ICUICU
low

@zapier/zapier-sdk-mcp

v0.9.1

MCP server for Zapier SDK

npmzapier-engineeringFirst seen Feb 23, 2026Source

5

Total

0

Critical

1

High

4

Medium

Findings

unknown
highDO-BASunknownMedium ConfidenceLine 0

Decoded base64 content: ��H���'�vĜ��

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Report false positive
mediumNS-003Network SuspiciousMedium ConfidenceLine 0

JavaScript fetch() call

Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.

    58: ### Minor Changes
    59: 
>>> 60: - d72cda1: Deprecates request() in favor of self-contained fetch(). The fetch plugin now handles URL-to-relay transformation, header normalization,
    61:   and body content-type inference directly instead of delegating to request. The request plugin is preserved as a backward-compatible
    62:   shim that forwards to fetch. CLI and MCP now expose a fetch command via a new inputParameters registry concept for
Report false positive
mediumNS-003Network SuspiciousMedium ConfidenceLine 0

JavaScript fetch() call

Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.

    226: #### `fetch`
    227: 
>>> 228: Make authenticated HTTP requests to any API through Zapier's Relay service. Pass a connectionId to automatically inject the user's stored credentials (OAuth tokens, API keys, etc.) into the outgoing request. Mirrors the native fetch(url, init?) signature with additional Zapier-specific options.
Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.9 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive
mediumEN-001unknownMedium ConfidenceLine 0

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Report false positive