@zapier/zapier-sdk-mcp
v0.9.1MCP server for Zapier SDK
5
Total
0
Critical
1
High
4
Medium
Findings
unknownDecoded base64 content: ��H���'�vĜ��
Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.
Report false positiveJavaScript fetch() call
Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.
58: ### Minor Changes
59:
>>> 60: - d72cda1: Deprecates request() in favor of self-contained fetch(). The fetch plugin now handles URL-to-relay transformation, header normalization,
61: and body content-type inference directly instead of delegating to request. The request plugin is preserved as a backward-compatible
62: shim that forwards to fetch. CLI and MCP now expose a fetch command via a new inputParameters registry concept forReport false positiveJavaScript fetch() call
Detected by automated pattern matching (rule NS-003) with medium confidence. May be a false positive.
226: #### `fetch`
227:
>>> 228: Make authenticated HTTP requests to any API through Zapier's Relay service. Pass a connectionId to automatically inject the user's stored credentials (OAuth tokens, API keys, etc.) into the outgoing request. Mirrors the native fetch(url, init?) signature with additional Zapier-specific options.Report false positiveHigh-entropy string (4.9 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positiveHigh-entropy string (4.7 bits/char) — possible encoded payload
Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.
Report false positive