Atlas / MCP servers / automations-project / Perplexity

PerplexityCAUTION

Name: Perplexity
Author: automations-project

mcp/automations-project/perplexity-30

MCP server by automations-project · ai · browser automation · claude · Audited 2026-10-07

⚑ Report / re-scan Source ↗

Perplexity AI search, reasoning, research, and compute - MCP server, dashboard, and multi-IDE auto-config for VS Code.

Verdict

CAUTION

Grade

Trust score

74 /100

Exposed tools

17 17r · 0w · 0d

Transport

stdio · streamable-http

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Long‐lived Perplexity browser session, auto‐config for 20+ IDEs, and a VS Code extension – all in one monorepo.

Read from source at commit 835d7bf7d684OBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add webview --env PERPLEXITY_CSRF_TOKEN=${PERPLEXITY_CSRF_TOKEN} --env PERPLEXITY_DISABLE_KEYCHAIN=${PERPLEXITY_DISABLE_KEYCHAIN} --env PERPLEXITY_OAUTH_CONSENT_TTL_HOURS=${PERPLEXITY_OAUTH_CONSENT_TTL_HOURS} --env PERPLEXITY_SESSION_TOKEN=${PERPLEXITY_SESSION_TOKEN} -- npx -y @perplexity-user-mcp/[email protected]

claude-desktop

{
  "mcpServers": {
    "webview": {
      "command": "npx",
      "args": [
        "-y",
        "@perplexity-user-mcp/[email protected]"
      ],
      "env": {
        "PERPLEXITY_CSRF_TOKEN": "${PERPLEXITY_CSRF_TOKEN}",
        "PERPLEXITY_DISABLE_KEYCHAIN": "${PERPLEXITY_DISABLE_KEYCHAIN}",
        "PERPLEXITY_OAUTH_CONSENT_TTL_HOURS": "${PERPLEXITY_OAUTH_CONSENT_TTL_HOURS}",
        "PERPLEXITY_SESSION_TOKEN": "${PERPLEXITY_SESSION_TOKEN}"
      }
    }
  }
}

Exposed tools (17)

17 read · 0 write · 0 destructive.

Tool	Risk	Description
`a`	read
`argy`	read
`claim`	read	The statement to verify
`keep`	read
`my-cmd`	read	mine
`no-args`	read	static
`optionA`	read	First option
`optionB`	read	Second option
`perplexity-compare`	read	Compare two options with a sourced comparison table.
`perplexity-fact-check`	read	Verify a claim with cited primary sources via perplexity_search.
`perplexity-latest`	read	Find the latest developments on a topic via perplexity_search.
`perplexity.reasoningPlan`	read	Step-by-step reasoning on a question, routed to perplexity_reason.
`perplexity.researchPlan`	read	Deep research brief on a topic, routed to perplexity_research.
`q`	read	the query
`question`	read	The question to reason about
`topic`	read	The subject to research
`x`	read	the x

Trust audit

CAUTIONgrade C · trust 74/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (3 observation(s))
Network: declared (5 observation(s))
Shell: declared (4 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

MEDIUMInventory / provenance · inv.binary · CWE-1104

packages/mcp-server/src/cookie-jar.js

cookie-jar.js

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321

packages/extension/tests/apply-ide-config.test.ts:444

tainted: { token: "pplx_local_old_YYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYY" },

MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321

packages/extension/tests/diagnostics-redact.test.ts:18

"-----BEGIN RSA PRIVATE KEY-----",

MEDIUMHard-coded secrets · secret.private_key · CWE-798, CWE-321

packages/extension/tests/diagnostics-redact.test.ts:24

"-----BEGIN PRIVATE KEY-----",

LOWInventory / provenance · inv.hidden_file · CWE-1104

packages/extension/.vscodeignore

.vscodeignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/extension/scripts/emit-version.mjs:7

const pkg = JSON.parse(readFileSync(join(__dirname, "../../mcp-server/package.json"), "utf-8"));

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/extension/tests/has-stored-login.test.ts:8

import { Vault } from "../../mcp-server/src/vault.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/extension/tests/transports/http-loopback.test.ts:2

import { httpLoopbackBuilder } from "../../src/auto-config/transports/http-loopback.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/extension/tests/transports/http-loopback.test.ts:3

import { StabilityGateError, type TransportBuildInput } from "../../src/auto-config/transports/index.js";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/extension/tests/transports/http-tunnel.test.ts:2

import { httpTunnelBuilder } from "../../src/auto-config/transports/http-tunnel.js";

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

CHANGELOG.md:184

- **A failed background reinit hard-killed the whole daemon → `ECONNREFUSED` in Copilot** ([`reinit-watcher.js`](packages/mcp-server/src/reinit-watcher.js), [`launcher.ts`](packages/mcp-server/src/dae

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

CHANGELOG.md:608

- **No design regression.** The static daemon bearer is now embedded in IDE `mcp.json` files only when the capability matrix allows http-loopback, and only for loopback URLs (`http://127.0.0.1:<port>/

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

docs/codex-cli-setup.md:17

url = "http://127.0.0.1:<port>/mcp"

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

docs/smoke-evidence/2026-04-24-http-loopback-static-bearer.md:15

"url": "http://127.0.0.1:11819/mcp",

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

docs/smoke-evidence/2026-04-24-http-loopback-static-bearer.md:37

5. Expected: `<configPath>` contains `{url: "http://127.0.0.1:<port>/mcp", headers.Authorization: "Bearer <daemon-static-bearer>"}`.

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

package.json

@modelcontextprotocol/sdk, patchright, zod, @types/node, @vitest/coverage-v8, rimraf, tsx, typescript

Why it matters. 9 dependency range(s) float