CanopiiCanopiiAll serversEnterprise →
com.telesherpa/ontology-platform

com.telesherpa/ontology-platform v2.3.3

Security Trust Score
Grade A · Strong posture
Tier 1 · Public sourceHigh confidence · 90%
Declared MCP capabilities
ResourcesPrompts

Host com.telesherpa/ontology-platform in a governed environment — SSO in front, every tool call attributed and audited.

Reputation0stars0forks0open issues3d agolast commit<1yage

Security controls

Deterministic, evidence-backed. Score earned from passing controls; a failed guard caps it.

Model–MCP Runtime Guardrails

  • Warn
    Strict JSON Schema Enforcementschemas not strict

    Tool inputs are constrained (additionalProperties:false), so unexpected arguments can't be smuggled in.

    Fix: Set additionalProperties:false and require explicit parameters on every tool.

  • Pass
    Indirect Prompt Injection (IPI) Defensesguardno injection markers

    Tool/prompt/resource text is free of hidden instructions that could hijack the agent.

  • Pass
    User-in-the-Loop / Approval Scopeguardno destructive tool scope

    No over-broad or destructive tools (arbitrary shell, bulk-delete) that warrant human approval.

  • N/A
    Tool Definition Integrityguardno prior version to diff

    Every consecutive version pair is diffed for new injection markers or destructive scope — a risky diff anywhere in history is a rug-pull (fail, durable); benign description drift warns.

Application Security Checks

  • Warn
    Credentials sourced from environmentno env-based config detected

    Reading secrets from env/secret stores avoids hardcoding them.

    Fix: Read credentials from environment variables or a secret manager.

  • Warn
    Dependencies pinned (lockfile)no lockfile found

    A lockfile makes installs reproducible and resistant to silent dependency swaps.

    Fix: Commit a lockfile (package-lock.json / pnpm-lock.yaml / poetry.lock).

  • Warn
    Has a security policyno security policy

    A SECURITY.md gives a private path to report vulnerabilities.

    Fix: Add SECURITY.md with a disclosure contact and process.

  • Warn
    Adoption & popularitylimited adoption

    A small, capped nudge from stars/downloads — widely-used servers get more eyes on bugs. It can never offset a real security failure.

    Fix: Adoption grows naturally with real-world use; this never gates the score.

  • Pass
    No command-injection sinksguardno sinks found

    Untrusted tool input reaching a shell yields remote code execution.

  • Pass
    No dynamic code executionguardno sinks found

    eval()/exec()/Function() on tool-derived strings allows arbitrary code execution.

  • Pass
    No path traversalguardno sinks found

    Naive path checks let tools read/write outside intended directories (EscapeRoute-class).

  • Pass
    No SSRF sinksguardno sinks found

    Fetching tool-supplied URLs can pivot into internal networks and metadata services.

  • Pass
    No unsafe deserializationguardno sinks found

    pickle/yaml.load/etc. on untrusted data can execute code.

  • Pass
    No committed secretsguardno secrets found

    Hardcoded keys/tokens in published source are live credentials an attacker can use.

  • Pass
    Actively maintainedrecent commits

    Unmaintained servers don't receive security fixes.

  • Pass
    Repository not archivedguardactive

    Archived repositories will never be patched.

  • Pass
    Declares a licenseMIT

    A clear license is required for legal enterprise use.

  • Not checked
    No known-vulnerable dependenciesno lockfile found

    Runtime dependencies (parsed from the lockfile) are scanned against OSV.dev for published CVEs. Advisory: flagged dependencies lower the score but don't hard-cap it, since transitive reachability is unproven.

  • Not checked
    Signed releasesnot evaluated

    Signed releases let consumers verify artifacts weren't tampered with.

  • N/A
    No install/post-install scriptsguardno published package

    install hooks run arbitrary code on every consumer at install time.

  • N/A
    Package name not typosquattingguardno published package

    Names mimicking popular packages are a common malware delivery vector.

  • N/A
    Published with provenanceno published package

    Build provenance attests the artifact was built from the claimed source by CI.

  • N/A
    Established maintainerno published package

    Brand-new / single anonymous maintainers raise takeover and malware risk.

Transport & Trust Model

  • Warn
    Execution Sandboxingruns natively (no container image)

    A container/sandbox image limits blast radius; a server that runs natively has full host access.

    Fix: Ship a Dockerfile/Containerfile (or document a sandboxed run) so the server runs isolated.

  • Pass
    Transport Encryption (TLS)guardall remotes use HTTPS

    Plaintext HTTP exposes traffic and bearer tokens to interception.

  • Pass
    IAM / Authentication ScopingOAuth / PRM handling detected

    OAuth 2.1 / Protected Resource Metadata gates who can invoke tools.

  • Pass
    Network Exposureno bind-all detected

    Binding 0.0.0.0 or exposing debug inspectors widens the attack surface.

