Mmcp.market

Is uploads.sh MCP server safe?

Yes, with the usual care.

A92/100grade A

Passed every safety check we run. Maintained, authenticated, reachable, clean scan.

No critical or high findings in the latest scan.

Public scan report

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

1 medium
  • Code scan159 source files scanned20/25
  • Live reliabilityremote reachable in 416ms (auth required)20/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityOAuth resource metadata advertised on 40115/15
  • Maintenancelast push 2 days ago15/15
  • Maintainer identitynamespace and repository owner differ; GitHub account older than a year; website matches verified namespace8/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    dist/screenshot-local.js: … Hide overlays first, then run any user eval (which may depend on, or // delib…
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what uploads.sh does

  • Coolftp
    Deploy a site to its SFTP/FTP host from a coding agent. Changed files only, undo, live checks.
    A
  • GitHub
    Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.
    A
  • okffs
    MCP server connecting Claude Code to GitHub for an issue to branch to PR to close workflow.
    A

uploads.sh reviews, tools and install