Mmcp.market

Is AIfra — temporary static previews MCP server safe?

Probably. Read the findings first.

C55/100grade C

Use with care. Some checks failed or could not be verified.

What to know before installing
  • highWrite-action tools reachable without authentication

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high2 medium1 low
  • Code scan4 source files scanned15/25
  • Live reliabilityremote reachable in 2880ms17/20
  • Tool poisoning6 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 4 write-action tools with no auth3/15
  • Maintenanceno repository listed3/15
  • Maintainer identityno repository or website to verify2/10

Findings (4)

  • highWrite-action tools reachable without authenticationauth.open-write
  • mediumeval / new Function usedexec.eval
    aifra.cjs: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…
  • mediumHeavily hex-escaped string (obfuscation)obf.hex-density
    aifra.cjs: …]^_`abcdefghijklmnopqrstuvwxyz{|}~\u2302\xC7\xFC\xE9\xE2\xE4\xE0\xE5\xE7\xEA\xEB\xE8\xEF\xEE\xEC\xC4\xC5\xC9\xE6\xC6\xF4\xF6\xF2\xFB\xF9\xFF\xD6\xDC\xA2\xA3\xA5\u20A7\u0192\xE1\xED\xF3\xFA\xF1\xD1\xAA…
  • lowNo source repository listedmaint.no-repo
Overall 55/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

AIfra — temporary static previews reviews, tools and install