Sentry

Official MCP

Sentry error tracking and performance monitoring integration

vcommit-b2d6c7b-2026-03-01

PDF

Schnellinstallation

smcp run official/sentry@commit-b2d6c7b-2026-03-01

Sicher ausführen mit mcp hub client Der sichere MCP-Runner von mcp-hub

Integrity Verified

Level 0

Basic integrity checks passed. Digest validation and schema validation completed.

MSSS: Level 0 (Not Compliant)

184

Findings

Critical

105

High

15/100

Global Security Score

Not Recommended for Production

Critical security issues found. This MCP server should not be used in production until remediated.

184 findings

54 critical

105 high

Vulnerability Summary

Critical

105

High

Medium

Low

Info

184 total findings detected

Critical

High

105

Medium

Score Breakdown

Security (50% weight) 40

Supply Chain (30% weight) 100

Maturity (20% weight) 100

Global Score (weighted) 15

OWASP MCP Top 10 View full details →

MCP01

Token & Secrets

At Risk

MCP02

Privilege Escalation

Mitigated

MCP03

Tool Poisoning

At Risk

MCP04

Supply Chain

Mitigated

MCP05

Cmd Injection

At Risk

MCP06

Intent Subversion

Mitigated

MCP07

Auth/AuthZ

Mitigated

MCP08

Audit & Telemetry

Mitigated

MCP09

Shadow Servers

At Risk

MCP10

Context Injection

Mitigated

MSSS Certification Level

MCP Server Security Standard (MSSS) — Ein standardisiertes Framework zur Bewertung der Sicherheit von MCP-Servern. Mehr erfahren

0 Level 0

Sicherheitskontrollen

Other Controls

21/26 passed

No Secrets in Code

Control failed: 30 findings found, score 50.0

HIGH FAIL

No SQL Injection

Control failed: 51 findings found, score 50.0

CRITICAL FAIL

No Tool Poisoning

Control failed: 63 findings found, score 50.0

HIGH FAIL

No Remote Code Execution

Control failed: 3 findings found, score 50.0

CRITICAL FAIL

No Hidden Network Channels

Control failed: 37 findings found, score 50.0

HIGH FAIL

Code Quality

PASS

Error Handling

PASS

Input Validation

PASS

Logging

PASS

No Critical Vulnerabilities

PASS

No High Vulnerabilities

PASS

No Command Injection

PASS

No Path Traversal

PASS

No Insecure Deserialization

PASS

No XSS Vulnerabilities

PASS

Secure Cryptography

PASS

No Hardcoded Credentials

PASS

No Prompt Injection

PASS

No SSRF or Data Exfiltration

PASS

No Privilege Escalation

PASS

No Cross-Tool Data Leakage

PASS

Compatible License

PASS

No Copyleft License

PASS

No Deprecated Dependencies

PASS

Pinned Dependencies

PASS

Known Supply Chain

PASS

Security Findings

184 findings:

Filter:

