Gagarin MCP Server

The server is a thin translator to the gagarin API that forwards the caller's own bearer token, stores no credentials, and applies strict schemas with explicit destructive-action annotations, which fits its stated purpose. The main concerns are that the eject and env-bearing tools return or accept plaintext secrets that then enter the model context, and that several source files (api.ts, credentials.ts, server.ts, app.ts and the rest of tools.ts) were truncated or missing, so their auth handling could not be fully verified. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity).

4 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.