Scan timing: clone 24.55s · analysis 2.66s · 26.7 MB · GitHub preflight 419ms
https://github.com/openclaw/mcporter
· scanned 2026-05-31 01:22 UTC (5 days, 16 hours ago)
· 10 languages
243 findings (55 legacy + 188 scanner) 11/13 scanners ran 97th percentile · Typescript · medium (20-100K LoC) Scanner says 79 (higher by 10)
Last scanned 5 days, 16 hours ago · v2 · 149 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.
| Component | Sub-score | Weight | Contribution |
|---|---|---|---|
structure_score |
100.0 | 0.15 | 15.00 |
security_score |
100.0 | 0.25 | 25.00 |
testing_score |
100.0 | 0.20 | 20.00 |
documentation_score |
70.0 | 0.15 | 10.50 |
practices_score |
74.0 | 0.15 | 11.10 |
code_quality |
80.0 | 0.10 | 8.00 |
| Overall | 1.00 | 89.6 |
All 1443 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.
| Label | Layer | Status | Path |
|---|---|---|---|
makeTempDir |
software | healthy | tests/config-resolution.test.ts:makeTempDir |
createRuntimeStub |
software | healthy | tests/cli-call-execution.test.ts:createRuntimeStub |
serve |
software | healthy | tests/node-http-fetch.test.ts:serve |
makeDefinition |
software | healthy | tests/oauth-callback.test.ts:makeDefinition |
requestStatus |
software | healthy | tests/oauth-callback.test.ts:requestStatus |
ensureDistBuilt |
software | healthy | tests/cli-force-exit-behavior.integration.test.ts:ensureDis… |
runCli |
software | healthy | tests/cli-force-exit-behavior.integration.test.ts:runCli |
buildResponse |
software | healthy | tests/daemon-client-config-stale.test.ts:buildResponse |
findNonRunningPid |
software | healthy | tests/daemon-client-config-stale.test.ts:findNonRunningPid |
requestInit |
software | healthy | tests/runtime-transport.test.ts:requestInit |
params |
software | healthy | tests/runtime-transport.test.ts:params |
fetchOverride |
software | healthy | tests/runtime-transport.test.ts:fetchOverride |
runtimeFor |
software | healthy | tests/vault-command.test.ts:runtimeFor |
createMockRuntime |
software | healthy | tests/server-proxy.test.ts:createMockRuntime |
createRuntimeDouble |
software | healthy | tests/cli-auth.test.ts:createRuntimeDouble |
ensureDistBuilt |
software | healthy | tests/stdio-servers.integration.test.ts:ensureDistBuilt |
runCli |
software | healthy | tests/stdio-servers.integration.test.ts:runCli |
mkDef |
software | healthy | tests/oauth-persistence.test.ts:mkDef |
cacheTokens |
software | healthy | tests/oauth-persistence.test.ts:cacheTokens |
vault |
software | healthy | tests/oauth-persistence.test.ts:vault |
persisted |
software | healthy | tests/oauth-persistence.test.ts:persisted |
headers |
software | healthy | tests/oauth-persistence.test.ts:headers |
ensureDistBuilt |
software | healthy | tests/generate-cli.test.ts:ensureDistBuilt |
exists |
software | healthy | tests/generate-cli.test.ts:exists |
execOptions |
software | healthy | tests/generate-cli.test.ts:execOptions |
hasBun |
software | healthy | tests/generate-cli.test.ts:hasBun |
appendWithLock |
software | healthy | tests/fs-json.test.ts:appendWithLock |
current |
software | healthy | tests/fs-json.test.ts:current |
sources |
software | healthy | tests/cli-list-verbose-e2e.test.ts:sources |
createRuntime |
software | healthy | tests/cli-resource-command.test.ts:createRuntime |
ensureFakeHomeDir |
software | healthy | tests/config-imports.test.ts:ensureFakeHomeDir |
httpDefinition |
software | healthy | tests/tool-filters.test.ts:httpDefinition |
writeConfig |
software | healthy | tests/tool-filters.test.ts:writeConfig |
buildResponse |
software | healthy | tests/daemon-client-timeout.test.ts:buildResponse |
writeFreshMetadata |
software | healthy | tests/daemon-client-timeout.test.ts:writeFreshMetadata |
