F
com.kage-core/kage
Reviewed MCP Trust live-scan corpus candidate. Public meaning remains limited to controlled first-pass scan evidence and receipt caveats. Provenance caveat: the npm package declares no repository/homepage and the source repo has no exact version tag; the package/source binding rests on an untagged release commit with matching package-file hashes.
Automated danger grade: this page reports detected or inferred risk from a scan. It is not an endorsement, certification, or claim that the server is malicious.
Low transparency: this server declares few or no tool behavior annotations, so the danger score is inferred from defaults. Treat as cannot verify safe — not necessarily dangerous.
Grade history
8 scans on record between 2026-07-03 and 2026-07-04. The grade has not changed across them.
| Scanned (UTC) | Grade | Engine | Attributed cause |
|---|---|---|---|
| 2026-07-03 10:12 | F | mcpaudit 2.3.0 | First scan on record |
| 2026-07-03 10:16 | F | mcpaudit 2.3.0 | No change |
| 2026-07-03 12:42 | F | mcpaudit 2.3.0 | No change |
| 2026-07-03 13:20 | F | mcpaudit 2.4.0 | No change |
| 2026-07-03 14:13 | F | mcpaudit 2.4.0 | No change |
| 2026-07-04 08:13 | F | mcpaudit 2.4.0 | No change |
| 2026-07-04 08:16 | F | mcpaudit 2.4.0 | No change |
| 2026-07-04 08:17 | F | mcpaudit 2.4.0 | No change |
History as recorded by this registry's own scans. The cause is an attribution from the inputs the registry records — the scanner engine identity and the declared tool surface — not proof of what changed on the server. Generated 2026-08-02.
How to read this grade
- What was scanned: @kage-core/kage-graph-mcp, as distributed.
- When: 2026-07-04 08:17:51.
- By what: mcpaudit 2.4.0, applied to the published danger rubric (weights, bands, and the critical cap are all public).
- What the grade means: this registry's opinion, computed by the disclosed automated methodology against the artifact version above, on the scan date above. It measures conformance to the rubric at scan time.
- What it does not claim: it is not a statement that the product is malicious, insecure in your deployment, or unfit for use, and it is not an endorsement or certification.
- Because this server declares few or no tool-behavior annotations, its F reflects risk inferred from spec defaults — read it as cannot verify safe, not known dangerous.
- Disagree? Grades are re-checkable against the same package version, and corrections are welcome: open a dispute — see the dispute & correction policy.
Spec-shift exposure
READY against MCP 2026-07-28-rc · confidence high · ruled 2026-07-18
| Dimension | Area | Verdict |
|---|---|---|
| D1 | Stateless-core compatibility | READY |
| D2 | Deprecated-capability reliance | READY |
| D3 | Authorization posture | N_A |
| D4 | Schema and wire conformance | READY |
| D5 | Extensions readiness | NOTE |
This is a point-in-time ruling against a release candidate, not the published specification, and it is independent of the danger grade above. Neither figure constrains the other.
Provenance & dispute
- Listing basis: operator-listed from a public catalog. This entry was not submitted by its vendor.
- Scan target: the published npm artifact
@kage-core/kage-graph-mcp, installed and scanned locally using sandbox imagemcp-trust-live-batch:20260628. The public record stores the sandbox image, but not the network mode, so this page does not claim network isolation for that run. - Credentials: none declared, none used.
- Dispute: vendor or maintainer of this server? Dispute this grade — first response within 14 days.
Add this badge to your README
Copy the Markdown below only if you want to link readers to the latest danger grade and scan caveats:
[](https://mcp-trust.vercel.app/ui/servers/com-kage-core-kage-2-3-0)
Findings
| Severity | Rule | Title | Category | Detail |
|---|---|---|---|---|
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP001 | File read capability | file_read | query |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| high | MCP001 | File read capability | file_read | query; search |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | search |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | list |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP001 | File read capability | file_read | query |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | query |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | source |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | source; query |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| high | MCP001 | File read capability | file_read | path; source |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | source |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP002 | File write capability | file_write | commit |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP004 | Shell execution capability | shell_execution | run |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | list |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| high | MCP002 | File write capability | file_write | create; update; set |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| high | MCP002 | File write capability | file_write | delete |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | path |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP002 | File write capability | file_write | write |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | source |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| high | MCP001 | File read capability | file_read | path; query; search |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | import |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP001 | File read capability | file_read | query |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| high | MCP001 | File read capability | file_read | tree |
| medium | MCP004 | Shell execution capability | shell_execution | run |
| critical | MCP006 | Data exfiltration capability | exfiltration | push |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | query |
| medium | MCP004 | Shell execution capability | shell_execution | run |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| high | MCP002 | File write capability | file_write | write; create |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP006 | Data exfiltration capability | exfiltration | relay |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | source |
| medium | MCP002 | File write capability | file_write | update |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | path |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP002 | File write capability | file_write | delete |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP002 | File write capability | file_write | write |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| high | MCP001 | File read capability | file_read | path; list |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP002 | File write capability | file_write | set |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | open |
| medium | MCP002 | File write capability | file_write | write |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP006 | Data exfiltration capability | exfiltration | export |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | path |
| medium | MCP002 | File write capability | file_write | create; set |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | path |
| medium | MCP002 | File write capability | file_write | create; set |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP004 | Shell execution capability | shell_execution | run |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP001 | File read capability | file_read | path |
| medium | MCP004 | Shell execution capability | shell_execution | command |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP002 | File write capability | file_write | save |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP002 | File write capability | file_write | update |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP002 | File write capability | file_write | create |
| low | MCP005 | Destructive operation capability | destructive | destructiveHint=null (spec default: true) |
| low | MCP003 | Network access capability | network | openWorldHint=null (spec default: true) |
| medium | MCP002 | File write capability | file_write | create; update |
Score breakdown
| Dimension | Raw (0–10) | Weight | Weighted |
|---|---|---|---|
| File access | 1.8 | ×1.2 | 2.16 |
| Network access | 1.5 | ×1.0 | 1.50 |
| Shell execution | 1.8 | ×2.0 | 3.60 |
| Destructive | 2.0 | ×0.3 | 0.60 |
| Exfiltration | 2.2 | ×0.4 | 0.90 |