Live survey286 models · 13 providers · 19,992 auditsAudited verification-before-completion · SAFE →What changedHow we verifyllms.txt

MCP server · Org-owned · Audited from source

Eino MCP server

by cloudwego/einoApache-2.0 licenceAudited 20 Sep 2026 · source 69291150172a

★ 13,103
!CAUTIONGrade B · 89/100 · 20 Sep 2026 · 6929115
13,103GitHub stars
InstallView source on GitHub ↗

Is it safe? With care — CAUTION, grade B (89/100). It exposes 9 tools: 8 read, 1 write and 0 destructive. The audit recorded 12 findings (0 critical, 0 high, 4 medium, 8 low). Maintainer's description: The ultimate LLM/AI application development framework in Go.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
CoCopilotAIGoogle AI Mode
Cite

Cite this page

ModelsAtlas. “Eino MCP server (cloudwego/eino)”. Retrieved 20 Sep 2026. https://modelsatlas.com/mcp/cloudwego/eino

Trust audit

Audit 0.4.1 · full source read 20 Sep 2026

Trust score89/100!CAUTION B
0 critical0 high4 medium8 low0 info

12 findings, listed below with the file and line each was found on. Grade A needs a sandboxed behavioural run too; this audit read the source only.

What the source does

  • FilesystemNone observedNothing seen in the source
  • NetworkNone observedNothing seen in the source
  • ShellNone observedNothing seen in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

“Declared” means the server says it does this and the source agrees. Browser, file and shell access are expected of some kinds of server.

Five audit layers

LayerWhat we checkResult
L0 ProvenanceRepo owner, licence, archive status, activityWARN 6 findings
L1 Static sourceSecrets, path traversal, supply chainPASS 6 findings
L2 InstructionsPrompt injection and authority framing in docs and tool descriptionsPASS
L3 InventoryDeclared tools match the sourcePASS
L4 SandboxRun in isolation and watch behaviourSKIPPED

Provenance & runtime

Who published it, and what the audit could and could not run

Provenance

  • Repository owner cloudwegoOrganizationAccount type recorded when we read the repository.
  • PackageNo packageRuns from a repository checkout or a hosted URL.
  • LicenceApache-2.0From the repository, as read at the audited commit.
  • Last pushTodayActivity of the repository when we read it.
  • Source commit read69291150172aThe audit covers exactly this commit, read on 20 Sep 2026.

Runtime

  • Sandbox runNot run yetThis audit read the source only; it did not execute the server.
  • Tool inventory9 declaredRead from the source and classed read, write or destructive.

Every value here is read from the record's own repository and audit.Suggest a correction

Findings (12)

