MCP Fullstack

Unverified

REPOjacobfv/mcp-fullstack

FRisk gradecritical blast radius

Catalogue entry updated 2 days ago

Auth postureNot probedno remote endpoint probed yet

Tools666 Destructive · 14 Execute · 13 Write · 33 Read

Worst categoryDestructivegrade tracks the peak, not the average

Capability mix

Destructive 6Execute 14Write 13Read 33

What it can reach

Ingests untrusted inputTouches secretsReaches networkRuns codeTouches filesChanges permissionsSends external commsPersistsDeletes dataMoves money

Exfiltration pathReads content an attacker can plant and can send data outward — a prompt-injection-to-exfiltration route.

Tools 66

messages.delete_messageDestructiveHigh render.deployment_cancelDestructiveHigh secrets.deleteDestructiveCritical supabase.storage_deleteDestructiveHigh vercel.deployment_cancelDestructiveHigh

View all 66 tools

vercel.domain_removeDestructiveHigh browser.end_sessionExecuteMedium browser.start_sessionExecuteHigh db.start_connectionExecuteHigh render.deployExecuteHigh render.redeployExecuteHigh render.scaleExecuteHigh supabase.functions_invokeExecuteHigh supabase.restExecuteHigh supabase.rpcExecuteHigh supabase.sqlExecuteCritical tracking.funnels_runExecuteHigh vercel.deployExecuteHigh vercel.promoteExecuteHigh vercel.redeployExecuteHigh db.end_connectionWriteMedium messages.create_threadWriteLow messages.mark_readWriteLow messages.post_messageWriteMedium messages.update_messageWriteLow render.env_setWriteHigh secrets.putWriteHigh supabase.storage_putWriteHigh tracking.captureWriteLow tracking.identifyWriteMedium tracking.pageviewWriteLow vercel.domain_addWriteMedium vercel.env_setWriteHigh messages.get_threadReadLow messages.inboxReadLow messages.list_threadsReadLow render.deployment_getReadLow render.deployments_listReadLow render.env_listReadMedium render.logsReadLow render.service_getReadLow render.service_statusReadLow render.services_listReadLow search.crawlReadLow search.extractReadLow search.fetchReadLow search.webReadLow secrets.getReadHigh secrets.listReadHigh supabase.auth_adminReadLow supabase.healthReadLow supabase.projects_infoReadLow supabase.storage_get_signed_urlReadMedium tracking.ask_question_about_recordingReadLow tracking.feature_flag_evalReadLow tracking.feature_flags_listReadLow tracking.recording_framesReadLow tracking.recordings_listReadLow tracking.sessions_listReadLow vercel.deployment_getReadLow vercel.deployments_listReadLow vercel.domains_listReadLow vercel.env_listReadLow vercel.logsReadLow vercel.project_getReadLow vercel.projects_listReadLow

Change history

No changes recorded since first scan. Watched servers surface a diff within the hour.

Recommended policy

messages.delete_messagedeny

browser.end_sessionrequire approval

db.end_connectionrate limit

Read-only toolsallow

Full policy breakdown with enforcement rules →