critical

@memberjunction/ai-mcp-server

v5.2.0

MemberJunction: Model Context Protocol (MCP) - Server Implementation

npmGitHub ActionsFirst seen Feb 22, 2026

190

Total

Critical

115

High

Medium

Findings

unknown

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    224:     // System API key from MJ_API_KEY environment variable
    225:     // Note: This may come from DEFAULT_SERVER_CONFIG, but initConfig() also reads
>>> 226:     // directly from process.env to handle cases where dotenv runs after MJServer import
    227:     apiKey: z.string().optional(),
    228: });

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    65: }
    66: else {
>>> 67:     console.log(`MCP Server: No .env file found, using existing environment variables`);
    68: }
    69: const explorer = cosmiconfigSync('mj', { searchStrategy: 'global' });

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    58:     return undefined;
    59: }
>>> 60: // Load .env file from repo root (searches upward like cosmiconfig does for mj.config.cjs)
    61: const envPath = findEnvFile();
    62: if (envPath) {

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    50:     const root = path.parse(currentDir).root;
    51:     while (currentDir !== root) {
>>> 52:         const envPath = path.join(currentDir, '.env');
    53:         if (fs.existsSync(envPath)) {
    54:             return envPath;

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    44:  * in the same location as mj.config.cjs (typically the repo root).
    45:  *
>>> 46:  * @returns Path to the .env file if found, undefined otherwise
    47:  */
    48: function findEnvFile() {

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    41: /**
    42:  * Searches upward from the current directory for a .env file.
>>> 43:  * This mimics cosmiconfig's search behavior so the .env file is found
    44:  * in the same location as mj.config.cjs (typically the repo root).
    45:  *

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    40:  */
    41: /**
>>> 42:  * Searches upward from the current directory for a .env file.
    43:  * This mimics cosmiconfig's search behavior so the .env file is found
    44:  * in the same location as mj.config.cjs (typically the repo root).

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    32:  * - Load dotenv first (above) which populates process.env with DB credentials from .env
    33:  * - Use dynamic import() inside initConfig() to load DEFAULT_SERVER_CONFIG AFTER dotenv runs
>>> 34:  * - This ensures process.env.DB_DATABASE, etc. are set when @memberjunction/server evaluates them
    35:  *
    36:  * Alternative approaches considered:

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    30:  *
    31:  * Solution:
>>> 32:  * - Load dotenv first (above) which populates process.env with DB credentials from .env
    33:  * - Use dynamic import() inside initConfig() to load DEFAULT_SERVER_CONFIG AFTER dotenv runs
    34:  * - This ensures process.env.DB_DATABASE, etc. are set when @memberjunction/server evaluates them

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    27:  * - ESM hoists all static imports, so they execute BEFORE any inline code in this file
    28:  * - If we use `import { DEFAULT_SERVER_CONFIG } from '@memberjunction/server'` at the top,
>>> 29:  *   it runs before our dotenv.config() call, and process.env is empty
    30:  *
    31:  * Solution:

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    2738: export async function listAvailableTools(filterOptions = {}) {
    2739:     try {
>>> 2740:         // Initialize configuration (loads .env and mj.config.cjs)
    2741:         _config = await initConfig();
    2742:         if (!_config.mcpServerSettings?.enableMCPServer) {

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    24:  *
    25:  * Problem:
>>> 26:  * - @memberjunction/server's config.ts reads process.env at module load time to create DEFAULT_SERVER_CONFIG
    27:  * - ESM hoists all static imports, so they execute BEFORE any inline code in this file
    28:  * - If we use `import { DEFAULT_SERVER_CONFIG } from '@memberjunction/server'` at the top,

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    3:  *
    4:  * Loads configuration from:
>>> 5:  * 1. Environment variables (.env file via dotenv - searches upward from cwd)
    6:  * 2. Configuration file (mj.config.cjs via cosmiconfig)
    7:  * 3. Default server configuration as fallback

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    859:  * This MUST be called before accessing any config values.
    860:  *
>>> 861:  * The dynamic import ensures dotenv has already populated process.env
    862:  * before @memberjunction/server reads environment variables.
    863:  */

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    3:  *
    4:  * Loads configuration from:
>>> 5:  * 1. Environment variables (.env file via dotenv - searches upward from cwd)
    6:  * 2. Configuration file (mj.config.cjs via cosmiconfig)
    7:  * 3. Default server configuration as fallback

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    17:  * ```typescript
    18:  * const issuer = createJWTIssuer({
>>> 19:  *   signingSecret: process.env.MCP_JWT_SECRET!,
    20:  *   expiresIn: '1h',
    21:  *   issuer: 'urn:mj:mcp-server',

