Understanding Reports

Learn how to read and interpret MCPSafe security scan reports in different formats.

Report Contents

Summary

Overview of the scan including total vulnerabilities by severity and overall security grade.

Security Grade (A+ to F)

Total vulnerability count

Breakdown by severity

Files analyzed

Scan duration

Vulnerability Details

Detailed information about each finding including location, description, and remediation.

Rule ID and title

Severity level

File path and line number

Code snippet

CWE classification

CVSS score

Remediation guidance

Quality Metrics

Code quality scores across multiple dimensions beyond security.

Maintenance score

Popularity metrics

Documentation quality

Compatibility score

Output Formats

JSON Format

Default API response format with complete vulnerability details.

scan-results.json

{
  "success": true,
  "data": {
    "id": "scan_abc123",
    "status": "completed",
    "results": {
      "securityScore": 72,
      "grade": "B",
      "vulnerabilities": {
        "critical": 0,
        "high": 1,
        "medium": 2,
        "low": 3,
        "info": 5,
        "total": 11
      }
    },
    "vulnerabilities": [
      {
        "id": "vuln_xyz789",
        "ruleId": "CMD001",
        "title": "child_process.exec() with User Input",
        "severity": "high",
        "category": "command_injection",
        "location": {
          "filePath": "src/handlers/files.ts",
          "lineNumber": 45,
          "columnNumber": 12
        },
        "codeSnippet": "exec(`cat ${filename}`)",
        "cweId": "CWE-78",
        "cvssScore": 8.1,
        "remediation": "Use execFile() with arguments array..."
      }
    ]
  }
}

Best for:

Custom integrations and tooling
Programmatic access to results
Data processing and analysis