Atlas / MCP servers / smartbear / Smartbear Mcp

Smartbear McpBLOCK

mcp/smartbear/smartbear-mcp

MCP server by smartbear · bugsnag · mcp · mcp server · Audited 2026-10-12

⚑ Report / re-scan Source ↗

SmartBear's official MCP Server

Verdict

BLOCK

Grade

D

Trust score

69 /100

Exposed tools

4 3r · 1w · 0d

Transport

sse · stdio · streamable-http

License

MIT

Stars

44

01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

SmartBear MCP server

A Model Context Protocol (MCP) server which provides AI assistants with seamless access to SmartBear's suite of testing and monitoring tools, including BearQ, BugSnag, Reflect, Swagger, PactFlow, Pact Broker, QMetry, QTM4J, Zephyr and Collaborator.

What is MCP?

The Model Context Protocol (MCP) is an open standard that enabl

Read from source at commit cf651764a077OBSERVED · 2026-10-12

02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (npm)

claude mcp add mcp --env BEARQ_API_TOKEN=${BEARQ_API_TOKEN} --env BUGSNAG_AUTH_TOKEN=${BUGSNAG_AUTH_TOKEN} --env REFLECT_API_TOKEN=${REFLECT_API_TOKEN} --env SWAGGER_API_KEY=${SWAGGER_API_KEY} -- npx -y @smartbear/[email protected]

03

Exposed tools (4)

3 read · 1 write · 0 destructive.

Tool	Risk	Description
`DEPLOYKEY`	write	Deploy key
`dev`	read	Development environment
`new-secret`	read	A test secret
`prod`	read	Production environment

04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (6 observation(s))
Network: declared (4 observation(s))
Shell: declared (5 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (19)

HIGHCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

src/pactflow/client/utils.ts:80

return yaml.load(specRawBody);

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load

LOWInventory / provenance · inv.hidden_file · CWE-1104

.cspell.json

.cspell.json

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.hadolint.yaml

.hadolint.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.pre-commit-config.yaml

.pre-commit-config.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/bearq/tool/environments/list-environments.ts:2

import { Tool, ToolError, type ToolHandler } from "../../../common/tools";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/bearq/tool/environments/list-environments.ts:3

import type { ToolParams } from "../../../common/types";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/bearq/tool/environments/list-environments.ts:4

import type { BearQClient } from "../../client";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/bearq/tool/tasks/chat-with-qa-lead.ts:2

import { Tool, ToolError, type ToolHandler } from "../../../common/tools";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/bearq/tool/tasks/chat-with-qa-lead.ts:3

import type { ToolParams } from "../../../common/types";

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

src/bugsnag/client.test.ts:576

const customEndpoint = "https://192.168.1.100:8080/api/v1";

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94

src/qmetry/client/automation.ts:49

const binaryData = atob(base64Data);

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94

src/qmetry/client/automation.ts:72

const binaryData = atob(finalPayload.file);

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

package.json

@amplitude/analytics-node, @bugsnag/js, @modelcontextprotocol/node, @modelcontextprotocol/server, @modelcontextprotocol/server-legacy, js-yaml, node-cache, swagger-client

Why it matters. 22 dependency range(s) float

Fix. pin exact versions or ship a lockfile

LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427

CHANGELOG.md:28

- [Common] Usage analytics for the remote (HTTP) server, reported to the shared SmartBear Amplitude project when `MCP_SERVER_AMPLITUDE_API_KEY` is set: `Server Initialized`, `Session Started`, `Sessio

Why it matters. an instruction to move sensitive data to an outside destination

Fix. remove; a skill never needs the user's secrets off the machine

LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427

README.md:328

| `MCP_SERVER_AMPLITUDE_API_KEY` | *(unset — analytics off)* | API key for the shared SmartBear Amplitude project. When set, the server reports `Server Initialized`, `Session Started`, `Session Ended`

Why it matters. an instruction to move sensitive data to an outside destination

Fix. remove; a skill never needs the user's secrets off the machine

INFOInventory / provenance · inv.oversize · CWE-1104

docs/products/SmartBear MCP Server/images/embedded/swagger-sign-in.png

docs/products/SmartBear MCP Server/images/embedded/swagger-sign-in.png

Why it matters. 2220786 bytes not read

INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427

README.md:200

"description": "QMetry Open API Key",

Why it matters. asks the agent to read credentials

INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427

docs/products/SmartBear MCP Server/local-server.md:244

"description": "QMetry Open API Key",

Why it matters. asks the agent to read credentials

INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427

docs/products/SmartBear MCP Server/local-server.md:541

"description": "QMetry Open API Key",

Why it matters. asks the agent to read credentials

Gates applied: no_behavioural_pass.

Audited 2026-10-12 · audit v0.4.1 · source sha cf651764a077full audit observations/trust-audit/mcp-server/smartbear__smartbear-mcp.json · Report an issue / request a re-scan

05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

Date	Source	Verdict	Grade	Score	Change
2026-10-12	`cf651764a077`	BLOCK	D	69	first audit

06

Questions

What is the @smartbear/mcp MCP server?

SmartBear's official MCP Server

What tools does @smartbear/mcp expose?

4 in total: 3 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is @smartbear/mcp safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.

What credentials does @smartbear/mcp need?

It reads API_HUB_API_KEY, BEARQ_API_TOKEN, BUGSNAG_AUTH_TOKEN, ENVFALLBACK_AUTH_TOKEN, MCP_REGISTRY_TOKEN, MCP_SERVER_BUGSNAG_API_KEY, OAUTH_AUTHORIZATION_SERVER_URL, PACT_BROKER_PASSWORD, PACT_BROKER_TOKEN, REFLECT_API_TOKEN, SWAGGERHUB_API_KEY and SWAGGER_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does @smartbear/mcp run?

It speaks sse, stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @smartbear/mcp at 0.42.0.

How current is this page?

The grade is for one exact copy of the source (cf651764a077), read on 2026-10-12. The repository is watched and re-audited when it changes.