Mmcp.market

mcp-ts-core

by cyanheads·io.github.cyanheads/mcp-ts-core·v0.13.5
No reviews yet

Agent-native TypeScript framework for MCP servers.

C55/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C55/100

full report

Adoption
Established

151 stars33k downloads/wk

Reviews

Write one

Nobody has reviewed mcp-ts-core yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Tools

Tool lists for local packages are only visible after install.

Public scan report

scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it

2 high
  • Code scan406 source files scanned; 406 source files scanned1/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (2)

  • highShell command built from a string (injection risk)exec.shell-concat
    dist/services/mirror/sqlite/handle.js: …rability/throughput balance. handle.exec(`PRAGMA journal_mode = WAL; PRAGMA synchronous = NORMAL; PRAGMA foreign_keys = ON; PRAGMA busy_timeout = ${busyTimeoutMs};`); return handle; } …
  • highShell command built from a string (injection risk)exec.shell-concat
    dist/services/mirror/sqlite/handle.js: …rability/throughput balance. handle.exec(`PRAGMA journal_mode = WAL; PRAGMA synchronous = NORMAL; PRAGMA foreign_keys = ON; PRAGMA busy_timeout = ${busyTimeoutMs};`); return handle; } …
Overall 55/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Grade history

  • 2026-09-19restoreD → Cscore 55: Shell command built from a string (injection risk); Shell command built from a string (injection risk)

Install directly

Runs npx -y @cyanheads/mcp-ts-core on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp-ts-core -- npx -y @cyanheads/mcp-ts-core
Add to Cursor

Alternatives to mcp-ts-core

Same job, ranked by rating then adoption.

See all →
  • IWE
    Markdown knowledge base as agent memory. Runs against the notes directory it is started in.
    A
  • fiori-mcp-server
    SAP Fiori - Model Context Protocol (MCP) server
    A
  • mcp-local-rag
    Easy-to-setup local RAG server with minimal configuration
    A
  • Agent Comms
    Cross-harness communication mesh for LLM agents — rooms, DMs, presence, and visibility over TCP
    A
  • Roast My Design System
    Audit your Design System and serve your Agent the rules that keep AI-written UI on-system.
    A
mcp-ts-core vs IWEmcp-ts-core vs fiori-mcp-servermcp-ts-core vs mcp-local-rag