@grackle-ai/mcp Security Advisories - Npm | Ecosyste.ms: Advisories

@grackle-ai/mcp

MCP (Model Context Protocol) server for Grackle — translates MCP tool calls to ConnectRPC

View on github.com · View on npmjs.org

Security Advisories for @grackle-ai/mcp in npm

High

about 2 months ago

Grackle: Fail-open authorization in the MCP tool layer lets scoped agents perform cross-task and cross-session mutations (IDOR) GSA_kwCzR0hTQS1mOWZmLTV4MzUtN2dmd84ABaFa

npm @grackle-ai/auth, @grackle-ai/plugin-core, @grackle-ai/mcp

High

5 months ago

@grackle-ai/mcp has a workspace authorization bypass in its knowledge_search MCP tool GSA_kwCzR0hTQS02NDdoLXA4MjQtOTl3N84ABUMK

npm @grackle-ai/mcp

Filter by Severity