Skip to content
This repository was archived by the owner on Jul 21, 2025. It is now read-only.

Conversation

@lwsinclair
Copy link

Hi there,

This pull request shares a security update on dvmcp.

We also have an entry for dvmcp in our directory, MseeP.ai, where we provide regular security and trust updates on your app.

We invite you to add our badge for your MCP server to your README to help your users learn from a third party that provides ongoing validation of dvmcp.

You can easily take control over your listing for free: visit it at https://mseep.ai/app/gzuuus-dvmcp.

Yours Sincerely,

Lawrence W. Sinclair
CEO/SkyDeck AI
Founder of MseeP.ai
MCP servers you can trust


MseeP.ai Security Assessment Badge

Here are our latest evaluation results of dvmcp

Security Scan Results

Security Score: 75/100

Risk Level: moderate

Scan Date: 2025-06-13

Score starts at 100, deducts points for security issues, and adds points for security best practices

Security Findings

Medium Severity Issues

  • semgrep: Insecure WebSocket Detected. WebSocket Secure (wss) should be used for all WebSocket connections.

    • Location: packages/dvmcp-bridge/config.example.yml
    • Line: 5
  • semgrep: Insecure WebSocket Detected. WebSocket Secure (wss) should be used for all WebSocket connections.

    • Location: packages/dvmcp-bridge/src/config-schema.ts
    • Line: 19
  • ... and 3 more medium severity issues

This security assessment was conducted by MseeP.ai, an independent security validation service for MCP servers. Visit our website to learn more about our security reviews.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant