Raw scan report

Elnora Ai — the complete, unedited output of the deterministic mcptrustchecker engine v1.13.0, scanned . Every finding, capability tag and score component below is exactly what the engine produced — no AI, no post-processing.

← Back to the scan page
{
  "tool": {
    "name": "mcptrustchecker",
    "version": "1.13.0",
    "methodologyVersion": "mcptrustchecker-1.13"
  },
  "target": {
    "id": "@elnora-ai/mcp-server",
    "source": {
      "kind": "package",
      "origin": "@elnora-ai/mcp-server"
    },
    "server": {
      "name": "@elnora-ai/mcp-server"
    }
  },
  "grade": "A",
  "score": {
    "score": 97,
    "threatScore": 100,
    "grade": "A",
    "band": "A",
    "categorySubtotals": {
      "injection": 0,
      "exfiltration": 0,
      "permissions": 0,
      "supply-chain": 0,
      "network": 0,
      "hygiene": 0
    },
    "vector": [
      {
        "kind": "client",
        "term": "capability-exposure",
        "level": "moderate",
        "label": "capability blast radius (moderate) — client exposure if the model is manipulated",
        "appliedPenalty": 3
      },
      {
        "kind": "client",
        "term": "verification-discount",
        "level": "source",
        "label": "publisher verification (provenance) — cryptographic build provenance ties the artifact to its source",
        "appliedPenalty": 0
      },
      {
        "kind": "client",
        "term": "coverage-honesty",
        "level": "source",
        "label": "inspection depth (source) — how much of the target the scan could see",
        "appliedPenalty": 0
      }
    ],
    "gatesFired": [],
    "methodologyVersion": "mcptrustchecker-1.13"
  },
  "capability": {
    "level": "moderate",
    "reasons": [
      "ingests untrusted external content (a prompt-injection entry point)",
      "reads sensitive or local data"
    ],
    "tags": [
      "sensitive-source",
      "untrusted-input"
    ]
  },
  "coverage": {
    "level": "source",
    "inputs": {
      "toolSurface": true,
      "implementationSource": true,
      "packageMetadata": true,
      "liveTransport": false
    },
    "caveats": [
      "Tools were statically extracted from the published source (109 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command \"npx -y <package>\"."
    ]
  },
  "findings": [],
  "toxicFlows": [],
  "capabilities": [
    {
      "tool": "elnora_account_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_account_update",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_account_agreements",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_account_acceptTerms",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_account_delete",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_account_users",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_account_addLegalDoc",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_account_updateLegalDoc",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_account_deleteLegalDoc",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_api-keys_list",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_api-keys_create",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_api-keys_revoke",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_api-keys_getPolicy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_api-keys_setPolicy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_audit_list",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_feedback_submit",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_list",
      "tags": [
        "sensitive-source"
      ],
      "reasons": {
        "sensitive-source": [
          "keyword \"list_files\""
        ]
      }
    },
    {
      "tool": "elnora_files_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_content",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_create",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_upload",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_uploadBatch",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_confirmUpload",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_download",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"download\""
        ]
      }
    },
    {
      "tool": "elnora_files_update",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_archive",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_versions",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_versionContent",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_createVersion",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_restore",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_promote",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_fork",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_workingCopy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_commit",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_searchContent",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_move",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_share",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_unshare",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_files_shares",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_flags_list",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_flags_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_flags_set",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_folders_roots",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_folders_children",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_folders_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_folders_files",
      "tags": [
        "sensitive-source"
      ],
      "reasons": {
        "sensitive-source": [
          "keyword \"list_files\""
        ]
      }
    },
    {
      "tool": "elnora_folders_list",
      "tags": [
        "untrusted-input"
      ],
      "reasons": {
        "untrusted-input": [
          "keyword \"browse\""
        ]
      }
    },
    {
      "tool": "elnora_folders_create",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_folders_rename",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_folders_move",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_folders_delete",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_folders_share",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_folders_unshare",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_folders_shares",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_health_check",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_library_files",
      "tags": [
        "sensitive-source"
      ],
      "reasons": {
        "sensitive-source": [
          "keyword \"list_files\""
        ]
      }
    },
    {
      "tool": "elnora_library_folders",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_library_createFolder",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_library_renameFolder",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_library_deleteFolder",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_list",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_create",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_update",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_delete",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_members",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_updateRole",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_removeMember",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_billing",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_setStripe",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_setDefault",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_invite",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_invitations",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_cancelInvite",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_resendInvite",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_invitationInfo",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_acceptInvite",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_files",
      "tags": [
        "sensitive-source"
      ],
      "reasons": {
        "sensitive-source": [
          "keyword \"list_files\""
        ]
      }
    },
    {
      "tool": "elnora_orgs_listAll",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_directory",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_orgs_setAutotidy",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_projects_list",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_projects_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_projects_create",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_projects_update",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_projects_archive",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_projects_members",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_projects_addMember",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_projects_updateRole",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_projects_removeMember",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_projects_leave",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_protocols_generate",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_review_list",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_review_approve",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_review_reject",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_search_tasks",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_search_files",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_search_all",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_search_fileContent",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_tasks_list",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_tasks_get",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_tasks_create",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_tasks_send",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_tasks_messages",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_tasks_update",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_tasks_archive",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_tasks_unarchive",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_tasks_attachments",
      "tags": [],
      "reasons": {}
    },
    {
      "tool": "elnora_tasks_attachmentContent",
      "tags": [],
      "reasons": {}
    }
  ],
  "surfaceDigest": "a30ddace5aab62eb54f547e5623490f8e65207aca25c24bd5598d91a4e65d73e",
  "stats": {
    "tools": 109,
    "prompts": 0,
    "resources": 0,
    "findingsBySeverity": {
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 0,
      "info": 0
    }
  }
}