Fd Daas MCP Server
fd-daas-mcp
PyPI
v0.1.1
Published by finddataofficial — no publish provenance and no vendor-owned scope, so the publisher could not be verified. The repository link below is self-declared.
Every server starts at 100. These are the exact deductions the deterministic engine applied — each one reproducible, none of it an opinion or an LLM's guess:
| Points | What was found | Category |
|---|---|---|
| −2.1 | Package has no source repository MTC-SUP-011 | supply-chain |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind the deduction.
Findings 10
high Reads a sensitive credential path or dumps the environment (src/fd_daas_mcp/mcp/daas/pipeline_tools.py)MTC-SRC-006
In the server's implementation (`src/fd_daas_mcp/mcp/daas/pipeline_tools.py:105`): Reading private keys / cloud credentials, or serializing the whole environment, is a sensitive-data source that becomes exfiltration when combined with any egress. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: dict(os.environ)
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server src/fd_daas_mcp/mcp/daas/pipeline_tools.py
high Reads a sensitive credential path or dumps the environment (src/fd_daas_mcp/mcp/daas/selfcheck_entity_collection_script.py)MTC-SRC-006
In the server's implementation (`src/fd_daas_mcp/mcp/daas/selfcheck_entity_collection_script.py:266`): Reading private keys / cloud credentials, or serializing the whole environment, is a sensitive-data source that becomes exfiltration when combined with any egress. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: dict(os.environ)
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server src/fd_daas_mcp/mcp/daas/selfcheck_entity_collection_script.py
high Reads a sensitive credential path or dumps the environment (src/fd_daas_mcp/mcp/daas/selfcheck_entity_collections.py)MTC-SRC-006
In the server's implementation (`src/fd_daas_mcp/mcp/daas/selfcheck_entity_collections.py:298`): Reading private keys / cloud credentials, or serializing the whole environment, is a sensitive-data source that becomes exfiltration when combined with any egress. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: dict(os.environ)
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server src/fd_daas_mcp/mcp/daas/selfcheck_entity_collections.py
high Shell/command execution in server code (src/fd_daas_mcp/mcp/alerts/selfcheck.py)MTC-SRC-002
In the server's implementation (`src/fd_daas_mcp/mcp/alerts/selfcheck.py:104`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: os.system(
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server src/fd_daas_mcp/mcp/alerts/selfcheck.py
high Shell/command execution in server code (src/fd_daas_mcp/mcp/cron/agent_runner.py)MTC-SRC-002
In the server's implementation (`src/fd_daas_mcp/mcp/cron/agent_runner.py:21`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: subprocess.run(
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server src/fd_daas_mcp/mcp/cron/agent_runner.py
high Shell/command execution in server code (src/fd_daas_mcp/mcp/daas/selfcheck_entity_collection_script.py)MTC-SRC-002
In the server's implementation (`src/fd_daas_mcp/mcp/daas/selfcheck_entity_collection_script.py:268`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: subprocess.run(
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server src/fd_daas_mcp/mcp/daas/selfcheck_entity_collection_script.py
high Shell/command execution in server code (src/fd_daas_mcp/mcp/daas/selfcheck_entity_collections.py)MTC-SRC-002
In the server's implementation (`src/fd_daas_mcp/mcp/daas/selfcheck_entity_collections.py:299`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: subprocess.run(
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server src/fd_daas_mcp/mcp/daas/selfcheck_entity_collections.py
high Shell/command execution in server code (src/fd_daas_mcp/mcp/daas/selfcheck_process.py)MTC-SRC-002
In the server's implementation (`src/fd_daas_mcp/mcp/daas/selfcheck_process.py:245`): Spawning a shell/process is command-execution capability; with unsanitized tool input it is command injection / RCE. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: subprocess.run(
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server src/fd_daas_mcp/mcp/daas/selfcheck_process.py
medium Dynamic module load from a non-literal (src/fd_daas_mcp/registry.py)MTC-SRC-005
In the server's implementation (`src/fd_daas_mcp/registry.py:232`): Loading a module chosen at runtime (from a variable) can pull in and run attacker-influenced code paths. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: __import__(
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server src/fd_daas_mcp/registry.py
low Package has no source repositoryMTC-SUP-011
"fd-daas-mcp" declares no repository URL, so its published artifact cannot be compared against reviewable source.
Fix: Prefer packages that link to public, reviewable source.
Location: package fd-daas-mcp
What this scan could not see
- No tools were enumerated, so prompt-injection, capability and toxic-flow analysis had no tool surface to inspect. To grade a package’s real runtime tools, scan the running server: --command "npx -y <package>".
Versions
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.1.1 latest |
A 98/100 | 10 | 1.5.0 | 2026-07-23 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan fd-daas-mcp --online --registry pypiMore in Finance & Commerce
Security scan results for the 1money MCP server.
Security scan results for the 8dx MCP server.
Security scan results for the A Stock MCP server.
Security scan results for the A0nexus Bitcoin MCP server.
Security scan results for the A2a Swap Sdk MCP server.
Security scan results for the Abacatepay MCP server.