CanopiiCanopiiAll serversEnterprise →
io.github.theoddden/terradev

io.github.theoddden/terradev v6.2.19

Security Trust Score
Grade D · Weak posture
Tier 1 · Public sourceLow confidence · 29%
Declared MCP capabilities
ResourcesPrompts

This server scored D. Run it behind runtime policy enforcement so one bad tool call can't become an incident.

1 issue capping this score
  • mediumNo over-broad / destructive tools — 1 over-broad tool(s)

Security controls

Deterministic, evidence-backed. Score earned from passing controls; a failed guard caps it.

Model–MCP Runtime Guardrails

  • Fail
    User-in-the-Loop / Approval Scopeguard1 over-broad tool(s)

    No over-broad or destructive tools (arbitrary shell, bulk-delete) that warrant human approval. How many servers fail this?

    agent_mem0_forget

    Fix: Scope tools narrowly; avoid arbitrary command execution and destructive defaults.

  • Pass
    Indirect Prompt Injection (IPI) Defensesguardno injection markers

    Tool/prompt/resource text is free of hidden instructions that could hijack the agent.

  • Not checked
    Strict JSON Schema Enforcementno source files

    Tool inputs are constrained (additionalProperties:false), so unexpected arguments can't be smuggled in.

  • Not checked
    In-Session Definition Integrityguardno source

    Tool and prompt definitions stay fixed during a session — they don't change after a few calls, which is how runtime-gated rug-pulls slip past one-time review.

  • N/A
    Tool Definition Integrityguardno prior version to diff

    Every consecutive version pair is diffed for new injection markers or destructive scope — a risky diff anywhere in history is a rug-pull (fail, durable); benign description drift warns.

Application Security Checks

  • Warn
    Established maintainerrecently published

    Brand-new / single anonymous maintainers raise takeover and malware risk.

    Fix: Publish under an established account/org; add multiple maintainers.

  • Pass
    No known-vulnerable dependencies1 runtime deps, no known CVEs

    Runtime dependencies (parsed from the lockfile) are scanned against OSV.dev for published CVEs. Advisory: flagged dependencies lower the score but don't hard-cap it, since transitive reachability is unproven.

  • Pass
    Package name not typosquattingguarddistinct package name

    Names mimicking popular packages are a common malware delivery vector.

  • Not checked
    No command-injection sinksguardno source

    Untrusted tool input reaching a shell yields remote code execution.

  • Not checked
    No dynamic code executionguardno source

    eval()/exec()/Function() on tool-derived strings allows arbitrary code execution.

  • Not checked
    No path traversalguardno source

    Naive path checks let tools read/write outside intended directories (EscapeRoute-class).

  • Not checked
    No SSRF sinksguardno source

    Fetching tool-supplied URLs can pivot into internal networks and metadata services.

  • Not checked
    No unsafe deserializationguardno source

    pickle/yaml.load/etc. on untrusted data can execute code.

  • Not checked
    No committed secretsguardno source

    Hardcoded keys/tokens in published source are live credentials an attacker can use.

  • Not checked
    Credentials sourced from environmentno source files

    Reading secrets from env/secret stores avoids hardcoding them.

  • Not checked
    Dependencies pinned (lockfile)no source files

    A lockfile makes installs reproducible and resistant to silent dependency swaps.

  • Not checked
    No install/post-install scriptsguardnot determinable from PyPI metadata

    install hooks run arbitrary code on every consumer at install time.

  • Not checked
    Published with provenancenot determinable

    Build provenance attests the artifact was built from the claimed source by CI.

  • Not checked
    Actively maintainedGitHub API unavailable

    Unmaintained servers don't receive security fixes.

  • Not checked
    Repository not archivedguardGitHub API unavailable

    Archived repositories will never be patched.

  • Not checked
    Declares a licenseGitHub API unavailable

    A clear license is required for legal enterprise use.

  • Not checked
    Has a security policyno source files

    A SECURITY.md gives a private path to report vulnerabilities.

  • Not checked
    Signed releasesnot evaluated

    Signed releases let consumers verify artifacts weren't tampered with.

  • Not checked
    Adoption & popularityno adoption signal

    A small, capped nudge from stars/downloads — widely-used servers get more eyes on bugs. It can never offset a real security failure.

Transport & Trust Model

  • Warn
    IAM / Authentication Scopingno authentication handling detected

    OAuth 2.1 / Protected Resource Metadata gates who can invoke tools.

    Fix: Implement OAuth 2.1 with a .well-known/oauth-protected-resource document.

  • Pass
    Transport Encryption (TLS)guardall remotes use HTTPS

    Plaintext HTTP exposes traffic and bearer tokens to interception.

  • Not checked
    No Token Passthroughguardno source

    The client's token is never forwarded to downstream APIs — the server obtains its own, correctly-scoped credential instead.

  • Not checked
    DNS-Rebinding Protectionno source to inspect

    HTTP endpoints reject requests carrying an unlisted Origin, so a malicious web page can't drive the server through the user's browser.

  • Not checked
    Execution Sandboxingno source files

    A container/sandbox image limits blast radius; a server that runs natively has full host access.

  • Not checked
    Network Exposureno source files

    Binding 0.0.0.0 or exposing debug inspectors widens the attack surface.

  • N/A
    Live Endpoint Reachablenot dynamically scanned

    A dynamic scan connected to the declared remote endpoint and it responded — verified live, not a dead URL.

  • N/A
    Authentication Enforced (live)not dynamically scanned

    If the server declares auth is required, it must actually reject anonymous clients. Serving tools to unauthenticated callers is a real exposure.

