Raw scan report

Elf — the complete, unedited output of the deterministic mcptrustchecker engine v1.7.0, scanned . Every finding, capability tag and score component below is exactly what the engine produced — no AI, no post-processing.

← Back to the scan page
{
  "tool": {
    "name": "mcptrustchecker",
    "version": "1.7.0",
    "methodologyVersion": "mcptrustchecker-1.7"
  },
  "target": {
    "id": "elf-mcp-server",
    "source": {
      "kind": "package",
      "origin": "elf-mcp-server"
    },
    "server": {
      "name": "elf-mcp-server"
    }
  },
  "grade": "B",
  "score": {
    "score": 81,
    "threatScore": 92,
    "grade": "B",
    "band": "B",
    "categorySubtotals": {
      "injection": 2.22,
      "exfiltration": 0,
      "permissions": 0,
      "supply-chain": 5.7,
      "network": 0,
      "hygiene": 0
    },
    "vector": [
      {
        "kind": "threat",
        "ruleId": "MTC-INJ-CAPS",
        "category": "injection",
        "severity": "low",
        "confidence": "heuristic",
        "rawWeight": 3,
        "confidenceMult": 0.4,
        "diminishingFactor": 1,
        "appliedPenalty": 1.2
      },
      {
        "kind": "threat",
        "ruleId": "MTC-INJ-CAPS",
        "category": "injection",
        "severity": "low",
        "confidence": "heuristic",
        "rawWeight": 3,
        "confidenceMult": 0.4,
        "diminishingFactor": 0.5,
        "appliedPenalty": 0.6
      },
      {
        "kind": "threat",
        "ruleId": "MTC-INJ-CAPS",
        "category": "injection",
        "severity": "low",
        "confidence": "heuristic",
        "rawWeight": 3,
        "confidenceMult": 0.4,
        "diminishingFactor": 0.25,
        "appliedPenalty": 0.3
      },
      {
        "kind": "threat",
        "ruleId": "MTC-INJ-CAPS",
        "category": "injection",
        "severity": "low",
        "confidence": "heuristic",
        "rawWeight": 3,
        "confidenceMult": 0.4,
        "diminishingFactor": 0.1,
        "appliedPenalty": 0.12
      },
      {
        "kind": "threat",
        "ruleId": "MTC-SUP-005",
        "category": "supply-chain",
        "severity": "medium",
        "confidence": "heuristic",
        "rawWeight": 9,
        "confidenceMult": 0.4,
        "diminishingFactor": 1,
        "appliedPenalty": 3.6
      },
      {
        "kind": "threat",
        "ruleId": "MTC-SUP-011",
        "category": "supply-chain",
        "severity": "low",
        "confidence": "strong",
        "rawWeight": 3,
        "confidenceMult": 0.7,
        "diminishingFactor": 1,
        "appliedPenalty": 2.1
      },
      {
        "kind": "client",
        "term": "capability-exposure",
        "level": "high",
        "label": "capability blast radius (high) — client exposure if the model is manipulated",
        "appliedPenalty": 6
      },
      {
        "kind": "client",
        "term": "verification-discount",
        "level": "none",
        "label": "publisher verification (unlocatable) — no provenance and no public repository to inspect",
        "appliedPenalty": 5
      },
      {
        "kind": "client",
        "term": "coverage-honesty",
        "level": "source",
        "label": "inspection depth (source) — how much of the target the scan could see",
        "appliedPenalty": 0
      }
    ],
    "gatesFired": [],
    "methodologyVersion": "mcptrustchecker-1.7"
  },
  "capability": {
    "level": "high",
    "reasons": [
      "ingests untrusted external content (a prompt-injection entry point)",
      "can send data / act on an external service",
      "reads sensitive or local data",
      "has a read → egress path (a data-exfiltration surface)",
      "untrusted-input, sensitive-source and egress co-exist across tools (toxic-flow surface)"
    ],
    "tags": [
      "external-sink",
      "untrusted-input",
      "sensitive-source"
    ]
  },
  "coverage": {
    "level": "source",
    "inputs": {
      "toolSurface": true,
      "implementationSource": true,
      "packageMetadata": true,
      "liveTransport": false
    },
    "caveats": [
      "Tools were statically extracted from the published source (86 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command \"npx -y <package>\"."