createRuntimeStub |
software | healthy | tests/ephemeral-target.test.ts:createRuntimeStub |
detect |
software | healthy | tests/chrome-devtools-compat.test.ts:detect |
createRuntimeStub |
software | healthy | tests/tool-cache.test.ts:createRuntimeStub |
captureLog |
software | healthy | tests/cli-config-command.test.ts:captureLog |
buildOptions |
software | healthy | tests/cli-config-command.test.ts:buildOptions |
startMockDaemon |
software | healthy | tests/daemon-client-lifecycle.test.ts:startMockDaemon |
startStatusServer |
software | healthy | tests/daemon-client-lifecycle.test.ts:startStatusServer |
closeServer |
software | healthy | tests/daemon-client-lifecycle.test.ts:closeServer |
findNonRunningPid |
software | healthy | tests/daemon-client-lifecycle.test.ts:findNonRunningPid |
buildServers |
software | healthy | tests/config-shared.test.ts:buildServers |
createRuntimeDouble |
software | healthy | tests/daemon-host.test.ts:createRuntimeDouble |
createManagedServers |
software | healthy | tests/daemon-host.test.ts:createManagedServers |
pnpmArgs |
software | healthy | tests/cli-generate-cli.integration.test.ts:pnpmArgs |
ensureDistBuilt |
software | healthy | tests/cli-generate-cli.integration.test.ts:ensureDistBuilt |
hasBun |
software | healthy | tests/cli-generate-cli.integration.test.ts:hasBun |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
tsconfig.build.json |
software | healthy | tsconfig.build.json |
README.md |
software | healthy | README.md |
mcporter.schema.json |
software | healthy | mcporter.schema.json |
pnpm-lock.yaml |
software | healthy | pnpm-lock.yaml |
package.json |
software | healthy | package.json |
.oxfmtrc.json |
software | healthy | .oxfmtrc.json |
.oxlintrc.json |
software | healthy | .oxlintrc.json |
.crabbox.yaml |
software | healthy | .crabbox.yaml |
pnpm-workspace.yaml |
software | healthy | pnpm-workspace.yaml |
tsconfig.json |
software | healthy | tsconfig.json |
VISION.md |
software | healthy | VISION.md |
AGENTS.md |
software | healthy | AGENTS.md |
CHANGELOG.md |
software | healthy | CHANGELOG.md |
vitest.config.ts |
software | warning | vitest.config.ts |
mcporter.json |
software | healthy | config/mcporter.json |
config-resolution.test.ts |
software | healthy | tests/config-resolution.test.ts |
cli-call-execution.test.ts |
software | healthy | tests/cli-call-execution.test.ts |
cli-call-help.test.ts |
software | warning | tests/cli-call-help.test.ts |
config-add-persist.test.ts |
software | warning | tests/config-add-persist.test.ts |
node-http-fetch.test.ts |
software | healthy | tests/node-http-fetch.test.ts |
result-utils.test.ts |
software | warning | tests/result-utils.test.ts |
cli-oauth-timeout-flag.test.ts |
software | warning | tests/cli-oauth-timeout-flag.test.ts |
config-remove.test.ts |
software | warning | tests/config-remove.test.ts |
cli-config-fallback.test.ts |
software | warning | tests/cli-config-fallback.test.ts |
cli-generate-artifacts.test.ts |
software | warning | tests/cli-generate-artifacts.test.ts |
config-layered.test.ts |
software | warning | tests/config-layered.test.ts |
oauth-callback.test.ts |
software | healthy | tests/oauth-callback.test.ts |
config-render.test.ts |
software | warning | tests/config-render.test.ts |
generator-flag-parser.test.ts |
software | warning | tests/generator-flag-parser.test.ts |
runtime-error-reset.test.ts |
software | warning | tests/runtime-error-reset.test.ts |
cli-force-exit-behavior.integration.test.ts |
software | healthy | tests/cli-force-exit-behavior.integration.test.ts |
cli-auth-help.test.ts |
software | warning | tests/cli-auth-help.test.ts |
paths.test.ts |
software | warning | tests/paths.test.ts |
config-import-dedupe.test.ts |
