Lighthouse (npm) MCP Server
lighthouse-mcp-server
npm
v1.0.0
Published by an unidentified publisher — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.
MCP server for using the Lighthouse AI API
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 8 = 92. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −2 | publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 4
high Tool "rerun_docker_container" exposes command/code executionMTC-CAP-001
Tool "rerun_docker_container" appears to run shell commands or evaluate code (parameter "command"). Arbitrary execution driven by model input is one of the most dangerous MCP capabilities; combined with any untrusted input it becomes RCE.
Fix: Sandbox execution, allowlist commands/arguments, and never pass model output to a shell unescaped.
Location: tool rerun_docker_container
medium Untrusted input can drive an external actionMTC-FLOW-005
Untrusted-input tools ([download_snapshot, describe_download_certificate_url, download_certificate]) co-exist with external-action tools ([rerun_docker_container]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.
Evidence: untrusted [download_snapshot, describe_download_certificate_url, download_certificate] → sinks [rerun_docker_container]
Fix: Require confirmation for state-changing/egress actions triggered after processing untrusted content.
Location: flow download_snapshot → rerun_docker_container
medium Unconstrained command parameter "Command" on "rerun_docker_container"MTC-CAP-006
Tool "rerun_docker_container" takes a command-shaped parameter "Command" with no enum/pattern constraint. Free-form, model- or attacker-controlled arguments reaching a shell is the command-injection precondition.
Fix: Constrain the parameter (enum/pattern), or build the command from a fixed template with escaped args.
Location: tool rerun_docker_container · inputSchema.properties.Command
low Mutating tool "rerun_docker_container" declares no destructiveHintMTC-CAP-005
Tool "rerun_docker_container" can mutate/egress but declares no destructiveHint. Clients that don't default to spec-safe behavior may not prompt before running it.
Fix: Declare accurate annotations, and gate destructive tools on user confirmation regardless.
Location: tool rerun_docker_container
Tools 200
Each tool and what it can reach — statically extracted from the published source.
describe_download_certificate_urlingests untrusted inputdownload_certificateingests untrusted inputdownload_snapshotingests untrusted inputrerun_docker_containerruns code / shellapply_certificateno sensitive capabilityassociate_instances_key_pairsno sensitive capabilityattach_disksno sensitive capabilitycancel_audit_certificateno sensitive capabilitycancel_certificate_orderno sensitive capabilitycancel_share_blueprint_across_accountsno sensitive capability
Show 190 more tools ↓
certificate_info_submitno sensitive capabilitycertificate_order_submitno sensitive capabilitycheck_certificate_chainno sensitive capabilitycheck_certificate_domain_verificationno sensitive capabilitycheck_certificate_existno sensitive capabilitycheck_record_snapshot_rollbackno sensitive capabilitycheck_snapshot_rollbackno sensitive capabilitycommit_certificate_informationno sensitive capabilitycomplete_certificateno sensitive capabilitycreate_certificateno sensitive capabilitycreate_certificate_bind_resource_sync_taskno sensitive capabilitycreate_certificate_by_packageno sensitive capabilitycreate_dealno sensitive capabilitycreate_disk_backupno sensitive capabilitycreate_domainno sensitive capabilitycreate_domain_aliasno sensitive capabilitycreate_domain_batchno sensitive capabilitycreate_domain_custom_lineno sensitive capabilitycreate_domain_groupno sensitive capabilitycreate_domains_analytics_fileno sensitive capabilitycreate_firewall_rulesno sensitive capabilitycreate_firewall_templateno sensitive capabilitycreate_instance_snapshotno sensitive capabilitycreate_line_groupno sensitive capabilitycreate_line_group_copyno sensitive capabilitycreate_recordno sensitive capabilitycreate_record_batchno sensitive capabilitycreate_record_groupno sensitive capabilitycreate_snapshotno sensitive capabilitycreate_sub_domains_analytics_fileno sensitive capabilitycreate_subdomain_validate_t_x_t_valueno sensitive capabilitycreate_txt_recordno sensitive capabilitydelete_blueprintsno sensitive capabilitydelete_certificateno sensitive