critical

@circleci/mcp-server-circleci

v0.14.2

A Model Context Protocol (MCP) server implementation for CircleCI, enabling natural language interactions with CircleCI functionality through MCP-enabled clients

npmcircleci-deployFirst seen Feb 22, 2026

184

Total

Critical

High

Medium

Findings

unknown

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

>>> 1: const MAX_LENGTH = parseInt(process.env.MAX_MCP_OUTPUT_LENGTH ?? '', 10) || 50000;
    2: export const SEPARATOR = '\n<<<SEPARATOR>>>\n';
    3: /**

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    10:     }
    11:     if (outputDir.includes('%USERPROFILE%')) {
>>> 12:         const userProfile = process.env.USERPROFILE || os.homedir();
    13:         return outputDir.replace('%USERPROFILE%', userProfile);
    14:     }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    11: import { DeploysAPI } from './deploys.js';
    12: export const getBaseURL = (useAPISubdomain = false) => {
>>> 13:     let baseURL = process.env.CIRCLECI_BASE_URL || 'https://circleci.com';
    14:     if (useAPISubdomain) {
    15:         baseURL = baseURL.replace('https://', 'https://api.');

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    5: import mcpErrorOutput from '../../lib/mcpErrorOutput.js';
    6: export const downloadUsageApiData = async (args) => {
>>> 7:     const { CIRCLECI_BASE_URL } = process.env;
    8:     if (CIRCLECI_BASE_URL && CIRCLECI_BASE_URL !== 'https://circleci.com') {
    9:         return mcpErrorOutput('ERROR: The Usage API is not available on CircleCI server installations. This tool is only available for CircleCI cloud users.');

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    18: };
    19: export const getAppURL = () => {
>>> 20:     const baseURL = process.env.CIRCLECI_BASE_URL || 'https://circleci.com';
    21:     return baseURL.replace('https://', 'https://app.');
    22: };

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    2: import { CircleCIClients } from './circleci/index.js';
    3: export function getCircleCIClient() {
>>> 4:     if (!process.env.CIRCLECI_TOKEN) {
    5:         throw new Error('CIRCLECI_TOKEN is not set');
    6:     }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    6:     }
    7:     return new CircleCIClients({
>>> 8:         token: process.env.CIRCLECI_TOKEN,
    9:     });
    10: }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    10: }
    11: export function getCircleCIPrivateClient() {
>>> 12:     if (!process.env.CIRCLECI_TOKEN) {
    13:         throw new Error('CIRCLECI_TOKEN is not set');
    14:     }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    14:     }
    15:     return new CircleCIPrivateClients({
>>> 16:         token: process.env.CIRCLECI_TOKEN,
    17:     });
    18: }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    6: const server = new McpServer({ name: 'mcp-server-circleci', version: '1.0.0' }, { capabilities: { tools: {}, resources: {} } });
    7: // ---- DEBUG WRAPPERS --------------------------------------------------
>>> 8: if (process.env.debug === 'true') {
    9:     const srv = server;
    10:     if (typeof srv.notification === 'function') {

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    32: }
    33: // Register all CircleCI tools once
>>> 34: if (process.env.debug === 'true') {
    35:     console.error('[DEBUG] [Startup] Registering CircleCI MCP tools...');
    36: }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    41:     if (!handler)
    42:         throw new Error(`Handler for tool ${tool.name} not found`);
>>> 43:     if (process.env.debug === 'true') {
    44:         console.error(`[DEBUG] [Startup] Registering tool: ${tool.name}`);
    45:     }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    47: });
    48: async function main() {
>>> 49:     if (process.env.start === 'remote') {
    50:         console.error('Starting CircleCI MCP unified HTTP+SSE server...');
    51:         createUnifiedTransport(server);

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    8:     }
    9:     async send(payload) {
>>> 10:         if (process.env.debug === 'true') {
    11:             console.error('[DEBUG] SSE out ->', JSON.stringify(payload));
    12:         }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    31:     app.get('/mcp', (req, res) => {
    32:         (async () => {
>>> 33:             if (process.env.debug === 'true') {
    34:                 const sessionId = req.header('Mcp-Session-Id') ||
    35:                     req.header('mcp-session-id') ||

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    39:             // Create SSE transport (stateless)
    40:             const transport = new DebugSSETransport('/mcp', res);
>>> 41:             if (process.env.debug === 'true') {
    42:                 console.error(`[DEBUG] [GET /mcp] Created SSE transport.`);
    43:             }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    56:         (async () => {
    57:             try {
>>> 58:                 if (process.env.debug === 'true') {
    59:                     const names = Object.keys(server._registeredTools ?? {});
    60:                     console.error(`[DEBUG] visible tools:`, names);

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    76:                 // started listening on the SSE stream).
    77:                 if (req.body?.method === 'initialize') {
>>> 78:                     if (process.env.debug === 'true') {
    79:                         console.error('[DEBUG] initialize handled -> sending tools/list_changed again');
    80:                     }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    107:             req.header('mcp-session-id') ||
    108:             req.query.sessionId;
>>> 109:         if (process.env.debug === 'true') {
    110:             console.error(`[DEBUG] [DELETE /mcp] Incoming sessionId:`, sessionId);
    111:         }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    112:         res.status(204).end();
    113:     });
>>> 114:     const port = process.env.port || 8000;
    115:     app.listen(port, () => {
    116:         console.error(`CircleCI MCP unified HTTP+SSE server listening on http://0.0.0.0:${port}`);

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    4: import { writeFileSync, mkdirSync, rmSync } from 'fs';
    5: import { join } from 'path';
>>> 6: export const getFlakyTestsOutputDirectory = () => `${process.env.FILE_OUTPUT_DIRECTORY}/flaky-tests-output`;
    7: export const getFlakyTestLogs = async (args) => {
    8:     const { workspaceRoot, gitRemoteURL, projectURL, projectSlug: inputProjectSlug, } = args.params ?? {};

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    33:         projectSlug,
    34:     });
>>> 35:     if (process.env.FILE_OUTPUT_DIRECTORY) {
    36:         try {
    37:             return await writeTestsToFiles({ tests });

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: u�ں[Oj�jب��m��