Sorted by severity

MEDIUMInventory / provenanceinv.binary · adk/prebuilt/deep/testdata/checkpoint_data_v0.7.37.bin
F-13 Inventory / provenanceCWE-1104Layer L0
checkpoint_data_v0.7.37.bin
Why
a compiled or binary member cannot be reviewed from source
Fix
ship source, or explain the binary in the README
MEDIUMInventory / provenanceinv.binary · adk/prebuilt/deep/testdata/checkpoint_data_v0.8.2.bin
F-13 Inventory / provenanceCWE-1104Layer L0
checkpoint_data_v0.8.2.bin
Why
a compiled or binary member cannot be reviewed from source
Fix
ship source, or explain the binary in the README
MEDIUMInventory / provenanceinv.binary · adk/prebuilt/deep/testdata/checkpoint_data_v0.8.3.bin
F-13 Inventory / provenanceCWE-1104Layer L0
checkpoint_data_v0.8.3.bin
Why
a compiled or binary member cannot be reviewed from source
Fix
ship source, or explain the binary in the README
MEDIUMInventory / provenanceinv.binary · adk/prebuilt/deep/testdata/checkpoint_data_v0.8.4.bin
F-13 Inventory / provenanceCWE-1104Layer L0
checkpoint_data_v0.8.4.bin
Why
a compiled or binary member cannot be reviewed from source
Fix
ship source, or explain the binary in the README
LOWInventory / provenanceinv.hidden_file · .golangci.yaml
F-13 Inventory / provenanceCWE-1104Layer L0
.golangci.yaml
Why
hidden member outside the usual dotfiles
Fix
review its purpose
LOWInventory / provenanceinv.hidden_file · .licenserc.yaml
F-13 Inventory / provenanceCWE-1104Layer L0
.licenserc.yaml
Why
hidden member outside the usual dotfiles
Fix
review its purpose
LOWFilesystem / pathfs.system_paths · adk/middlewares/agentsmd/agentsmd_test.go:714
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
b.set("/root/main.md", "start @sub/mid.md end")
Why
No further detail recorded for this rule.
Fix
—
LOWFilesystem / pathfs.system_paths · adk/middlewares/agentsmd/agentsmd_test.go:715
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
b.set("/root/sub/mid.md", "mid @deep/leaf.md mid_end")
Why
No further detail recorded for this rule.
Fix
—
LOWFilesystem / pathfs.system_paths · adk/middlewares/agentsmd/agentsmd_test.go:716
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
b.set("/root/sub/deep/leaf.md", "LEAF")
Why
No further detail recorded for this rule.
Fix
—
LOWFilesystem / pathfs.system_paths · adk/middlewares/agentsmd/agentsmd_test.go:718
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
l := newLoaderConfig(b, []string{"/root/main.md"}, 0, 0, nil)
Why
No further detail recorded for this rule.
Fix
—
LOWFilesystem / pathfs.traversal · adk/middlewares/plantask/task_get_test.go:73
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
_, err := tool.InvokableRun(ctx, `{"taskId": "../../../etc/passwd"}`)
Why
No further detail recorded for this rule.
Fix
—
LOWFilesystem / pathfs.traversal · adk/middlewares/plantask/task_update_test.go:227
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
_, err := tool.InvokableRun(ctx, `{"taskId": "../../../etc/passwd", "status": "in_progress"}`)
Why
No further detail recorded for this rule.
Fix
—

Tools it exposes

9 declared in source · 0 destructive

8 read1 write0 destructive
ToolRiskWhat it does
plan_execute_subagentwritea plan execute subagent
AgenticStreamQueryAgentreadTest agent for agentic runner query streaming
AgenticStreamRunnerAgentreadTest agent for agentic runner streaming
PanicAgentreadAgent that panics
UnsupportedModeAgentreadAgent with unsupported mode
headquartersreadthe company headquarters that coordinates all departments
non-resumablereadcannot resume
payment_departmentreadthe department responsible for all payment-related operations
project_execution_agentreadthe agent responsible for complex project execution tasks

Install

audited commit 6929115

Read the findings first. The most severe is Inventory / provenance (medium) at adk/prebuilt/deep/testdata/checkpoint_data_v0.7.37.bin.

No connect command is recorded for this server yet. Follow the repository's own instructions, and read the findings above first.

Audit history

  1. !CAUTION B 89 / 100

    Source changed, verdict held · 69291150172a

README badge

For maintainers · updates on every re-audit

ModelsAtlas: CAUTION BMODELSATLASCAUTION · B 
[![ModelsAtlas: CAUTION B](https://modelsatlas.com/mcp/cloudwego/eino/badge.svg)](https://modelsatlas.com/mcp/cloudwego/eino/)

The badge always shows the latest audit; a maintainer cannot pin an old verdict.

Other ratings

Cited, never blended into our score

No third-party security ratings are recorded for this server yet. When they exist they appear here with their source and date, beside, not inside, our grade.

Questions about Eino MCP server

What is the Eino MCP server?
The ultimate LLM/AI application development framework in Go.
What tools does Eino expose?
9 in total: 8 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Eino safe to connect to an agent?
With care. The audit graded it B (89/100) and found 12 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does Eino need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (69291150172a), read on 2026-09-20. The repository is watched and re-audited when it changes.

Sources

  • cloudwego/eino on GitHub — the source we read, its licence, stars and activityObserved · 20 Sep 2026
  • ModelsAtlas trust audit — CAUTION verdict for commit 69291150172aObserved · 20 Sep 2026

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.