Severity	CVSS	Finding	Class	Location	CWE
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const createData: Record<string, any> = { name };` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const updateData: Record<string, any> = {};` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const updateData: Record<string, any> = {};` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `export function createWhoamiTool(options: { apiService: SentryApiService }) {` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `repeatingSpansCompact: ["SELECT * FROM users WHERE id = %s"],` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `SELECT * FROM users WHERE id = %s` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `repeatingSpansCompact: ["SELECT * FROM users WHERE id = %s"],` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `├─ SELECT * FROM users WHERE id = 1 [span1 · db.query · 3ms] [N+1]` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `"SELECT * FROM durations WHERE bucket = %s",` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `└─ SELECT * FROM durations WHERE bucket = 'slow' [spanB · db.query · 1500ms] [N+1]` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const mockKV = createMockKV({ getResult: cachedData });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `1906: KNOWN_PERFORMANCE_ISSUE_TYPES.N_PLUS_ONE_DB_QUERIES, // Alternative ID for N+1 DB` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const flamegraph = createMockFlamegraph({ transactionName: undefined });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `export function createFrame(overrides: Partial<Frame> = {}): Frame {` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `export function createThread(overrides: Partial<Thread> = {}): Thread {` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `stacktrace: createStackTrace([createFrame({ lineNo: 100 })]),` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const flamegraph = createMockFlamegraph({ profiles: [] });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `use_sentry: createMockTool("use_sentry", { skills: [] }),` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `* return createMcpHandler(server, { route: "/mcp" })(request, env, ctx);` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const rl = readline.createInterface({ input, output });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `* value: "SELECT * FROM products WHERE id = %s"` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `* - Alternative input methods (e.g., using issue URL vs org+issueId)` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet input: `Update the project '${FIXTURES.projectSlug}' in organization '${FIXTURES.organizationSlug}' ... Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	Dangerous function used (eval, exec, compile)	A RCE	—	—
Description Dangerous function used (eval, exec, compile) Code Snippet `const result = pattern.exec(url);` Remediation Avoid eval/exec; use safer alternatives like ast.literal_eval Confidence high Rule ID MCP-A004
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const options = createRefreshOptions({ refreshToken: undefined });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const options = createRefreshOptions({ accessTokenExpiresAt: nearExpiry });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `function createTestApp(env: Partial<Env> = {}) {` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	Dangerous function used (eval, exec, compile)	A RCE	—	—
Description Dangerous function used (eval, exec, compile) Code Snippet `exec(input?: (string \| URLPatternInit), baseURL?: string): URLPatternResult \| null;` Remediation Avoid eval/exec; use safer alternatives like ast.literal_eval Confidence high Rule ID MCP-A004
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const mockKV = createMockKV({ getResult: cachedData });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const mockKV = createMockKV({ getResult: null });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const mockKV = createMockKV({ getError: new Error("KV unavailable") });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	Dangerous function used (eval, exec, compile)	A RCE	—	—
Description Dangerous function used (eval, exec, compile) Code Snippet `exec(query: string): Promise<D1ExecResult>;` Remediation Avoid eval/exec; use safer alternatives like ast.literal_eval Confidence high Rule ID MCP-A004
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `function createTestApp(env: Partial<Env> = {}) {` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `Created: ${new Date(release.dateCreated).toISOString()}`, Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet output += `Created: ${attachment.attachment.dateCreated}\n`; Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet output += `Created: ${attachment.dateCreated}\n`; Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet console.warn(`⚠️ Skipping ${agentPath}: no valid YAML frontmatter found`); Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet input: `Create a new team in Sentry for '${FIXTURES.organizationSlug}' called 'the-goats' response w... Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet input: `Create a new project in Sentry for '${FIXTURES.organizationSlug}' called '${FIXTURES.project... Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet input: `Create a new DSN named "Production" for '${FIXTURES.organizationSlug}/${FIXTURES.projectSlug... Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `'db - INSERT INTO "sentry_fileblobindex" ("offset", "file_id", "blob_id") VALUES (%s, %s, %s) RETURN...` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `'db - SELECT "sentry_fileblob"."id", "sentry_fileblob"."path", "sentry_fileblob"."size", "sentry_fil...` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `- db - INSERT INTO "sentry_fileblobindex" ("offset", "file_id", "blob_id") VALUES (%s, %s, %s) RETUR...` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `'db - INSERT INTO "sentry_fileblobindex" ("offset", "file_id", "blob_id") VALUES (%s, %s, %s) RETURN...` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `'db - SELECT "sentry_fileblob"."id", "sentry_fileblob"."path", "sentry_fileblob"."size", "sentry_fil...` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `- db - INSERT INTO "sentry_fileblobindex" ("offset", "file_id", "blob_id") VALUES (%s, %s, %s) RETUR...` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `Failed to update project ${params.projectSlug}: ${err instanceof Error ? err.message : "Unknown err... Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `function createMockFlamegraph(overrides: Partial<Flamegraph> = {}): Flamegraph {` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet let output = `# Issue ${updatedIssue.shortId} Updated in ${orgSlug}\n\n`; Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const flamegraph = createMockFlamegraph({ profiles: [] });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `whoami: createWhoamiTool({ apiService: options.apiService }),` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const whoamiTool = createWhoamiTool({ apiService: options.apiService });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `function createMockFlamegraph(overrides: Partial<Flamegraph> = {}): Flamegraph {` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
critical	—	SQL string concatenation detected	D SQL Injection	—	—
Description SQL string concatenation detected Code Snippet `const flamegraph = createMockFlamegraph({ profiles: [] });` Remediation Use parameterized queries with placeholders Confidence high Rule ID MCP-D002
