⚠️ This snapshot is over 30 days old — treat the grade as stale until the next refresh. Re-scan locally to verify.
Trust Card · Static snapshot
PrefectHQ__prefect-mcp-server U
Ungraded — insufficient static coverage · 1 findings (1 critical) · scope minimal · Not ranked: insufficient static coverage.
Scanned 2026-10-19 · engine v0.1.3 (8 regex rules, OWASP-mapped) · upstream PrefectHQ/prefect-mcp-server @ 48efd28 (2026-09-23)
Score breakdown
No numeric score or breakdown: insufficient static coverage. Findings remain actionable; absence of findings is not evidence of safety.
Insufficient static coverage: Unsupported source present; Symlinks or special files were not examined. Findings remain actionable; absence of findings is not evidence of safety.
Coverage: limited
Static-heuristic scope: 101 analyzed / 126 discovered files; 6 unsupported source files; 27 excluded; 0 read errors; 0 truncations. This is not a semantic coverage percentage or proof of safety.
- Unsupported source present
- Symlinks or special files were not examined
- Coverage describes the files read and regex rules applied, not semantic, runtime, or dependency coverage.
- Supported code is JavaScript, TypeScript, and Python; JSON/YAML receive only the credential rule.
- Skill instructions and other prose are not code-analyzed; declared controls are not verified enforcement.
- Ignored directories, declarations, and non-implementation assets are outside rule scope.
File coverage, applied rules and scan limits
{
"mode": "static-heuristic",
"status": "limited",
"reasons": [
"Unsupported source present",
"Symlinks or special files were not examined"
],
"limitations": [
"Coverage describes the files read and regex rules applied, not semantic, runtime, or dependency coverage.",
"Supported code is JavaScript, TypeScript, and Python; JSON/YAML receive only the credential rule.",
"Skill instructions and other prose are not code-analyzed; declared controls are not verified enforcement.",
"Ignored directories, declarations, and non-implementation assets are outside rule scope."
],
"discoveredFiles": 126,
"analyzedFiles": [
{
"path": ".agents/plugins/marketplace.json",
"scope": "data",
"bytes": 357,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".claude-plugin/marketplace.json",
"scope": "data",
"bytes": 426,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".claude-plugin/plugin.json",
"scope": "data",
"bytes": 625,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".github/workflows/ci.yml",
"scope": "data",
"bytes": 5419,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".github/workflows/deploy-ingestion-workflow.yml",
"scope": "data",
"bytes": 721,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".github/workflows/publish.yml",
"scope": "data",
"bytes": 1997,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".openai/chatgpt-app-submission.json",
"scope": "data",
"bytes": 12443,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": ".pre-commit-config.yaml",
"scope": "data",
"bytes": 1071,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "evals/__init__.py",
"scope": "code",
"bytes": 0,
"nonEmpty": false,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/_tools/__init__.py",
"scope": "code",
"bytes": 177,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/_tools/read_file.py",
"scope": "code",
"bytes": 2298,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/_tools/run_shell_command.py",
"scope": "code",
"bytes": 1698,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/_tools/spy.py",
"scope": "code",
"bytes": 11614,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/_tools/write_file.py",
"scope": "code",
"bytes": 3158,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/automations/test_create_proactive.py",
"scope": "code",
"bytes": 2542,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/automations/test_create_reactive.py",
"scope": "code",
"bytes": 2867,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/automations/test_debug_not_firing.py",
"scope": "code",
"bytes": 2949,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/conftest.py",
"scope": "code",
"bytes": 8090,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/docs/test_latest_release_notes.py",
"scope": "code",
"bytes": 3193,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/late_runs/conftest.py",
"scope": "code",
"bytes": 2660,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/late_runs/test_cancel_late_runs.py",
"scope": "code",
"bytes": 3806,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/late_runs/test_deployment_concurrency.py",
"scope": "code",
"bytes": 5096,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/late_runs/test_no_late_runs.py",
"scope": "code",
"bytes": 4492,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/late_runs/test_tag_concurrency.py",
"scope": "code",
"bytes": 5136,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/late_runs/test_unhealthy_work_pool.py",
"scope": "code",
"bytes": 3326,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/late_runs/test_work_pool_concurrency.py",
"scope": "code",
"bytes": 4830,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/late_runs/test_work_queue_concurrency.py",
"scope": "code",
"bytes": 4685,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/rate_limits/conftest.py",
"scope": "code",
"bytes": 17485,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/rate_limits/test_cloud_correlate_logs.py",
"scope": "code",
"bytes": 3240,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/rate_limits/test_cloud_direct.py",
"scope": "code",
"bytes": 2127,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/rate_limits/test_cloud_no_throttling.py",