Tools (277)

upstagetrainsglangstatusdvc_diffdvc_pushk8s_infok8s_listlora_addoptimizeray_stoprollbackanalyticslora_listmanifestsollama_pspreflightquote_gpuray_startvllm_infovllm_stopvllm_wakeagent_costagent_listagent_plandvc_statusk8s_createlocal_scanmoe_deployqdrant_k8sray_statustrain_stopvllm_sleepvllm_startagent_scaleinfer_routeinferx_listk8s_destroykserve_listlora_removeollama_chatollama_listollama_pullphoenix_k8sprice_intelqdrant_infoqdrant_testsecrets_envsecrets_getsecrets_runsecrets_setsglang_stopagent_deployagent_statuscost_analyzedeepeval_rungpu_topologyinferx_quoteinferx_usagelangfuse_k8slineage_diffmigrate_planphoenix_testprice_trendsqdrant_countrun_workflowsecrets_listsecrets_syncsglang_starttrain_resumetrain_statusvllm_analyzecost_simulatedeepeval_inithelm_generatehf_model_infoinferx_deleteinferx_deployinferx_statuskserve_statuslangfuse_testlineage_graphlineage_tracephoenix_spansphoenix_traceprovision_gpuray_list_jobstrain_monitortriggers_listactive_contextagent_mem0_addagent_mem0_getagent_teardownguardrails_k8shf_list_modelsinfer_failoverkarpenter_logslangfuse_scorelangfuse_tracelineage_exportmigrate_statusmlflow_log_runquery_databaseray_submit_jobsecrets_removesecrets_verifysetup_providertrain_snapshotvllm_benchmarkvllm_inferenceagent_mem0_listagent_mem0_testcheckpoint_listcheckpoint_saveguardrails_chatguardrails_testhf_space_deployhf_space_statusinferx_optimizelangfuse_scoreslangfuse_tracesmanage_instancemigrate_comparemigrate_executeollama_generatephoenix_snippetprice_spot_risktriggers_createtriggers_enableupsert_databasewandb_list_runswarm_pool_startagent_letta_chatagent_letta_listagent_skill_initdeepeval_metricshf_endpoint_infohf_list_datasetsinferx_configurek8s_time_slicingkarpenter_eventskarpenter_statuslangfuse_qualitymigrate_rollbackphoenix_otel_envphoenix_projectspreflight_reportsglang_inferencetriggers_executetriggers_historywarm_pool_statusagent_mem0_deleteagent_mem0_forgetagent_mem0_searchagent_mem0_updatecheckpoint_deletedeepeval_evaluateenvironments_listhf_endpoint_inferhf_list_endpointshf_smart_templatek8s_device_plugink8s_mig_configurekarpenter_installlangfuse_datasetslangfuse_otel_envml_vllm_lora_linkml_vllm_lora_listml_vllm_lora_loadml_vllm_lora_syncollama_model_infoorchestrator_loadtrain_unsloth_runwandb_run_detailsagent_letta_createagent_letta_deleteagent_letta_statusagent_skill_attachagent_vector_db_upcheckpoint_promotecheckpoint_restoreconfigure_providerhf_create_endpointhf_delete_endpointinfer_route_disagglangfuse_configurelineage_checkpointorchestrator_evictorchestrator_inferorchestrator_startqdrant_collectionsray_wide_ep_deploytrain_unsloth_stopvllm_auto_optimizewandb_setup_alertsenvironments_createhf_hardware_comparekarpenter_gpu_nodeskarpenter_nodepoolskarpenter_resourceskv_cache_efficiencyml_vllm_lora_unloadorchestrator_statuspreflight_gpu_checkpreflight_provisiontrain_unsloth_startwandb_create_reportwandb_list_projectsagent_langchain_testagent_langgraph_testagent_letta_rememberagent_mem0_configureagent_vector_db_downdatabase_weaviate_updvc_stage_checkpointenvironments_approveenvironments_historyenvironments_promotegovernance_move_datakserve_generate_yamlray_disagg_pd_deployegress_cheapest_routehf_hardware_recommendmlflow_register_modelorchestrator_registeragent_langgraph_deployagent_langgraph_statuswandb_create_dashboardwandb_dashboard_statuscost_optimize_recommenddatabase_weaviate_queryegress_optimize_stagingget_database_connectiongovernance_evaluate_opamlflow_list_experimentspreflight_network_checktrain_detect_stragglerscreate_sqlite_connectiondatabase_weaviate_insertk8s_gpu_operator_installqdrant_create_collectionray_parallelism_strategytraining_config_generateagent_agentic_serving_k8sgovernance_record_consentkarpenter_create_nodepoolkarpenter_delete_nodepoollangchain_create_workflowlanggraph_create_workflowlanggraph_workflow_statusgovernance_request_consentguardrails_generate_configgovernance_movement_historytraining_launch_distributedcreate_postgresql_connectiongovernance_compliance_reportwandb_create_terradev_alertswandb_create_terradev_reportlangfuse_export_training_datalanggraph_evaluation_workflowlanggraph_orchestrator_workeragent_agentic_serving_configureagent_langchain_create_pipelineagent_langchain_create_workflowagent_langgraph_create_workflowdatabase_weaviate_hybrid_searchwandb_create_terradev_dashboardagent_langchain_create_langgraphlangchain_create_sglang_pipelineagent_agentic_serving_helm_valuesagent_agentic_serving_launch_argsagent_agentic_serving_lmcache_envagent_agentic_serving_show_configdatabase_weaviate_list_collectionsdatabase_weaviate_create_collectiondatabase_weaviate_delete_collection
io.github.theoddden/terradev v6.2.19 — 40/100 · Canopii Trust Index