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    41:  * ```typescript
    42:  * const issuer = createJWTIssuer({
>>> 43:  *   signingSecret: process.env.MCP_JWT_SECRET!,
    44:  *   expiresIn: '1h',
    45:  *   issuer: 'urn:mj:mcp-server',

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    263:     console.log(`[Config] apiKey sources: configInfo.apiKey=${configInfo.apiKey ? `"${configInfo.apiKey.substring(0, 10)}..." (${configInfo.apiKey.length} chars)` : 'undefined'}, process.env.MJ_API_KEY=${envApiKey ? `"${envApiKey.substring(0, 10)}..." (${envApiKey.length} chars)` : 'undefined'}`);
    264:     if (!configInfo.apiKey && envApiKey) {
>>> 265:         console.log('[Config] Using MJ_API_KEY from process.env (DEFAULT_SERVER_CONFIG was stale)');
    266:         configInfo.apiKey = envApiKey;
    267:     }

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    261:     // was imported elsewhere first
    262:     const envApiKey = process.env.MJ_API_KEY;
>>> 263:     console.log(`[Config] apiKey sources: configInfo.apiKey=${configInfo.apiKey ? `"${configInfo.apiKey.substring(0, 10)}..." (${configInfo.apiKey.length} chars)` : 'undefined'}, process.env.MJ_API_KEY=${envApiKey ? `"${envApiKey.substring(0, 10)}..." (${envApiKey.length} chars)` : 'undefined'}`);
    264:     if (!configInfo.apiKey && envApiKey) {
    265:         console.log('[Config] Using MJ_API_KEY from process.env (DEFAULT_SERVER_CONFIG was stale)');

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    795:                         // Falls back to MCP_JWT_SECRET env var if not configured in mj.config.cjs
    796:                         const proxySettings = _config.mcpServerSettings?.auth?.proxy;
>>> 797:                         const jwtSigningSecret = proxySettings?.jwtSigningSecret ?? process.env.MCP_JWT_SECRET;
    798:                         const jwtConfig = jwtSigningSecret ? {
    799:                             signingSecret: jwtSigningSecret,

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    776:                         // (same technique as MJExplorer SPA), so no secret is required
    777:                         const upstreamClientId = provider.clientId || process.env.WEB_CLIENT_ID || provider.audience || '';
>>> 778:                         const upstreamClientSecret = process.env.WEB_CLIENT_SECRET || undefined;
    779:                         // Log warning if no valid client_id found
    780:                         if (!upstreamClientId) {

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    775:                         // Client secret is OPTIONAL - the proxy uses PKCE for upstream token exchange
    776:                         // (same technique as MJExplorer SPA), so no secret is required
>>> 777:                         const upstreamClientId = provider.clientId || process.env.WEB_CLIENT_ID || provider.audience || '';
    778:                         const upstreamClientSecret = process.env.WEB_CLIENT_SECRET || undefined;
    779:                         // Log warning if no valid client_id found

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    612: export async function initializeServer(filterOptions = {}) {
    613:     try {
>>> 614:         // Initialize configuration (loads .env and mj.config.cjs)
    615:         _config = await initConfig();
    616:         mcpServerPort = _config.mcpServerSettings?.port || 3100;

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    260:     // DEFAULT_SERVER_CONFIG.apiKey may have been evaluated before dotenv ran if @memberjunction/server
    261:     // was imported elsewhere first
>>> 262:     const envApiKey = process.env.MJ_API_KEY;
    263:     console.log(`[Config] apiKey sources: configInfo.apiKey=${configInfo.apiKey ? `"${configInfo.apiKey.substring(0, 10)}..." (${configInfo.apiKey.length} chars)` : 'undefined'}, process.env.MJ_API_KEY=${envApiKey ? `"${envApiKey.substring(0, 10)}..." (${envApiKey.length} chars)` : 'undefined'}`);
    264:     if (!configInfo.apiKey && envApiKey) {

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    257:     const { DEFAULT_SERVER_CONFIG } = await import('@memberjunction/server');
    258:     configInfo = loadConfig(DEFAULT_SERVER_CONFIG);
>>> 259:     // Ensure apiKey is read directly from process.env (dotenv has definitely run by now)
    260:     // DEFAULT_SERVER_CONFIG.apiKey may have been evaluated before dotenv ran if @memberjunction/server
    261:     // was imported elsewhere first

Report false positive

criticalDE-002Data ExfiltrationHigh ConfidenceLine 0

Environment file access

Detected by automated pattern matching (rule DE-002) with medium confidence. May be a false positive.

    247:  * This MUST be called before accessing any config values.
    248:  *
>>> 249:  * The dynamic import ensures dotenv has already populated process.env
    250:  * before @memberjunction/server reads environment variables.
    251:  */

Report false positive

highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��bu�^'R� ��r��