  • N/A
    Live Endpoint Reachablenot dynamically scanned

    A dynamic scan connected to the declared remote endpoint and it responded — verified live, not a dead URL.

  • N/A
    Authentication Enforced (live)not dynamically scanned

    If the server declares auth is required, it must actually reject anonymous clients. Serving tools to unauthenticated callers is a real exposure.

Tools (209)

loginactivateregisterget_imageauth_statusget_profileget_documentlist_membersshow_formdeflist_formdefsonto_user_getremove_memberrenew_accountchange_profileonto_type_showonto_user_showchange_passwordonto_i18n_indexonto_link_indexonto_report_csvonto_type_indexonto_user_indexonto_action_logsonto_file_deleteonto_i18n_createonto_i18n_deleteonto_i18n_exportonto_i18n_matrixonto_i18n_reviewonto_object_showonto_report_copyonto_report_jsononto_report_saveonto_report_showonto_scope_indexonto_series_lastonto_type_createonto_type_deleteonto_type_updateonto_user_deleteonto_user_updateshow_form_answerget_notificationslist_invite_codesonto_favorite_addonto_formdef_saveonto_function_runonto_i18n_missingonto_import_indexonto_import_stepsonto_object_graphonto_object_indexonto_outbox_indexonto_outbox_retryonto_report_indexonto_scope_createonto_scope_deleteonto_scope_searchonto_scope_updateonto_series_rangeonto_watch_cursorcreate_invite_codeonto_catalog_applyonto_catalog_clearonto_catalog_indexonto_object_createonto_object_deleteonto_object_searchonto_object_updateonto_report_deleteonto_settings_listonto_trigger_indexonto_watch_changesontouser_team_showredeem_invite_coderevoke_invite_codesubmit_form_answertoggle_member_flagupload_staging_csvlist_code_allowlistonto_actiondef_listonto_actiondef_saveonto_credit_balanceonto_credit_pricingonto_credit_receiptonto_favorite_indexonto_formdef_createonto_function_indexonto_i18n_translateonto_import_analyzeonto_import_sourcesonto_interface_showonto_object_geocodeonto_outbox_previewonto_settings_indexonto_startcard_moveonto_startcard_saveonto_trigger_createonto_trigger_deleteonto_trigger_updateontouser_team_indexprepare_form_answerresolve_form_answeronto_actiondef_indexonto_catalog_presetsonto_connection_saveonto_credit_chargeuponto_credit_checkoutonto_dispatch_statusonto_favorite_deleteonto_favorite_toggleonto_file_structuredonto_function_createonto_function_deleteonto_function_updateonto_import_run_steponto_interface_indexonto_link_create_defonto_link_delete_defonto_link_update_defonto_report_map_dataonto_settings_createonto_settings_deleteonto_settings_updateonto_startcard_indexontouser_object_showontouser_scope_indexontouser_scope_typesrefresh_access_tokenonto_actiondef_deleteonto_connection_checkonto_connection_indexonto_i18n_suggestionsonto_import_save_steponto_invite_code_showonto_report_aggregateonto_startcard_deleteontouser_scope_createontouser_team_creditsontouser_team_suspendontouser_webhook_saveontouser_webhook_showontouser_webhook_testupload_code_allowlistupload_file_to_objectonto_connection_removeonto_invite_code_indexonto_object_addcommentontouser_team_offboardontouser_team_transferonto_import_delete_steponto_import_step_cancelonto_import_step_statusonto_object_bulk_actiononto_object_create_linkonto_object_delete_linkonto_object_update_linkonto_property_def_indexonto_property_set_indexontouser_interface_showontouser_team_unsuspendontouser_webhook_deleteadd_code_allowlist_entryonto_import_analyze_steponto_import_reorder_steponto_object_set_propertyonto_property_def_createonto_property_def_deleteonto_property_def_updateonto_property_set_createonto_property_set_deleteonto_property_set_updateonto_user_delete_profileonto_user_update_profileontouser_scope_types_setontouser_service_requestonto_import_create_sourceonto_import_delete_sourceonto_import_update_sourceonto_interface_create_defonto_interface_delete_defonto_interface_update_defonto_object_search_scopesonto_scope_assign_profileonto_scope_remove_profileonto_credit_create_prepaidonto_interface_map_markersonto_object_execute_actiononto_scope_search_profilesontouser_notification_readontouser_notification_sendontouser_scope_list_publicdelete_code_allowlist_entryonto_formdef_list_templatesonto_object_delete_propertyontouser_notification_indexonto_scope_toggle_scope_flagontouser_notification_deleteontouser_scope_assign_publicontouser_scope_remove_publicontouser_team_update_profileontouser_scope_set_visibilityontouser_team_set_write_scopeontouser_interface_map_markersontouser_team_offboard_previewontouser_team_set_scope_rightsonto_property_def_delete_overrideonto_scope_structuredimage_categoriesonto_scope_save_structuredimage_categories