    ]
  },
  "findings": [
    {
      "ruleId": "MTC-FLOW-002",
      "title": "Completed toxic-flow trifecta across tools",
      "category": "exfiltration",
      "severity": "critical",
      "confidence": "strong",
      "description": "This server (without client built-ins) exposes a complete data-exfiltration chain: elf_python_pm_demag_step_lint → elf_mcp_readiness. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.",
      "remediation": "Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.",
      "location": {
        "kind": "flow",
        "name": "elf_python_pm_demag_step_lint → elf_mcp_readiness"
      },
      "owasp": "LLM02:2025 Sensitive Information Disclosure",
      "references": [],
      "data": {
        "untrusted": [
          "elf_python_pm_demag_step_lint",
          "elf_wiki_index"
        ],
        "sources": [
          "elf_python_pm_demag_step_lint"
        ],
        "sinks": [
          "elf_mcp_readiness"
        ],
        "path": [
          "elf_python_pm_demag_step_lint",
          "elf_mcp_readiness"
        ],
        "edges": [
          {
            "from": "elf_python_pm_demag_step_lint",
            "to": "elf_mcp_readiness",
            "kind": "agent-mediated"
          }
        ],
        "wired": false
      }
    },
    {
      "ruleId": "MTC-SUP-005",
      "title": "Near-miss of exa-mcp-server (edit distance 2)",
      "category": "supply-chain",
      "severity": "medium",
      "confidence": "heuristic",
      "description": "\"elf-mcp-server\" is edit-distance 2 from the package \"exa-mcp-server\". Verify this is the intended package.",
      "remediation": "Confirm you meant \"exa-mcp-server\". Install packages only from their documented, official name.",
      "location": {
        "kind": "package",
        "name": "elf-mcp-server"
      },
      "owasp": "LLM03:2025 Supply Chain",
      "references": [
        "https://github.com/ossf/package-analysis",
        "https://owasp.org/www-project-top-10-ci-cd-security-risks/"
      ],
      "data": {
        "candidate": "elf-mcp-server",
        "target": "exa-mcp-server"
      }
    },
    {
      "ruleId": "MTC-INJ-CAPS",
      "title": "Excessive ALL-CAPS emphasis in metadata",
      "category": "injection",
      "severity": "low",
      "confidence": "heuristic",
      "description": "A run of shouted words is a common way to give injected instructions false authority.",
      "location": {
        "kind": "tool",
        "name": "elf_overview",
        "field": "description"
      },
      "evidence": "RECOMMENDED FIRST CALL. Catalog of ELF MCP's 86 tools + 1\n    prompt, with public-safe routing hints for MCP clients.\n\n "
    },
    {
      "ruleId": "MTC-INJ-CAPS",
      "title": "Excessive ALL-CAPS emphasis in metadata",
      "category": "injection",
      "severity": "low",
      "confidence": "heuristic",
      "description": "A run of shouted words is a common way to give injected instructions false authority.",
      "location": {
        "kind": "tool",
        "name": "elf_examples_index",
        "field": "description"
      },
      "evidence": "List all 332 ELF600 example input files (.mai analysis + .mei mesh + .txt + .props + .model)\n    bundled with this serve"
    },
    {
      "ruleId": "MTC-INJ-CAPS",
      "title": "Excessive ALL-CAPS emphasis in metadata",
      "category": "injection",
      "severity": "low",
      "confidence": "heuristic",
      "description": "A run of shouted words is a common way to give injected instructions false authority.",
      "location": {
        "kind": "tool",
        "name": "elf_examples_search",
        "field": "description"
      },
      "evidence": "Substring-search across all 332 ELF600 example input files (case-insensitive).\n\n    Multiple keywords (space-separated) "
    },
    {
      "ruleId": "MTC-INJ-CAPS",
      "title": "Excessive ALL-CAPS emphasis in metadata",
      "category": "injection",
      "severity": "low",
      "confidence": "heuristic",
      "description": "A run of shouted words is a common way to give injected instructions false authority.",
      "location": {
        "kind": "tool",
        "name": "elf_sample_decks_search",
        "field": "description"
      },
      "evidence": "Search lab-authored public sample deck paths and text.\n\n    Multiple keywords require all terms to match. Use this to fi"
    },
    {
      "ruleId": "MTC-SUP-011",
      "title": "Package has no source repository",
      "category": "supply-chain",
      "severity": "low",
      "confidence": "strong",
      "description": "\"elf-mcp-server\" declares no repository URL, so its published artifact cannot be compared against reviewable source.",
      "remediation": "Prefer packages that link to public, reviewable source.",
      "location": {
        "kind": "package",
        "name": "elf-mcp-server"
      }
    }
  ],
  "toxicFlows": [
    {
      "id": "flow-1",
      "severity": "critical",
      "confidence": "strong",
      "untrustedInput": [
        "elf_python_pm_demag_step_lint",
        "elf_wiki_index"
      ],
      "sensitiveSource": [
        "elf_python_pm_demag_step_lint"
      ],
      "externalSink": [
        "elf_mcp_readiness"
      ],
      "selfContained": false,
      "path": [
        "elf_python_pm_demag_step_lint",
        "elf_mcp_readiness"
      ],
      "pathWired": false,
      "description": "A cross-tool exfiltration chain exists: elf_python_pm_demag_step_lint → elf_mcp_readiness."
    }
  ],
  "capabilities": [
    {
      "tool": "elf_overview",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_agentic_profile",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_usage",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_mcp_readiness",
      "tags": [
        "external-sink"
      ],
      "reasons": {
        "external-sink": [
          "keyword \"publish\""
        ]
      }
    },
    {