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Exfiltration pattern detected in tool or code	G Tool Poisoning	—	—
Description Exfiltration pattern detected in tool or code Code Snippet `* Identify and extract key entities from content in submitted audio` Remediation Remove instructions that request sensitive data extraction Confidence medium Rule ID MCP-G006
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `// // thus should behave as Durable Object namsepace bindings.` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	ML classifier detected prompt injection pattern	G Tool Poisoning	—	—
Description ML classifier detected prompt injection pattern Code Snippet `### Error\n\n${"```"}\n${message}\n${"```"}\n\n` Remediation Review and sanitize the detected text for potential injection attempts Confidence medium Rule ID MCP-ML-001
high	—	Exfiltration pattern detected in tool or code	G Tool Poisoning	—	—
Description Exfiltration pattern detected in tool or code Code Snippet `* (creating Issues), this sink uses Sentry.logger.* methods to send data to the` Remediation Remove instructions that request sensitive data extraction Confidence medium Rule ID MCP-G006
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `"Error with key: sk-abc123def456ghi789jkl012mno345pqr678stu901vwx234",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `"Keys: sk-abc123def456ghi789jkl012mno345pqr678stu901vwx234 and sk-xyz123def456gh...` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `"Not a key: sk-abc or task-abc123def456ghi789jkl012mno345pqr678stu901vwx234",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `"Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3...` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `apiKey: "sk-abc123def456ghi789jkl012mno345pqr678stu901vwx234",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `"API call with sk-abc123def456ghi789jkl012mno345pqr678stu901vwx234",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `"Failed to authenticate with sk-abc123def456ghi789jkl012mno345pqr678stu901vwx234...` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `"Multiple keys: sk-abc123def456ghi789jkl012mno345pqr678stu901vwx234 and sk-xyz12...` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `value: "sk-abc123def456ghi789jkl012mno345pqr678stu901vwx234",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// IMPORTANT: Do NOT use override:true as it would overwrite shell/CI environment variables` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Load local package .env first (for package-specific overrides)` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Load root .env second (for shared defaults - won't override local or shell vars)` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `// Sentry API scopes required to use the tool` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence high Rule ID MCP-G004
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Removed - now using createPerformanceEvent() factory from mocks with overrides` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `Culprit: Object.fetch(index)` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Override the issue fixture with a team assignment` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `Culprit: Object.fetch(index)` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `Culprit: Object.fetch(index)` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Override the handler to return null values (which can occur with certain tag types)` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// ─── URL mode with resourceType override ─────────────────...` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// ─── URL mode with resourceType override ─────────────────...` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const { response } = await safeFetch(PREVIEW_URL);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// We override with secure headers for .well-known endpoints and add CORS to robots.txt/llms.txt.` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await oAuthProvider.fetch(request, env, ctx);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `const TEST_SECRET = "test-cookie-secret-32-chars-long";` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `cookieSecret: "secret-1",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `COOKIE_SECRET: "test-secret",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `COOKIE_SECRET: "test-cookie-secret-key-for-hmac",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `COOKIE_SECRET: "test-cookie-secret-key-for-hmac",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const approvalResponse = await app.fetch(approvalRequest, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const approvalResponse = await app.fetch(approvalRequest, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const approvalResponse = await app.fetch(approvalRequest, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const approvalResponse = await app.fetch(approvalRequest, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const response = await app.fetch(request, testEnv as Env);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `SENTRY_CLIENT_SECRET: "test-client-secret",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `refreshToken: "invalid-refresh-token",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `refreshToken: "other-isolate-refresh-token",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `refreshToken: "other-isolate-refresh-token",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `client_secret: "test-secret",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `client_secret: "test-secret",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `client_secret: "test-secret",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `client_secret: "test-secret",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `fetch(input: RequestInfo \| URL, init?: RequestInit<RequestInitCfProperties>): Promise<Response>;` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `declare function fetch(input: RequestInfo \| URL, init?: RequestInit<RequestInitCfProperties>): Promise<Response>;` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `fetch(request: Request): Response \| Promise<Response>;` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `fetch(input: RequestInfo \| URL, init?: RequestInit): Promise<Response>;` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `* If true, a chat template is not applied and you must adhere to the specific model's expected forma...` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Build a dataset-agnostic system prompt` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet `// Use callEmbeddedAgent to translate the query with tool call capture` Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence medium Rule ID MCP-G004
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// System prompt for the search_issue_events agent` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Extended prompt injection pattern detected	G Tool Poisoning	—	—
Description Extended prompt injection pattern detected Code Snippet output += `⚠️ IMPORTANT: Display these issues as highlighted cards with status indicators, a... Remediation Review and remove suspicious instruction patterns from tool descriptions and code Confidence high Rule ID MCP-G004