capabilitydelete_certificatesno sensitive capabilitydelete_disk_backupsno sensitive capabilitydelete_domainno sensitive capabilitydelete_domain_aliasno sensitive capabilitydelete_domain_batchno sensitive capabilitydelete_domain_custom_lineno sensitive capabilitydelete_firewall_templateno sensitive capabilitydelete_key_pairsno sensitive capabilitydelete_line_groupno sensitive capabilitydelete_managerno sensitive capabilitydelete_recordno sensitive capabilitydelete_record_batchno sensitive capabilitydelete_record_groupno sensitive capabilitydelete_share_domainno sensitive capabilitydelete_snapshotno sensitive capabilitydeploy_certificate_instanceno sensitive capabilitydeploy_certificate_record_retryno sensitive capabilitydeploy_certificate_record_rollbackno sensitive capabilitydescribe_all_scenesno sensitive capabilitydescribe_batch_taskno sensitive capabilitydescribe_blueprint_instancesno sensitive capabilitydescribe_blueprintsno sensitive capabilitydescribe_bundle_discountno sensitive capabilitydescribe_ccn_attached_instancesno sensitive capabilitydescribe_certificateno sensitive capabilitydescribe_certificate_bind_resource_task_detailno sensitive capabilitydescribe_certificate_bind_resource_task_resultno sensitive capabilitydescribe_certificate_detailno sensitive capabilitydescribe_certificate_operate_logsno sensitive capabilitydescribe_certificatesno sensitive capabilitydescribe_companiesno sensitive capabilitydescribe_delete_certificates_task_resultno sensitive capabilitydescribe_deployed_resourcesno sensitive capabilitydescribe_disk_discountno sensitive capabilitydescribe_disks_returnableno sensitive capabilitydescribe_docker_container_configurationno sensitive capabilitydescribe_docker_container_detailno sensitive capabilitydescribe_docker_containersno sensitive capabilitydescribe_domainno sensitive capabilitydescribe_domain_alias_listno sensitive capabilitydescribe_domain_analyticsno sensitive capabilitydescribe_domain_and_record_listno sensitive capabilitydescribe_domain_custom_line_listno sensitive capabilitydescribe_domain_filter_listno sensitive capabilitydescribe_domain_group_listno sensitive capabilitydescribe_domain_listno sensitive capabilitydescribe_domain_log_listno sensitive capabilitydescribe_domain_previewno sensitive capabilitydescribe_domain_purviewno sensitive capabilitydescribe_domain_share_infono sensitive capabilitydescribe_domain_share_user_listno sensitive capabilitydescribe_domain_vip_listno sensitive capabilitydescribe_domain_whoisno sensitive capabilitydescribe_file_info_by_job_idno sensitive capabilitydescribe_firewall_template_quotano sensitive capabilitydescribe_firewall_template_rulesno sensitive capabilitydescribe_host_api_gateway_instance_listno sensitive capabilitydescribe_host_cdn_instance_listno sensitive capabilitydescribe_host_clb_instance_listno sensitive capabilitydescribe_host_cos_instance_listno sensitive capabilitydescribe_host_ddos_instance_listno sensitive capabilitydescribe_host_deploy_recordno sensitive capabilitydescribe_host_deploy_record_detailno sensitive capabilitydescribe_host_lighthouse_instance_listno sensitive capabilitydescribe_host_live_instance_listno sensitive capabilitydescribe_host_teo_instance_listno sensitive capabilitydescribe_host_tke_instance_listno sensitive capabilitydescribe_host_update_recordno sensitive capabilitydescribe_host_update_record_detailno sensitive capabilitydescribe_host_vod_instance_listno sensitive capabilitydescribe_host_waf_instance_listno sensitive capabilitydescribe_instances_denied_actionsno sensitive capabilitydescribe_line_group_listno sensitive capabilitydescribe_manager_detailno sensitive capabilitydescribe_managersno sensitive capabilitydescribe_package_detailno sensitive capabilitydescribe_packagesno sensitive capabilitydescribe_recordno sensitive capabilitydescribe_record_exist_except_default_n_sno sensitive capabilitydescribe_record_filter_listno sensitive capabilitydescribe_record_group_listno sensitive capabilitydescribe_record_line_category_listno sensitive capabilitydescribe_record_line_listno sensitive capabilitydescribe_record_listno sensitive capabilitydescribe_record_snapshot_rollback_resultno sensitive capabilitydescribe_record_typeno sensitive capabilitydescribe_regionsno sensitive capabilitydescribe_snapshot_configno sensitive capabilitydescribe_snapshot_listno sensitive capabilitydescribe_snapshot_rollback_resultno sensitive