AI SDK MCP Server

This grade comes from an automated MCPSafe scan of the server's JavaScript, TypeScript and Python source on 2026-10-02. The repository is too large to scan in full, so only the MCP server's own packages were scanned: packages/harness-acp/src/v1/bridge, packages/harness-claude-code/src/bridge, packages/harness-opencode/src/bridge (57 of 2,849 files). The grade says nothing about the rest of the repository. It checks for leaked credentials, shell or code injection from function inputs, unsafe deserialization, malware signatures, install-time scripts, and weak password handling. It does not check for path traversal, server-side request forgery, prompt injection in tool descriptions, network exposure, SQL injection, cross-site scripting, or vulnerable dependencies. It has not been manually reviewed, and the code may have changed since the scan.