{"name":"io.github.vaaraio/vaara-server","slug":"vaaraio-vaara-server","title":"Vaara MCP Server","description":"Accountable autonomy MCP server: gating, tamper-evident audit for every action","url":"https://mcp.market/server/vaaraio-vaara-server","rating":null,"grade":"B","score":71,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":29,"stars":12,"forks":1,"downloads_week":null,"last_push_at":"2026-09-19T01:52:18.000Z","license":"AGPL-3.0"},"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/vaaraio/vaara","website":"https://vaara.io","version":"1.89.0","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"vaara","version":"1.89.0","runtimeHint":"uvx","transport":{"type":"stdio"},"runtimeArguments":[{"description":"PyPI package providing the vaara-mcp-server entry point","value":"vaara","type":"named","name":"--from"},{"value":"vaara-mcp-server","type":"positional"}],"environmentVariables":[{"description":"Path to the SQLite audit DB. Defaults to vaara_audit.db in the working directory.","name":"VAARA_DB"},{"description":"Optional shared secret. When set, every tool call must include _api_key in its arguments. Leave unset for single-tenant stdio deployments where process isolation is enough.","name":"VAARA_API_KEY"}]}],"tools":[],"scan":{"score":71,"grade":"B","scanned_at":"2026-09-19T04:44:42.263Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T04:44:42.166Z","components":{"code":{"score":13,"max":25,"notes":["224 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"env.dump","severity":"high","component":"code","title":"Whole environment serialized (possible credential exfil)","evidence":"vaara-1.89.0/src/vaara/integrations/_mcp_upstream.py: …derr=sys.stderr, env=env or os.environ.copy(), bufsize=1, tex…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"vaara","version":"1.89.0","found":true,"license":"AGPL-3.0-or-later","dependencyCount":39,"publishedAt":"2026-09-18T17:09:55.785833Z","repositoryUrl":"https://github.com/vaaraio/vaara"}],"repo":{"found":true,"owner":"vaaraio","repo":"vaara","archived":false,"pushedAt":"2026-09-19T01:52:18Z","stars":12,"forks":1,"openIssues":1,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/267591518?v=4","ownerCreatedAt":"2026-03-12T08:19:56Z","license":"AGPL-3.0"},"icon":{"url":"https://vaara.io/favicon.svg","source":"site"},"presence":{"stars":12,"forks":1,"downloadsWeek":null,"license":"AGPL-3.0","lastPushAt":"2026-09-19T01:52:18.000Z","score":29}}}},"grade_history":[],"reviews":[]}