api2aiBLOCK
mcp/opensourceagi/dev-tools-starter-agent
💻⚒️ NPM dev tools and core parts for Full Stack Starter App & Docs 🚀DEMO
Verdict
BLOCK
Grade
F
Trust score
48 /100
Exposed tools
9 9r · 0w · 0d
Transport
—
License
NOASSERTION
Stars
38
01
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Read from source at commit
e47a6ba94e37OBSERVED · 2026-10-11Advertisement
02
Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude-code
claude mcp add create-starter-app --env AUTH_RESEND_KEY=${AUTH_RESEND_KEY} --env AUTH_SECRET=${AUTH_SECRET} --env AUTH_TRUSTED_ORIGINS=${AUTH_TRUSTED_ORIGINS} --env AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID} -- npx -y [email protected]claude-desktop
{
"mcpServers": {
"create-starter-app": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"AUTH_RESEND_KEY": "${AUTH_RESEND_KEY}",
"AUTH_SECRET": "${AUTH_SECRET}",
"AUTH_TRUSTED_ORIGINS": "${AUTH_TRUSTED_ORIGINS}",
"AWS_ACCESS_KEY_ID": "${AWS_ACCESS_KEY_ID}"
}
}
}
}03
Exposed tools (9)
9 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
Changelog | read | Only results about the changelog |
Home | read | Only results about the main documentation page |
IndieSaas | read | A modern SaaS starter built with Next.js, Drizzle, and Better Auth |
User | read | User management endpoints |
a.ts | read | File A |
getPageContent | read | Get the list of pages in the documentation. |
provideLinks | read | Provide links to articles found using the Web Search tool. This is compulsory and MUST be called after a web search, as it gives the user context on which URLs were used to generate the response. |
react | read | UI lib |
searchDocs | read | Search the documentation using the internal search server. |
04
Trust audit
BLOCKgrade F · trust 48/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (10 observation(s))
- Network
- declared (14 observation(s))
- Shell
- declared (5 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59
apps/vscode-cloud/entrypoint.sh:14
cat > "$HOME/.aws/credentials" <<CREDS
Why it matters. touches a credential store
HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59
apps/vscode-cloud/entrypoint.sh:53
echo "https://x-access-token:${GITHUB_TOKEN}@github.com" > "$HOME/.git-credentials"Why it matters. touches a credential store
HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59
packages/server-shell-setup/clean-server-disk.sh:81
rm -rf ~/.docker/buildx
Why it matters. touches a credential store
HIGHNetwork egress · net.metadata_ip · CWE-200, CWE-319
apps/Cloud-Computer-Control-Panel/app/api/managers/route.ts:47
echo "Dokploy installed! Access at http://$(curl -s http://169.254.169.254/latest/meta-data/public-ipv4):3000"
Why it matters. cloud metadata endpoint: the classic SSRF credential grab
MEDIUMInventory / provenance · inv.binary · CWE-1104
packages/about-system-info/native/src-tauri/icons/icon.icns
icon.icns
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
packages/native-app-wrapper/src-tauri/icons/icon.icns
icon.icns
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
starter-templates/template-nextjs-betterauth-shadcn-drizzle/public/logos/logo-ispum-1.avif
logo-ispum-1.avif
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
starter-templates/template-nextjs-betterauth-shadcn-drizzle/public/logos/logo-ispum-2.avif
logo-ispum-2.avif
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMInventory / provenance · inv.binary · CWE-1104
starter-templates/template-nextjs-betterauth-shadcn-drizzle/public/logos/logo-ispum-3.avif
logo-ispum-3.avif
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
packages/about-system-info/native/src-tauri/src/lib.rs:203
let callback_url = format!(
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
packages/about-system-info/native/src-tauri/src/lib.rs:208
if let Ok(url) = Url::parse(&callback_url) {MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
packages/native-app-wrapper/src-tauri/src/lib.rs:203
let callback_url = format!(
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
packages/native-app-wrapper/src-tauri/src/lib.rs:208
if let Ok(url) = Url::parse(&callback_url) {MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
apps/Cloud-Computer-Control-Panel/app/api/managers/route.ts:47
echo "Dokploy installed! Access at http://$(curl -s http://169.254.169.254/latest/meta-data/public-ipv4):3000"
MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94
packages/about-system-info/web/src/App.tsx:42
{ key: "users_logged_in", emoji: "🧑🤝🧑", label: "Logged in" },MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
packages/test-google-login/test/worker.test.ts:13
const SECRET = "a-long-random-shared-secret";
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
packages/verify-phone-sms/examples/client.ts:6
const API_KEY = 'sms_1234567890abcdef1234567890abcdef';
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
packages/verify-phone-sms/examples/demo.html:202
const API_KEY = 'sms_1234567890abcdef1234567890abcdef'; // Change to your API key
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
starter-templates/template-fumadocs/content/docs/claude-skill.mdx:368
token: "mock-jwt-token-12345",
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
starter-templates/template-fumadocs/content/docs/testing.mdx:43
token: "mock-jwt-token-12345",
LOWInventory / provenance · inv.hidden_file · CWE-1104
apps/cccp-vscode-ext/.vscodeignore
.vscodeignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
apps/dev-tools-help-docs/src/.directory
.directory
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
packages/server-shell-setup/test/install-shell.e2e.test.js:73
const { status, stdout } = exec(cmd)Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
packages/server-shell-setup/test/install-shell.e2e.test.js:79
const { status, stdout } = exec(`node -p "process.version + ' ' + process.execPath"`)Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
.github/scripts/sync-package-readmes.mjs:40
import { renderBadgeBlock } from '../../packages/template-git-repo/src/badges.js'Gates applied: no_behavioural_pass.
Audited 2026-10-11 · audit v0.4.1 · source sha
e47a6ba94e37full audit observations/trust-audit/mcp-server/opensourceagi__dev-tools-starter-agent.json · Report an issue / request a re-scan05
Audit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | e47a6ba94e37 | BLOCK | F | 48 | first audit |
06
Questions
What is the api2ai MCP server?
💻⚒️ NPM dev tools and core parts for Full Stack Starter App & Docs 🚀DEMO
What tools does api2ai expose?
9 in total: 9 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is api2ai safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (48/100) and found 4 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does api2ai need?
It reads AUTH_RESEND_KEY, AUTH_SECRET, AUTH_TRUSTED_ORIGINS, AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, BACKBLAZE_APPLICATION_KEY, BACKBLAZE_APPLICATION_KEY_ID, BETTER_AUTH_SECRET, CREDENTIALS_ENCRYPTION_KEY, DATABASE_AUTH_TOKEN, DOC_EDITS_ADMIN_PASSWORD and DOC_EDITS_SECRET from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How current is this page?
The grade is for one exact copy of the source (e47a6ba94e37), read on 2026-10-11. The repository is watched and re-audited when it changes.