software | warning | tests/config-import-dedupe.test.ts |
daemon-client-config-stale.test.ts |
software | healthy | tests/daemon-client-config-stale.test.ts |
runtime-transport.test.ts |
software | healthy | tests/runtime-transport.test.ts |
config-add-sse.test.ts |
software | warning | tests/config-add-sse.test.ts |
config-doctor.test.ts |
software | warning | tests/config-doctor.test.ts |
vault-command.test.ts |
software | healthy | tests/vault-command.test.ts |
runtime-oauth-connect.test.ts |
software | warning | tests/runtime-oauth-connect.test.ts |
call-arguments.test.ts |
software | warning | tests/call-arguments.test.ts |
server-proxy.test.ts |
software | healthy | tests/server-proxy.test.ts |
cli-auth.test.ts |
software | healthy | tests/cli-auth.test.ts |
error-classifier.test.ts |
software | warning | tests/error-classifier.test.ts |
config-imports-unit.test.ts |
software | warning | tests/config-imports-unit.test.ts |
generate-definition.test.ts |
software | warning | tests/generate-definition.test.ts |
keep-alive-runtime.test.ts |
software | healthy | tests/keep-alive-runtime.test.ts |
config-sources.test.ts |
software | warning | tests/config-sources.test.ts |
stdio-servers.integration.test.ts |
software | healthy | tests/stdio-servers.integration.test.ts |
oauth-persistence.test.ts |
software | healthy | tests/oauth-persistence.test.ts |
Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.
| Label | Layer | Status | Path |
|---|---|---|---|
auth::src/cli/config/help.ts |
security | healthy | src/cli/config/help.ts |
auth::tests/runtime-oauth-timeout.test.ts |
security | healthy | tests/runtime-oauth-timeout.test.ts |
auth::tests/config-render.test.ts |
security | healthy | tests/config-render.test.ts |
auth::tests/runtime-compose.test.ts |
security | healthy | tests/runtime-compose.test.ts |
auth::tests/cli-list-classification.test.ts |
security | healthy | tests/cli-list-classification.test.ts |
auth::tests/config-normalize.test.ts |
security | healthy | tests/config-normalize.test.ts |
auth::src/oauth.ts |
security | healthy | src/oauth.ts |
auth::tests/fixtures/mcporter.json |
security | healthy | tests/fixtures/mcporter.json |
auth::tests/daemon-host.test.ts |
security | healthy | tests/daemon-host.test.ts |
auth::src/cli/auth-command.ts |
security | healthy | src/cli/auth-command.ts |
auth::tests/config-add-flags.test.ts |
security | healthy | tests/config-add-flags.test.ts |
auth::src/runtime.ts |
security | healthy | src/runtime.ts |
auth::src/oauth-vault.ts |
security | healthy | src/oauth-vault.ts |
auth::tests/runtime-oauth-detection.test.ts |
security | healthy | tests/runtime-oauth-detection.test.ts |
auth::tests/oauth-callback.test.ts |
security | healthy | tests/oauth-callback.test.ts |
auth::tests/vault-command.test.ts |
security | healthy | tests/vault-command.test.ts |
auth::src/cli/vault-command.ts |
security | healthy | src/cli/vault-command.ts |
auth::mcporter.schema.json |
security | healthy | mcporter.schema.json |
auth::config/mcporter.json |
security | healthy | config/mcporter.json |
auth::tests/oauth-open-external.test.ts |
security | healthy | tests/oauth-open-external.test.ts |
auth::tests/tool-cache.test.ts |
security | healthy | tests/tool-cache.test.ts |
auth::src/cli/ephemeral-target.ts |
security | healthy | src/cli/ephemeral-target.ts |
auth::tests/runtime-oauth-connect.test.ts |
security | healthy | tests/runtime-oauth-connect.test.ts |
auth::src/config-schema.ts |
security | healthy | src/config-schema.ts |
auth::tests/cli-config-command.test.ts |
security | healthy | tests/cli-config-command.test.ts |
auth::src/cli/cli-factory.ts |
security | healthy | src/cli/cli-factory.ts |
auth::src/config-normalize.ts |