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Provide organizationSlug explicitly (should NOT override since constraint injection doesn't overr...` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	ML classifier detected prompt injection pattern	G Tool Poisoning	—	—
Description ML classifier detected prompt injection pattern Code Snippet `You are evaluating whether an AI assistant with access to Sentry MCP tools would make the correct t... Remediation Review and sanitize the detected text for potential injection attempts Confidence medium Rule ID MCP-ML-001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// IMPORTANT: Do NOT use override:true as it would overwrite shell/CI environment variables` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Load local package .env first (for package-specific overrides)` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Load root .env second (for shared defaults - won't override local or shell vars)` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Type helper for deep partial overrides` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Hardcoded secret detected	E Secrets/Tokens	—	—
Description Hardcoded secret detected Code Snippet `secret: "154001fd3dfe38130e1c7948a323fad8",` Remediation Use environment variables or secret management system Confidence medium Rule ID MCP-E001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Skills precedence: CLI skills override env` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// Override: use only the specified skills` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	ML classifier detected prompt injection pattern	G Tool Poisoning	—	—
Description ML classifier detected prompt injection pattern Code Snippet `Usage: ${packageName} --access-token=<token> [--host=<host>] Required: --access-token <token> S... Remediation Review and sanitize the detected text for potential injection attempts Confidence high Rule ID MCP-ML-001
high	—	Tool description contains prompt injection markers	G Tool Poisoning	—	—
Description Tool description contains prompt injection markers Code Snippet `// IMPORTANT: Do NOT use override:true as it would overwrite shell/CI environment variables` Remediation Remove suspicious instructions from tool descriptions Confidence medium Rule ID MCP-G001
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const { response } = await safeFetch(PREVIEW_URL);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet const { response, data } = await safeFetch(`${PREVIEW_URL}/llms.txt`, {}); Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	Outbound connection to dynamically constructed URL	M Hidden Network	—	—
Description Outbound connection to dynamically constructed URL Code Snippet `const { response } = await safeFetch(PREVIEW_URL);` Remediation Use allowlist for outbound connections; declare all endpoints in manifest; avoid dynamic URL construction Confidence medium Rule ID MCP-M003
high	—	ML classifier detected prompt injection pattern	G Tool Poisoning	—	—
Description ML classifier detected prompt injection pattern Code Snippet `# Sentry MCP Server Connects AI assistants to Sentry for searching errors, analyzing performance, ... Remediation Review and sanitize the detected text for potential injection attempts Confidence medium Rule ID MCP-ML-001
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet console.log(` ${colors.yellow}⚠️ No tools enabled${colors.reset}`); Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Potential secret in variable name	E Secrets/Tokens	—	—
Description Potential secret in variable name Code Snippet `tokens` Remediation Avoid storing secrets in plaintext variables Confidence low Rule ID MCP-E002
medium	—	Potential secret in variable name	E Secrets/Tokens	—	—
Description Potential secret in variable name Code Snippet `[tokenResponse, errorResponse]` Remediation Avoid storing secrets in plaintext variables Confidence low Rule ID MCP-E002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet console.warn(`⚠️ Failed to read ${file} for index`); Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet console.log(`⏭️ Skipping ${namespace} (no registry.yaml found)`); Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet console.log(`⚠️ No registry.yaml found for namespace: ${namespace}`); Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet `- p99: 200ms (⚠️ High variance - some calls are very slow)` Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet `icon: "⚠️",` Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet `⚠️ Warning: Unsupported event type "future_ai_agent_trace"` Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Potential secret in variable name	E Secrets/Tokens	—	—
Description Potential secret in variable name Code Snippet `tokens` Remediation Avoid storing secrets in plaintext variables Confidence low Rule ID MCP-E002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet output += `⚠️ Warning: Unsupported event type "${String(eventType)}"\n\n`; Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet `minor_regression: "⚠️",` Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet `if (minorCount > 0) return "⚠️ Minor Performance Changes Detected";` Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet `- p99: ${formatDuration(leafFrame.frameInfo.p99Duration)}${insights.some((i) => i.type === "hig... Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet `\n ${colors.yellow}⚠️ ${totalTools - totalAccessibleTools} tool(s) are not accessible${colors... Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Potential secret in variable name	E Secrets/Tokens	—	—
Description Potential secret in variable name Code Snippet `authDataCookie` Remediation Avoid storing secrets in plaintext variables Confidence low Rule ID MCP-E002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet output += `⚠️ IMPORTANT: Display these aggregate results as a data table with proper column ... Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet output += `⚠️ IMPORTANT: Display these aggregate results as a data table with proper column ... Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet output += `⚠️ IMPORTANT: Display these aggregate results as a data table with proper column ... Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Potential secret in variable name	E Secrets/Tokens	—	—
Description Potential secret in variable name Code Snippet `tokenUrl` Remediation Avoid storing secrets in plaintext variables Confidence low Rule ID MCP-E002
medium	—	Potential secret in variable name	E Secrets/Tokens	—	—
Description Potential secret in variable name Code Snippet `{ client, server, state, cookieSecret }` Remediation Avoid storing secrets in plaintext variables Confidence low Rule ID MCP-E002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet `\n${colors.bright}${colors.yellow}⚠️ Warning: Orphaned Tools${colors.reset}`, Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet `⚠️ IMPORTANT: Display these issues as highlighted cards with status indicators, assignee inf...` Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Tool description contains suspicious Unicode characters	G Tool Poisoning	—	—
Description Tool description contains suspicious Unicode characters Code Snippet output += `⚠️ IMPORTANT: Display these issues as highlighted cards with status indicators, a... Remediation Remove Unicode control characters and confusables Confidence high Rule ID MCP-G002
medium	—	Potential secret in variable name	E Secrets/Tokens	—	—
Description Potential secret in variable name Code Snippet `{ values, positionals, tokens }` Remediation Avoid storing secrets in plaintext variables Confidence low Rule ID MCP-E002

