Vultr MCP Server
mcp-vultr
PyPI
v2.4.1
Published by an unidentified publisher — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 4 = 96. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
medium Hardcoded egress to an external endpoint (src/mcp_vultr/serverless_inference_analyzer.py)MTC-SRC-003
In the server's implementation (`src/mcp_vultr/serverless_inference_analyzer.py:492`): A hardcoded outbound call to a fixed external host inside server code is a classic exfiltration/telemetry channel — especially paired with reads of local data. This is read from the code itself — not from the tool description — so a poisoned server cannot hide it behind honest-looking metadata.
Evidence: }} ] }} response = requests.post( 'https://api.vultr.com/v2/inference/chat/completions', headers=headers,
Fix: Review this call path: confirm it never receives unsanitized tool input, constrain it, or remove it. Treat a server whose code reaches these sinks as high-capability regardless of what its tools claim.
Location: server src/mcp_vultr/serverless_inference_analyzer.py
Tools 200
Each tool and what it can reach — statically extracted from the published source.
analyze_cdn_performanceno sensitive capabilityanalyze_database_migration_statusno sensitive capabilityanalyze_database_performanceno sensitive capabilityanalyze_domainno sensitive capabilityanalyze_kubernetes_cluster_costsno sensitive capabilityanalyze_spending_trendsno sensitive capabilityattachno sensitive capabilityconfigure_basic_web_lbno sensitive capabilitycreateno sensitive capabilitycreate_bare_metal_serverno sensitive capability
Show 190 more tools ↓
create_cdn_ssl_certificateno sensitive capabilitycreate_cdn_zoneno sensitive capabilitycreate_connection_poolno sensitive capabilitycreate_domainno sensitive capabilitycreate_forwarding_ruleno sensitive capabilitycreate_groupno sensitive capabilitycreate_ipv4no sensitive capabilitycreate_isono sensitive capabilitycreate_kafka_topicno sensitive capabilitycreate_kubernetes_clusterno sensitive capabilitycreate_kubernetes_node_poolno sensitive capabilitycreate_logical_databaseno sensitive capabilitycreate_read_replicano sensitive capabilitycreate_recordno sensitive capabilitycreate_ruleno sensitive capabilitycreate_userno sensitive capabilitydeleteno sensitive capabilitydelete_bare_metal_serverno sensitive capabilitydelete_cdn_ssl_certificateno sensitive capabilitydelete_cdn_zoneno sensitive capabilitydelete_connection_poolno sensitive capabilitydelete_domainno sensitive capabilitydelete_forwarding_ruleno sensitive capabilitydelete_groupno sensitive capabilitydelete_ipv4no sensitive capabilitydelete_isono sensitive capabilitydelete_kafka_topicno sensitive capabilitydelete_kubernetes_clusterno sensitive capabilitydelete_kubernetes_cluster_with_resourcesno sensitive capabilitydelete_kubernetes_nodeno sensitive capabilitydelete_kubernetes_node_poolno sensitive capabilitydelete_logical_databaseno sensitive capabilitydelete_recordno sensitive capabilitydelete_ruleno sensitive capabilitydelete_sslno sensitive capabilitydelete_userno sensitive capabilitydetachno sensitive capabilitydisable_auto_sslno sensitive capabilityexport_zone_fileno sensitive capabilityfind_by_regionno sensitive capabilityfork_databaseno sensitive capabilitygenerate_docker_credentialsno sensitive capabilitygenerate_kubernetes_credentialsno sensitive capabilitygetno sensitive capabilityget_account_infono sensitive capabilityget_applicationno sensitive capabilityget_application_deployment_guideno sensitive capabilityget_applications_by_vendorno sensitive capabilityget_bandwidthno sensitive capabilityget_bare_metal_bandwidthno sensitive capabilityget_bare_metal_neighborsno sensitive capabilityget_bare_metal_planno sensitive capabilityget_bare_metal_serverno sensitive capabilityget_bare_metal_server_summaryno sensitive capabilityget_bare_metal_user_datano sensitive capabilityget_cdn_available_regionsno sensitive capabilityget_cdn_ssl_certificateno sensitive capabilityget_cdn_zoneno sensitive capabilityget_cdn_zone_logsno sensitive capabilityget_cdn_zone_statsno sensitive capabilityget_cdn_zone_summaryno sensitive capabilityget_configuration_summaryno sensitive capabilityget_connection_poolno sensitive capabilityget_cost_breakdown_by_serviceno sensitive capabilityget_current_balanceno sensitive capabilityget_current_month_summaryno sensitive capabilityget_deployment_examplesno sensitive capabilityget_docker_login_commandno sensitive capabilityget_domainno sensitive capabilityget_firewall_ruleno sensitive capabilityget_forwarding_ruleno sensitive capabilityget_groupno sensitive capabilityget_health_statusno sensitive capabilityget_invoiceno sensitive capabilityget_isono sensitive capabilityget_iso_by_nameno sensitive capabilityget_kafka_topicno sensitive capabilityget_kubernetes_available_upgradesno sensitive capabilityget_kubernetes_clusterno sensitive capabilityget_kubernetes_cluster_configno sensitive capabilityget_kubernetes_cluster_resourcesno sensitive capabilityget_kubernetes_cluster_statusno