Close Open Privacy Scan
App Privacy Score
100
/100
Low privacy risk
Low risk · 51 finding(s)
Based on: 1 first-party package(s) · 5/5 deps analyzed
Dependency score: 82 (Low risk)
bar_chart Score Breakdown
No category deductions recorded.
list Scan Summary
0 high
0 medium
51 low
First-party packages:
0
Dependency packages:
4
Ecosystem:
npm
swap_horiz External domains
github.comjson-schema.org
</> Dependencies
@modelcontextprotocol/sdk
npm dependencyexpand_more 38 low-confidence finding(s)
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 22 locations
low
egress
tooling
Excluded from app score
unknown
#afcc999880ea90c7
capability detected · no path traced
—
Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:16
const response = await fetch(url);Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low
env_fs
tooling
Excluded from app score
unknown
#1754732fe9ce864e
capability detected · no path traced
—
Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:77
writeFileSync(outputPath, fullContent, 'utf-8');Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.