ai.flowdot/mcp-server
clean Threshold medium · generated 2026-10-04T20:17:44.566Z
Publisher: flowdot-llc
Packages: @flowdot.ai/mcp-server@1.3.21 (npm)
Repository: https://github.com/flowdot-llc/mcp-server
How this record was produced
The inputs are public: the registry record and the manifest of the package that was actually published. Each finding below includes its file and rule.
Repository source is outside this index’s scan scope. Use the CLI locally for source scanning; source code does not need to leave your machine.
A finding is a matched shape, not a conclusion. It does not by itself prove exploitability or intent. Findings below the configured threshold do not change the verdict. Unmeasured work is listed separately; unmeasured does not mean clean.
registryDocument
status=findings · source=mcp-census
| Rule | Severity | Location | Description |
|---|---|---|---|
| stdio-transport | info | packages[].transport.type=stdio (runs locally as a child process) |
packageManifest
status=findings · source=guard-scan
| Rule | Severity | Location | Description |
|---|---|---|---|
| AG-SUPPLY-001 | low | package.json | devDependencies entry @flowdot.ai/api resolves to a path inside this repository, which nobody installing the published package can resolve: file:../flowdot-api (dev-only: cannot reach a consumer of this package) |
| AG-SUPPLY-001 | low | package.json | devDependencies entry @flowdot.ai/documents resolves to a path inside this repository, which nobody installing the published package can resolve: file:../flowdot-documents (dev-only: cannot reach a consumer of this package) |
| AG-SUPPLY-001 | low | package.json | devDependencies entry @flowdot.ai/cli-qa-engine resolves to a path inside this repository, which nobody installing the published package can resolve: file:../flowdot-cli-qa-engine (dev-only: cannot reach a consumer of this package) |
| AG-SUPPLY-001 | low | package.json | devDependencies entry @flowdot.ai/browser-driver resolves to a path inside this repository, which nobody installing the published package can resolve: file:../flowdot-browser-driver (dev-only: cannot reach a consumer of this package) |
| AG-SUPPLY-001 | low | package.json | devDependencies entry @flowdot.ai/platform-learn resolves to a path inside this repository, which nobody installing the published package can resolve: file:../flowdot-platform-learn (dev-only: cannot reach a consumer of this package) |
Unmeasured work
This record has no unmeasured blocks.
Scan coverage
State: complete · required 2, completed 2, failed 0
| Scanner | Required | Status | Output | Consistency | Reason |
|---|---|---|---|---|---|
| registryDocument | Required | completed | Present / parseable | ok | |
| packageManifest | Required | completed | Present / parseable | ok |
Machine-readable record
JSON:https://xn--5kvo87g.com/v1/servers/ai.flowdot%2Fmcp-server
README badge:https://xn--5kvo87g.com/badge/ai.flowdot%2Fmcp-server.svg