sensitive capabilityget_kubernetes_nodeno sensitive capabilityget_kubernetes_node_poolno sensitive capabilityget_kubernetes_versionsno sensitive capabilityget_last_month_summaryno sensitive capabilityget_logical_databaseno sensitive capabilityget_maintenance_updatesno sensitive capabilityget_marketplace_app_variablesno sensitive capabilityget_migration_statusno sensitive capabilityget_monthly_usage_summaryno sensitive capabilityget_mounting_instructionsno sensitive capabilityget_operating_systemno sensitive capabilityget_os_by_nameno sensitive capabilityget_payment_summaryno sensitive capabilityget_planno sensitive capabilityget_popular_marketplace_appsno sensitive capabilityget_recordno sensitive capabilityget_registry_infono sensitive capabilityget_ruleno sensitive capabilityget_s3_configno sensitive capabilityget_storage_summaryno sensitive capabilityget_usageno sensitive capabilityget_userno sensitive capabilityget_volume_statusno sensitive capabilityimport_zone_fileno sensitive capabilitylist_application_categoriesno sensitive capabilitylist_application_imagesno sensitive capabilitylist_attachedno sensitive capabilitylist_available_versionsno sensitive capabilitylist_backupsno sensitive capabilitylist_bare_metal_plansno sensitive capabilitylist_bare_metal_serversno sensitive capabilitylist_bare_metal_servers_by_regionno sensitive capabilitylist_bare_metal_servers_by_statusno sensitive capabilitylist_billing_historyno sensitive capabilitylist_by_regionno sensitive capabilitylist_cdn_zonesno sensitive capabilitylist_cluster_tiersno sensitive capabilitylist_clustersno sensitive capabilitylist_connection_poolsno sensitive capabilitylist_custom_isosno sensitive capabilitylist_databasesno sensitive capabilitylist_domainsno sensitive capabilitylist_firewall_rulesno sensitive capabilitylist_forwarding_rulesno sensitive capabilitylist_groupsno sensitive capabilitylist_invoice_itemsno sensitive capabilitylist_invoicesno sensitive capabilitylist_ipv4no sensitive capabilitylist_ipv6no sensitive capabilitylist_isosno sensitive capabilitylist_kafka_topicsno sensitive capabilitylist_kubernetes_clustersno sensitive capabilitylist_kubernetes_node_poolsno sensitive capabilitylist_kubernetes_nodesno sensitive capabilitylist_linux_osno sensitive capabilitylist_operating_systemsno sensitive capabilitylist_os_by_familyno sensitive capabilitylist_plansno sensitive capabilitylist_public_isosno sensitive capabilitylist_recordsno sensitive capabilitylist_rulesno sensitive capabilitylist_unattachedno sensitive capabilitylist_usersno sensitive capabilitylist_vc2_plansno sensitive capabilitylist_vhf_plansno sensitive capabilitylist_voc_plansno sensitive capabilitylist_windows_osno sensitive capabilitypromote_read_replicano sensitive capabilitypurge_cdn_zoneno sensitive capabilityrebootno sensitive capabilityreboot_bare_metal_serverno sensitive capabilityrecycle_kubernetes_nodeno sensitive capabilityregenerate_keysno sensitive capabilityreinstallno sensitive capabilityreinstall_bare_metal_serverno sensitive capabilityrestore_from_backupno sensitive capabilityscale_kubernetes_node_poolno sensitive capabilitysearch_applicationsno sensitive capabilitysearch_bare_metal_plansno sensitive capabilitysearch_os_by_nameno sensitive capabilitysetup_cdn_for_websiteno sensitive capabilitysetup_kubernetes_cluster_for_workloadno sensitive capabilitysetup_mysql_databaseno sensitive capabilitysetup_postgresql_databaseno sensitive capabilitysetup_web_server_rulesno sensitive capabilitysetup_websiteno sensitive capabilitystartno sensitive capabilitystart_bare_metal_serverno sensitive capabilitystart_maintenanceno sensitive capabilitystart_migrationno sensitive capabilitystart_version_upgradeno sensitive capabilitystopno sensitive capabilitystop_bare_metal_serverno sensitive capabilitystop_migrationno sensitive capabilityupdateno sensitive capabilityupdate_bare_metal_serverno sensitive capabilityupdate_cdn_zoneno sensitive capabilityupdate_connection_poolno sensitive capabilityupdate_groupno sensitive capabilityupdate_kafka_topicno sensitive capabilityupdate_kubernetes_clusterno sensitive capabilityupdate_kubernetes_node_poolno sensitive capabilityupdate_recordno sensitive capabilityupdate_userno sensitive capabilityupdate_user_access_controlno sensitive capabilityupgrade_kubernetes_clusterno sensitive capabilityvalidate_recordno sensitive capabilityvalidate_s3_accessno sensitive capability
What this scan could not see
- Tools were statically extracted from the published source (200 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v2.4.1 latest |
A 96/100 | 1 | 1.9.0 | 2026-07-23 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan mcp-vultr --online --registry pypiMore in Cloud & DevOps
Security scan results for the Adguard MCP server.
Security scan results for the Aliyun MCP server.
Security scan results for the Aspro MCP server.
Security scan results for the Atlassian MCP server.
Security scan results for the Auroradocs MCP server.
Security scan results for the Awesome Coolify MCP server.