MCP Surface Analysis

Attack Surface Analysis

Declared capabilities, transport security, and authentication posture

Tools

Resources

Transport

stdio

Auth

Not detected

Detected Capabilities

Inferred system access requirements from static analysis

8 checked

Declared Tools

0 total

No tools declared

This server does not expose any callable tools

Resources

0 total

No resources detected

This server does not expose any data resources

Transport Security

Insecure

Type: stdio
Protocol: Not detected
TLS / Encryption: Not Enabled

Authentication & Secrets

Authentication: Not Detected
Token in Environment: No
Secrets Detected: None Detected

No authentication mechanism detected. This server may accept unauthenticated connections.

OWASP MCP Top 10 (2025)

Risk assessment mapped to OWASP MCP security framework v0.1

OWASP Reference

Risk ID	Risk Name	Status	Related Controls	Findings
MCP01	Token Mismanagement & Secret Exposure Hard-coded credentials, long-lived tokens, secrets in logs	Vulnerable	2/3 controls pass	30
MCP02	Privilege Escalation via Scope Creep Weak scope enforcement, expanding permissions	Mitigated	1/1 controls pass	0
MCP03	Tool Poisoning Rug pulls, schema poisoning, tool shadowing	Vulnerable	1/2 controls pass	63
MCP04	Software Supply Chain Attacks Dependency tampering, build pipeline attacks	Mitigated	3/3 controls pass	0
MCP05	Command Injection & Execution Shell injection, chained execution, tool-mediated injection	Vulnerable	1/2 controls pass	54
MCP06	Prompt Injection via Contextual Payloads Hidden instructions in input, files, or retrieved documents	At Risk	3/4 controls pass	0
MCP07	Insufficient Authentication & Authorization Missing auth, shared secrets, token replay, impersonation	Not Assessed	No mapped controls	0
MCP08	Lack of Audit and Telemetry Insufficient logging, no traceability for autonomous workflows	Mitigated	1/1 controls pass	0
MCP09	Shadow MCP Servers Unauthorized instances outside security governance	Vulnerable	No mapped controls	37
MCP10	Context Injection & Over-Sharing Context window leaks, data exposure across sessions	Mitigated	2/2 controls pass	0

Based on OWASP MCP Top 10 v0.1 (2025). Controls and findings are mapped by category and keyword analysis.

184 total findings analyzed

Compliance Matrix

Level 0: Integrity Verified

Cert Level 0

Basic digest and schema validation only. No static analysis passed.