"scope": "code",
"bytes": 2147,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/rate_limits/test_cloud_oauth_cross_workspace.py",
"scope": "code",
"bytes": 7653,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/rate_limits/test_cloud_oauth_single_workspace.py",
"scope": "code",
"bytes": 2422,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/test_flow_run_failure_reason.py",
"scope": "code",
"bytes": 1575,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/test_last_failing_flow_run.py",
"scope": "code",
"bytes": 1262,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/test_list_flows.py",
"scope": "code",
"bytes": 1362,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "evals/test_trigger_deployment_run.py",
"scope": "code",
"bytes": 2730,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/docs_mcp_server/docs_mcp_server/__init__.py",
"scope": "code",
"bytes": 0,
"nonEmpty": false,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/docs_mcp_server/docs_mcp_server/__main__.py",
"scope": "code",
"bytes": 189,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/docs_mcp_server/docs_mcp_server/_release_notes.py",
"scope": "code",
"bytes": 2944,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/docs_mcp_server/docs_mcp_server/_server.py",
"scope": "code",
"bytes": 8838,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/docs_mcp_server/docs_mcp_server/_settings.py",
"scope": "code",
"bytes": 2384,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/ingestion_pipeline/main.py",
"scope": "code",
"bytes": 13760,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "packages/ingestion_pipeline/prefect.yaml",
"scope": "data",
"bytes": 769,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "plugins/prefect/.codex-plugin/plugin.json",
"scope": "data",
"bytes": 1557,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "plugins/prefect/.mcp.json",
"scope": "data",
"bytes": 118,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "server.json",
"scope": "data",
"bytes": 611,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "src/prefect_mcp_server/__init__.py",
"scope": "code",
"bytes": 116,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/__main__.py",
"scope": "code",
"bytes": 165,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/__init__.py",
"scope": "code",
"bytes": 1371,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/automations.py",
"scope": "code",
"bytes": 7781,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/client.py",
"scope": "code",
"bytes": 6258,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/dashboard.py",
"scope": "code",
"bytes": 8029,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/deployments.py",
"scope": "code",
"bytes": 12463,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/events.py",
"scope": "code",
"bytes": 5269,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/execution_plans.py",
"scope": "code",
"bytes": 1957,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/flow_runs.py",
"scope": "code",
"bytes": 16206,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/flows.py",
"scope": "code",
"bytes": 2413,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/identity.py",
"scope": "code",
"bytes": 6677,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/rate_limits.py",
"scope": "code",
"bytes": 9462,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/task_runs.py",
"scope": "code",
"bytes": 8361,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/utils.py",
"scope": "code",
"bytes": 664,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/_prefect_client/work_pools.py",
"scope": "code",
"bytes": 8599,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/cloud.py",
"scope": "code",
"bytes": 156,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/cloud_oauth.py",
"scope": "code",
"bytes": 13640,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/cloud_token.py",
"scope": "code",
"bytes": 1168,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/execution_plans.py",
"scope": "code",
"bytes": 15210,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/middleware.py",
"scope": "code",
"bytes": 4280,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/server.py",
"scope": "code",
"bytes": 23499,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/settings.py",
"scope": "code",
"bytes": 3355,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "src/prefect_mcp_server/types.py",
"scope": "code",
"bytes": 16467,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/__init__.py",
"scope": "code",
"bytes": 36,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/conftest.py",
"scope": "code",
"bytes": 1441,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/docs_mcp/__init__.py",
"scope": "code",
"bytes": 0,
"nonEmpty": false,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/docs_mcp/cassettes/test_server/test_search_prefect_successful_query.yaml",
"scope": "data",
"bytes": 143376,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "tests/docs_mcp/test_release_notes.py",
"scope": "code",
"bytes": 2567,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/docs_mcp/test_server.py",
"scope": "code",
"bytes": 4715,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/docs_mcp/test_settings.py",
"scope": "code",
"bytes": 6868,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/fixtures/execution_plan_authoring_loop_reference.json",
"scope": "data",
"bytes": 840,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-002"
]
},
{
"path": "tests/test_automation_schema.py",
"scope": "code",
"bytes": 2516,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_cloud_oauth.py",
