{"name":"io.github.mockzilla/mockzilla-mcp","slug":"mockzilla-mcp","title":null,"description":"Mock OpenAPI specs locally, or log in to deploy hosted mocks on mockzilla.org from your MCP client.","url":"https://mcp.market/server/mockzilla-mcp","rating":null,"grade":"C","score":63,"certified":false,"status":"active","category":"devtools","tags":["devtools"],"presence":{"score":41,"stars":5,"forks":0,"downloads_week":1321,"last_push_at":"2026-09-18T23:20:41.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/mockzilla/mockzilla-mcp","website":"https://mockzilla.org","version":"0.2.26","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@mockzilla/mcp","version":"0.2.26","transport":{"type":"stdio"},"environmentVariables":[{"description":"API key (mz_*) to use instead of logging in with the login tool, for machines without a browser. Leave unset to log in from your agent.","isSecret":true,"name":"MOCKZILLA_TOKEN"},{"description":"Override the hosted MCP endpoint (staging or local development). Defaults to https://platform.mockzilla.org/mcp.","name":"MOCKZILLA_MCP_URL"},{"description":"Preferred port for the local managed mock server. Defaults to 2200; falls back to a kernel-picked port if busy.","name":"MOCKZILLA_MANAGED_PORT"}]}],"tools":[],"scan":{"score":63,"grade":"C","scanned_at":"2026-09-19T21:32:22.818Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-19T21:32:22.807Z","components":{"code":{"score":13,"max":25,"notes":["16 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"lib/github.js: …tion hasWorkflow(repo) { return await exec( `gh api ${shellEscape(`repos/${repo}/contents/${WO…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@mockzilla/mcp","version":"0.2.26","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":0,"publishedAt":"2026-09-18T23:23:01.060Z","repositoryUrl":"git+https://github.com/mockzilla/mockzilla-mcp.git","weeklyDownloads":1321}],"repo":{"found":true,"owner":"mockzilla","repo":"mockzilla-mcp","archived":false,"pushedAt":"2026-09-18T23:20:41Z","stars":5,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/270762911?v=4","ownerCreatedAt":"2026-03-24T19:58:21Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/270762911?v=4&s=128","source":"registry","width":128,"height":128},"presence":{"stars":5,"forks":0,"downloadsWeek":1321,"license":"MIT","lastPushAt":"2026-09-18T23:20:41.000Z","score":41}}}},"grade_history":[{"kind":"restore","fromGrade":"D","toGrade":"C","reason":"score 63: Shell command built from a string (injection risk)","createdAt":"2026-09-19T00:26:13.044Z"}],"reviews":[]}