security | healthy | src/config-normalize.ts |
auth::tests/runtime-oauth-utils.test.ts |
security | healthy | tests/runtime-oauth-utils.test.ts |
auth::tests/helpers/runtime-test-helpers.ts |
security | healthy | tests/helpers/runtime-test-helpers.ts |
auth::src/oauth-persistence.ts |
security | healthy | src/oauth-persistence.ts |
auth::tests/cli-regenerate.test.ts |
security | healthy | tests/cli-regenerate.test.ts |
auth::src/cli/config/auth.ts |
security | healthy | src/cli/config/auth.ts |
auth::src/runtime/transport.ts |
security | healthy | src/runtime/transport.ts |
auth::src/cli/help-output.ts |
security | healthy | src/cli/help-output.ts |
auth::tests/oauth-persistence.test.ts |
security | healthy | tests/oauth-persistence.test.ts |
auth::src/oauth-client-info.ts |
security | healthy | src/oauth-client-info.ts |
auth::tests/cli-auth.test.ts |
security | healthy | tests/cli-auth.test.ts |
auth::src/runtime-oauth-support.ts |
security | healthy | src/runtime-oauth-support.ts |
auth::tests/config-doctor.test.ts |
security | healthy | tests/config-doctor.test.ts |
auth::src/runtime/oauth.ts |
security | healthy | src/runtime/oauth.ts |
auth::tests/cli-oauth-timeout-flag.test.ts |
security | healthy | tests/cli-oauth-timeout-flag.test.ts |
auth::src/cli/config/add.ts |
security | healthy | src/cli/config/add.ts |
auth::tests/oauth-session.test.ts |
security | healthy | tests/oauth-session.test.ts |
auth::tests/runtime-transport.test.ts |
security | healthy | tests/runtime-transport.test.ts |
| Label | Layer | Status | Path |
|---|---|---|---|
config |
software | healthy | config |
tests |
software | healthy | tests |
live |
software | healthy | tests/live |
fixtures |
software | healthy | tests/fixtures |
imports |
software | healthy | tests/fixtures/imports |
Library |
software | healthy | tests/fixtures/imports/Library |
Application Support |
software | healthy | tests/fixtures/imports/Library/Application Support |
Code |
software | healthy | tests/fixtures/imports/Library/Application Support/Code |
User |
software | healthy | tests/fixtures/imports/Library/Application Support/Code/User |
config |
software | healthy | tests/fixtures/imports/config |
home |
software | healthy | tests/fixtures/imports/home |
Library |
software | healthy | tests/fixtures/imports/home/Library |
Application Support |
software | healthy | tests/fixtures/imports/home/Library/Application Support |
Code |
software | healthy | tests/fixtures/imports/home/Library/Application Support/Code |
User |
software | healthy | tests/fixtures/imports/home/Library/Application Support/Cod… |
helpers |
software | healthy | tests/helpers |
docs |
software | healthy | docs |
scripts |
software | healthy | scripts |
examples |
software | healthy | examples |
.github |
software | healthy | .github |
workflows |
software | healthy | .github/workflows |
src |
software | healthy | src |
config |
software | healthy | src/config |
imports |
software | healthy | src/config/imports |
cli |
software | healthy | src/cli |
generate |
software | healthy | src/cli/generate |
config |
software | healthy | src/cli/config |
daemon |
software | healthy | src/daemon |
runtime |
software | healthy | src/runtime |
| Label | Layer | Status | Path |
|---|---|---|---|
MockSocket |
software | healthy | tests/daemon-client-config-stale.test.ts:MockSocket |
FakeRuntime |
software | healthy | tests/keep-alive-runtime.test.ts:FakeRuntime |
MockSocket |
software | healthy | tests/daemon-client-timeout.test.ts:MockSocket |
MockClient |
software | healthy | tests/runtime-compose.test.ts:MockClient |
MockStreamableHTTPClientTransport |
software | healthy | tests/runtime-compose.test.ts:MockStreamableHTTPClientTrans… |