Next level requirements: Score ≥ 60, no critical findings, pass Level 1 controls

MSSS — MCP Server Security Standard

Certification level progression and control requirements · Score: 5/100 (Not Compliant)

MSSS Reference

Integrity Baseline

Static Verified Score ≥ 60

Security Certified Score ≥ 80

Runtime Certified Score ≥ 90

Level 1 -- Static Verified

21/26

Basic analysis, score ≥ 60, no critical findings

80%

No Critical Vulnerabilities
No High Vulnerabilities
No Secrets in Code
No SQL Injection
No Command Injection
No Path Traversal
No Insecure Deserialization
No XSS Vulnerabilities
Secure Cryptography
No Hardcoded Credentials
Compatible License
No Copyleft License
No Deprecated Dependencies
Pinned Dependencies
Known Supply Chain
Code Quality
Error Handling
Input Validation
Logging
No Prompt Injection
No Tool Poisoning
No Remote Code Execution
No SSRF or Data Exfiltration
No Privilege Escalation
No Cross-Tool Data Leakage
No Hidden Network Channels

Level 2 -- Security Certified

0/0

Full analysis, score ≥ 80, SBOM evidence required

Level 3 -- Runtime Certified

0/0

Score ≥ 90, dynamic analysis, full attestation chain

MSSS Controls Detail

Individual control results grouped by security category

Control	Status	Severity	Evidence
No Critical Vulnerabilities SEC-001	PASS		Control passed: No significant issues found
No High Vulnerabilities SEC-002	PASS		Control passed: No significant issues found
No Secrets in Code SEC-003	FAIL	HIGH	Control failed: 30 findings found, score 50.0
No SQL Injection SEC-004	FAIL	CRITICAL	Control failed: 51 findings found, score 50.0
No Command Injection SEC-005	PASS		Control passed: No significant issues found
No Path Traversal SEC-006	PASS		Control passed: No significant issues found
No Insecure Deserialization SEC-007	PASS		Control passed: No significant issues found
No XSS Vulnerabilities SEC-008	PASS		Control passed: No significant issues found
Secure Cryptography SEC-009	PASS		Control passed: No significant issues found
No Hardcoded Credentials SEC-010	PASS		Control passed: No significant issues found
Compatible License SC-001	PASS		Control passed: No significant issues found
No Copyleft License SC-002	PASS		Control passed: No significant issues found
No Deprecated Dependencies SC-003	PASS		Control passed: No significant issues found
Pinned Dependencies SC-004	PASS		Control passed: No significant issues found
Known Supply Chain SC-005	PASS		Control passed: No significant issues found
Code Quality MAT-001	PASS		Control passed: No significant issues found
Error Handling MAT-002	PASS		Control passed: No significant issues found
Input Validation MAT-003	PASS		Control passed: No significant issues found
Logging MAT-004	PASS		Control passed: No significant issues found
No Prompt Injection SEC-011	PASS		Control passed: No significant issues found
No Tool Poisoning SEC-012	FAIL	HIGH	Control failed: 63 findings found, score 50.0
No Remote Code Execution SEC-013	FAIL	CRITICAL	Control failed: 3 findings found, score 50.0
No SSRF or Data Exfiltration SEC-014	PASS		Control passed: No significant issues found
No Privilege Escalation SEC-015	PASS		Control passed: No significant issues found
No Cross-Tool Data Leakage SEC-016	PASS		Control passed: No significant issues found
No Hidden Network Channels SEC-017	FAIL	HIGH	Control failed: 37 findings found, score 50.0

Details

Repository: https://github.com/getsentry/sentry-mcp
Sprache
Lizenz
Neueste Version: commit-b2d6c7b-2026-03-01
Zuletzt aktualisiert: Mar 1, 2026

Score Badge

Add this badge to your README.

[![MCP Hub](https://mcp-hub.info/badge/_/sentry.svg)](https://mcp-hub.info/mcp/_/sentry)

Capabilities

Filesystem Network Command Execution Code Evaluation Database Secrets LLM Access Environment

View full details →

Versionen

Analysis Metadata

Toolchain Version: mcp-scan:1.0.0
Analyzed: 2026-02-25 19:45:01

Schnellinstallation

Integrity Verified

Not Recommended for Production

Vulnerability Summary

Score Breakdown

OWASP MCP Top 10 View full details →

MSSS Certification Level

Sicherheitskontrollen

Other Controls

Security Findings

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description

Code Snippet

Remediation

Description