"scope": "code",
"bytes": 17293,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_cloud_token.py",
"scope": "code",
"bytes": 1060,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_collection_truncation.py",
"scope": "code",
"bytes": 3470,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_deployment_diagnostics.py",
"scope": "code",
"bytes": 1521,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_docs_proxy.py",
"scope": "code",
"bytes": 1406,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_eval_tool_spy.py",
"scope": "code",
"bytes": 2026,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_events.py",
"scope": "code",
"bytes": 1726,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_execution_plans.py",
"scope": "code",
"bytes": 42123,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_filter_validation.py",
"scope": "code",
"bytes": 2202,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_flows.py",
"scope": "code",
"bytes": 3792,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_header_auth.py",
"scope": "code",
"bytes": 8766,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_identity.py",
"scope": "code",
"bytes": 8611,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_inspection_integration.py",
"scope": "code",
"bytes": 4962,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_inspection_tools.py",
"scope": "code",
"bytes": 6330,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_log_validation.py",
"scope": "code",
"bytes": 925,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_packaging.py",
"scope": "code",
"bytes": 204,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_rate_limits.py",
"scope": "code",
"bytes": 33586,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_server.py",
"scope": "code",
"bytes": 11756,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_settings.py",
"scope": "code",
"bytes": 1533,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_types.py",
"scope": "code",
"bytes": 1445,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
},
{
"path": "tests/test_work_pool_diagnostics.py",
"scope": "code",
"bytes": 2356,
"nonEmpty": true,
"ruleIds": [
"AT-SEC-001",
"AT-SEC-002",
"AT-SEC-003",
"AT-SEC-004",
"AT-SEC-005",
"AT-SEC-006",
"AT-SEC-007",
"AT-COMP-001"
]
}
],
"unsupportedSourceFiles": [
".env.example",
"Dockerfile.test",
"justfile",
"packages/docs_mcp_server/docs_mcp_server/py.typed",
"src/prefect_mcp_server/py.typed",
"tests/docs_mcp/__snapshots__/test_server.ambr"
],
"excludedFiles": [
{
"path": ".claude/skills/implement-eval",
"reason": "non-regular-file"
},
{
"path": ".git",
"reason": "ignored-directory"
},
{
"path": ".agents/skills/implement-eval/SKILL.md",
"reason": "skill-instructions-not-code-analyzed"
},
{
"path": ".env.example",
"reason": "unsupported-implementation"
},
{
"path": ".gitignore",
"reason": "outside-rule-scope"
},
{
"path": "CLAUDE.md",
"reason": "outside-rule-scope"
},
{
"path": "Dockerfile.test",
"reason": "unsupported-implementation"
},
{
"path": "LICENSE",
"reason": "outside-rule-scope"
},
{
"path": "README.md",
"reason": "outside-rule-scope"
},
{
"path": "SECURITY.md",
"reason": "outside-rule-scope"
},
{
"path": "evals/DEBUGGING.md",
"reason": "outside-rule-scope"
},
{
"path": "evals/README.md",
"reason": "outside-rule-scope"
},
{
"path": "justfile",
"reason": "unsupported-implementation"
},
{
"path": "packages/docs_mcp_server/.python-version",
"reason": "outside-rule-scope"
},
{
"path": "packages/docs_mcp_server/README.md",
"reason": "outside-rule-scope"
},
{
"path": "packages/docs_mcp_server/docs_mcp_server/py.typed",
"reason": "unsupported-implementation"
},
{
"path": "packages/docs_mcp_server/pyproject.toml",
"reason": "outside-rule-scope"
},
{
"path": "packages/ingestion_pipeline/.python-version",
"reason": "outside-rule-scope"
},
{
"path": "packages/ingestion_pipeline/README.md",
"reason": "outside-rule-scope"
},
{
"path": "packages/ingestion_pipeline/pyproject.toml",
"reason": "outside-rule-scope"
},
{
"path": "plugins/prefect/assets/logo-dark.svg",
"reason": "outside-rule-scope"
},
{
"path": "plugins/prefect/assets/logo.svg",
"reason": "outside-rule-scope"
},
{
"path": "plugins/prefect/skills/workflows/SKILL.md",
"reason": "skill-instructions-not-code-analyzed"
},
{
"path": "pyproject.toml",
"reason": "outside-rule-scope"
},
{
"path": "src/prefect_mcp_server/py.typed",
"reason": "unsupported-implementation"
},
{
"path": "tests/docs_mcp/__snapshots__/test_server.ambr",
"reason": "unsupported-implementation"
},
{
"path": "uv.lock",
"reason": "outside-rule-scope"
}
],
"readErrors": [],
"truncation": [],
"limits": {
"maxFiles": 4000,
"maxDepth": 12,
"maxFileBytes": 1048576
}
}Fix first (1 critical/high)
| Severity | Rule | Finding | Remediation |
|---|---|---|---|
| CRITICAL | AT-SEC-002 (LLM02) | Hardcoded Credential or API Secretevals/rate_limits/conftest.py:24Evidence: CLOUD_OAUTH_TOKEN_KEY = "notArealACCESStokenKEY" | Move credentials to secure environment variables or a key vault. Never commit API keys. |
Permissions
Scope: minimal · Shell: disabled · Network egress: no · File deletion: none · Human approval: none
Provenance
License: none detected · Lockfile: no · Security policy: yes · Signals: unverified origin
Independently scanned by the OpenTrustBench registry (not self-reported by the project). Static analysis only — no code executed, findings need human triage, counts may include test/example code. Static snapshot; re-scan before relying on it: npx @opentrustbench/cli scan https://github.com/PrefectHQ/prefect-mcp-server. Scores move with every upstream commit; pages refresh weekly. How scoring works.