capabilitydescribe_snapshot_rollback_taskno sensitive capabilitydescribe_subdomain_analyticsno sensitive capabilitydescribe_subdomain_validate_statusno sensitive capabilitydescribe_user_detailno sensitive capabilitydescribe_v_a_s_statisticno sensitive capabilitydescribe_vas_listno sensitive capabilitydisassociate_instances_key_pairsno sensitive capabilityimport_key_pairno sensitive capabilityinquire_price_create_disksno sensitive capabilityinquire_price_create_instancesno sensitive capabilityinquire_price_renew_disksno sensitive capabilitymodify_blueprint_attributeno sensitive capabilitymodify_certificate_aliasno sensitive capabilitymodify_certificate_projectno sensitive capabilitymodify_certificate_resubmitno sensitive capabilitymodify_certificates_expiring_notification_switchno sensitive capabilitymodify_disk_backups_attributeno sensitive capabilitymodify_disks_attributeno sensitive capabilitymodify_disks_backup_quotano sensitive capabilitymodify_disks_renew_flagno sensitive capabilitymodify_docker_containerno sensitive capabilitymodify_domain_custom_lineno sensitive capabilitymodify_domain_lockno sensitive capabilitymodify_domain_ownerno sensitive capabilitymodify_domain_remarkno sensitive capabilitymodify_domain_statusno sensitive capabilitymodify_domain_to_groupno sensitive capabilitymodify_domain_unlockno sensitive capabilitymodify_dynamic_d_n_sno sensitive capabilitymodify_firewall_rulesno sensitive capabilitymodify_firewall_templateno sensitive capabilitymodify_instances_attributeno sensitive capabilitymodify_line_groupno sensitive capabilitymodify_package_auto_renewno sensitive capabilitymodify_recordno sensitive capabilitymodify_record_batchno sensitive capabilitymodify_record_fieldsno sensitive capabilitymodify_record_groupno sensitive capabilitymodify_record_remarkno sensitive capabilitymodify_record_statusno sensitive capabilitymodify_record_to_groupno sensitive capabilitymodify_snapshot_attributeno sensitive capabilitymodify_snapshot_configno sensitive capabilitymodify_subdomain_statusno sensitive capabilitymodify_t_x_t_recordno sensitive capabilitymodify_vas_auto_renew_statusno sensitive capabilitypay_order_with_balanceno sensitive capabilityrename_docker_containerno sensitive capabilityreplace_certificateno sensitive capabilityresize_disksno sensitive capabilityrestart_docker_containersno sensitive capabilityrevoke_certificateno sensitive capabilityrollback_record_snapshotno sensitive capabilityrollback_snapshotno sensitive capabilitysubmit_audit_managerno sensitive capabilitysubmit_certificate_informationno sensitive capabilitysync_blueprintno sensitive capabilityterminate_instancesno sensitive capabilityupdate_certificate_instanceno sensitive capabilityupdate_certificate_record_retryno sensitive capabilityupdate_certificate_record_rollbackno sensitive capabilityupload_certificateno sensitive capabilityupload_confirm_letterno sensitive capabilityupload_revoke_letterno sensitive capabilityupload_update_certificate_instanceno sensitive capabilityverify_managerno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.0.0 latest |
A 92/100 | 4 | 1.13.0 | 2026-09-07 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan lighthouse-mcp-server --onlineOther implementations of Lighthouse 4
Independent packages implementing the same tool, scanned with the same engine. Compare all 5 side by side →
A comprehensive Model Context Protocol (MCP) server that provides web performance auditing, accessibility testing, SEO analysis, security assessment, and Core Web Vitals monitoring using Google Lighthouse. Enables LLMs and AI agents to perform detailed we
Turn mobile and desktop Lighthouse audits into evidence-backed coding-agent tasks.
MCP server for Google Lighthouse performance metrics
An MCP server for Lighthouse.one portfolio tracker.
More in Finance & Commerce
<img src="./public/logo.png" alt="1Money Logo" width="200"/>
Signed verification attestations for agent decisions: business, price, freshness, claim checks.
Actual Budget MCP server exposing API functionality
MCP server for Actual Budget - query and manage your personal finances through Claude
The Adyen Model Context Protocol server allows you to integrate with Adyen APIs through LLMs function calling utilizing various Clients. It currently supports the following tools:
Trusted agent-commerce hub: discover, trust-check, and route x402 payments with failover.