20, 2026
2.5.2
May 12, 2026
2.5.1
May 8, 2026
2.5.0
May 7, 2026
2.5.0-beta.1
Apr 30, 2026
+ show 51 more show less
2.3.2
Mar 31, 2026
2.3.1
Mar 27, 2026
2.3.0
Mar 16, 2026
2.2.1
Mar 8, 2026
2.2.0
Mar 7, 2026
2.1.0
Feb 23, 2026
2.0.7
Feb 10, 2026
2.0.6
Feb 10, 2026
2.0.5
Feb 10, 2026
2.0.0
Feb 8, 2026
2.0.0-beta.1
Feb 2, 2026
1.15.1
Dec 20, 2025
1.15.0
Dec 15, 2025
1.15.0-beta.0
Nov 20, 2025
1.14.1
Sep 22, 2025
1.14.0
Sep 22, 2025
1.13.1
Sep 21, 2025
1.12.10
Sep 10, 2025
1.12.8
Sep 9, 2025
1.12.7
Sep 9, 2025
1.12.6
Sep 9, 2025
1.12.4
Sep 9, 2025
1.12.5
Sep 9, 2025
1.12.3
Aug 22, 2025
1.12.2
Aug 21, 2025
1.12.1
Aug 18, 2025
1.12.0
Aug 17, 2025
1.11.2
Aug 8, 2025
1.11.1
Aug 7, 2025
1.11.0
Aug 7, 2025
1.2.0-beta.3
Jul 28, 2025
1.10.4
Jun 13, 2025
1.10.3
Jun 13, 2025
1.10.2
Jun 12, 2025
1.10.1
Jun 12, 2025
1.10.0
Jun 10, 2025
1.9.0
Jun 9, 2025
1.8.0
Jun 7, 2025
1.7.0
Jun 4, 2025
1.6.1
Jun 3, 2025
1.6.0
Jun 3, 2025
1.5.0
Jun 1, 2025
1.4.0
May 11, 2025
1.4.0-beta.4
May 10, 2025
1.3.8
May 10, 2025
1.3.7
May 8, 2025
1.4.0-beta.3
May 7, 2025
1.4.0-beta.2
May 7, 2025
1.3.6
May 7, 2025
1.4.0-beta.1
May 7, 2025
1.3.5
May 7, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 4

Alpha
annotations: verified low

Alpha tool

readOnlyHint true
Beta
annotations: none low

Beta tool

TriggerChange
annotations: none low

Mutate tool catalog and emit list_changed

Gamma
annotations: none low

Gamma tool

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops, open(), os, pathlib, shutil
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 38

info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%
info
Tool 'Alpha' annotations are consistent annotation_checker · 80%
low
Tool 'Beta' has no annotations annotation_checker · 100%
low
Tool 'TriggerChange' has no annotations annotation_checker · 100%
low
Tool 'Gamma' has no annotations annotation_checker · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: yaml@2.4.5 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
info
SLSA Build Level 3 detected slsa_assessor · 85%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 563 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: Alpha manifest_parser · 85%
info
Tool: Beta manifest_parser · 85%
info
Tool: TriggerChange manifest_parser · 85%
info
Tool: Gamma manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (27) manifest_parser · 80%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (23) manifest_parser · 80%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: yaml@2.4.5 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
info
SLSA Build Level 3 detected slsa_assessor · 85%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 563 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%
info
package.json metadata manifest_parser · 100%