      "tool": "elf_motor_readiness",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_motor_hybrid_router",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_motor_mmm_quick_check",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_help_index",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_help_search",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_examples_index",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_examples_search",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_examples_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_examples_playbook",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_index",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_search",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_route",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_local_simulation_handoff",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_playbook",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_representatives",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_validation",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_quality",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_physics",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_validation_matrix",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_observable_contracts",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_cross_validation",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_sample_decks_duplicates",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_public_promotion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_team28",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_interface_design",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_api_manual",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_api_schema",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_spec_lint",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_deck_lint",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_pm_demag_step_lint",
      "tags": [
        "untrusted-input",
        "sensitive-source"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"read_pr\""
        ],
        "sensitive-source": [
          "keyword \"read_private\""
        ]
      }
    },
    {
      "tool": "elf_python_run_contract",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_run_result_parse",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_run_result_parse_path",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_design_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_sweep_matrix",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_dq_axis_map_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_mtpa_search_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_reluctance_motor_design_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_winding_layout_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_topology_parameter_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_demag_margin_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_drive_cycle_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_optimization_study_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_optimization_loop",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_voltage_field_weakening_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_cogging_ripple_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_airgap_harmonics_nvh_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_thermal_network_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_manufacturing_tolerance_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_material_variation_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_feasibility_study",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_efficiency_map_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_efficiency_map_from_results",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_operating_point_run_queue",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_inverter_pwm_harmonic_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_saturation_inductance_map_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_loss_model_contract",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_torque_speed_envelope",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_induction_slip_sweep_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_observable_contract",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_market_brief",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_design_agent_handoff",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_ngsolve_result_crosscheck",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_drawing_bom_handoff",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_rotor_stress_retention_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_motor_validation_scorecard",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_ngsolve_validation_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_ngsolve_validation_script",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_meg_generation_plan",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_2d_motor_template",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_recipe_index",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_recipe_search",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_recipe_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_plan_workflow",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_help_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_wiki_index",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"crawl\""
        ]
      }
    },
    {
      "tool": "elf_wiki_search",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_wiki_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_index",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_search",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elf_python_get",
      "tags": [],
      "reasons": {}
    }
  ],
  "surfaceDigest": "19e34d70433a860a90d05eae5c4489ba107ee7e77f30be2f11094f4ab23d63c3",
  "stats": {
    "tools": 86,
    "prompts": 0,
    "resources": 0,
    "findingsBySeverity": {
      "critical": 1,
      "high": 0,
      "medium": 1,
      "low": 5,
      "info": 0
    }
  }
}