MockSSEClientTransport |
software | healthy | tests/runtime-compose.test.ts:MockSSEClientTransport |
MockStdioClientTransport |
software | healthy | tests/runtime-compose.test.ts:MockStdioClientTransport |
MockUnauthorizedError |
software | healthy | tests/runtime-compose.test.ts:MockUnauthorizedError |
MockTransport |
software | healthy | tests/helpers/runtime-test-helpers.ts:MockTransport |
PersistentOAuthClientProvider |
software | healthy | src/oauth.ts:PersistentOAuthClientProvider |
McpRuntime |
software | healthy | src/runtime.ts:McpRuntime |
DirectoryPersistence |
software | healthy | src/oauth-persistence.ts:DirectoryPersistence |
VaultPersistence |
software | healthy | src/oauth-persistence.ts:VaultPersistence |
CompositePersistence |
software | healthy | src/oauth-persistence.ts:CompositePersistence |
CliUsageError |
software | healthy | src/cli/errors.ts:CliUsageError |
KeepAliveRuntime |
software | healthy | src/daemon/runtime-wrapper.ts:KeepAliveRuntime |
DaemonClient |
software | healthy | src/daemon/client.ts:DaemonClient |
OAuthTimeoutError |
software | healthy | src/runtime/oauth.ts:OAuthTimeoutError |
OAuthAuthorizationNotStartedError |
software | healthy | src/runtime/oauth.ts:OAuthAuthorizationNotStartedError |
| Label | Layer | Status | Path |
|---|---|---|---|
/tmp/source.json |
frontend | healthy | tests/config-render.test.ts |
/tmp/mcporter.json |
frontend | healthy | tests/vault-command.test.ts |
/tmp |
frontend | healthy | tests/keep-alive-runtime.test.ts |
/imports/cursor.json |
frontend | healthy | tests/config-list.test.ts |
/tmp/import.json |
frontend | healthy | tests/config-list-text-footer.test.ts |
/home/user/.cursor/mcp.json |
frontend | healthy | tests/list-format.test.ts |
/project/config/mcporter.json |
frontend | healthy | tests/list-format.test.ts |
/tmp/config.json |
frontend | healthy | tests/runtime-oauth-detection.test.ts |
/tmp/config/mcporter.json |
frontend | healthy | tests/cli-regenerate.test.ts |
/home/.cursor/mcp.json |
frontend | healthy | tests/list-output.test.ts |
| Label | Layer | Status | Path |
|---|---|---|---|
gha::crabbox-hydrate |
cicd | healthy | .github/workflows/crabbox-hydrate.yml |
gha::update-homebrew-tap |
cicd | healthy | .github/workflows/update-homebrew-tap.yml |
gha::ci |
cicd | healthy | .github/workflows/ci.yml |
gha::pages |
cicd | healthy | .github/workflows/pages.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
hydrate |
cicd | healthy | .github/workflows/crabbox-hydrate.yml |
update-homebrew-tap |
cicd | healthy | .github/workflows/update-homebrew-tap.yml |
build |
cicd | healthy | .github/workflows/ci.yml |
deploy |
cicd | healthy | .github/workflows/pages.yml |
| Label | Layer | Status | Path |
|---|---|---|---|
port:2222 |
network | healthy | .crabbox.yaml |
port:3000 |
network | healthy | tests/cli-serve-runtime.test.ts |
port:3210 |
network | healthy | tests/cli-serve-command.test.ts |
| Label | Layer | Status | Path |
|---|---|---|---|
PNPM_VERSION |
cicd | healthy | — |
HOMEBREW_TAP_TOKEN |
cicd | healthy | — |
NODE_VERSION |
cicd | healthy | — |
| Label | Layer | Status | Path |
|---|---|---|---|
repobility-clone-bb776li6 |
software | healthy | /tmp/repobility-clone-bb776li6 |
| Label | Layer | Status | Path |
|---|---|---|---|
127.0.0.1 |
network | healthy | config/mcporter.json |
| Label | Layer | Status | Path |
|---|---|---|---|
vps::aws |
hardware | healthy | .crabbox.yaml |
This page is publicly accessible at:
https://repobility.com/scan/eec2b134-807a-40f4-9651-147730667e94/
To check status programmatically (no auth required):
curl -s https://repobility.com/api/v1/public/scan/eec2b134-807a-40f4-9651-147730667e94/Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.