grep.app MCP

https://mcp.grep.app

Score

A98

Findings

Tools

Last scan

2026-06-05

Severity breakdown

Critical0

High0

Medium1

Low0

Info0

Worst finding

Tool `searchGitHub` accepts unconstrained string input

· searchGitHub

The following string parameter(s) have no `maxLength` constraint: `path`, `query`, `repo`. Unbounded strings let an attacker stuff arbitrary payloads through the tool, including indirect-injection content.

fix: Add a `maxLength` to each string property, or constrain with an `enum` or `pattern`. Most legitimate tool inputs fit under a few hundred bytes.

All 1 finding

medium
Tool `searchGitHub` accepts unconstrained string input· searchGitHubunconstrained input
The following string parameter(s) have no `maxLength` constraint: `path`, `query`, `repo`. Unbounded strings let an attacker stuff arbitrary payloads through the tool, including indirect-injection content.
fix: Add a `maxLength` to each string property, or constrain with an `enum` or `pattern`. Most legitimate tool inputs fit under a few hundred bytes.

How this was scored

Source http — live HTTP MCP endpoint, classified against every rule. Findings are emitted by the public capframe.findings.v1 schema. Score = 100 − (10·Critical + 4·High + 2·Medium + 1·Low), clamped to [0, 100].

Disagree with a finding? Open an issue.