Registry/Heroku MCP Server

Heroku MCP Server

v1.2.5

Verified

Heroku Platform MCP Server

Apache-2.0

other

80stars

27.1Kdownloads

30forks

Scanned Jul 13, 2026

Website Repository GITHUB

F0%

Scanned 6d ago

Critical Issues

Vulnerabilities Found

23Crit

69High

115Med

1Low

0Info

Security ScoreF

out of 100

Vulnerabilities Found

Crit

High

115

Medi

Low

Info

Last scanned: 7/13/2026

Quality ScoreC

out of 100

Maint.

Popular

Docs

Compat

Maintenance62%

Popularity65%

Documentation20%

Compatibility67%

Maintenance62

Unknown

Commit Frequency65%

Release Frequency70%

Issue Response45%

Popularity65

Stars

27.1K

Downloads

Forks

Stars Score53%

Downloads Score80%

Forks Score52%

Documentation20

README Quality20%

Available Documentation

API DocsExamplesChangelog

Compatibility67

MCP Spec Compliance80%

Transport Support50%

Features

TypeScript

Agentic MCP Risk Intelligence

MCPSafe checks risks unique to AI-connected MCP servers — prompt surfaces, model-controlled tools, credentials, filesystems, and network reachability.

agentic findings

No advanced MCP issues detected

The current scan did not find prompt-injection, agent command, exfiltration, unbounded filesystem, or MCP SSRF patterns.

Prompt Injection Surface

Tool metadata can steer or hijack AI clients before a user invokes the tool.

AI → Command Execution

Model-selected tool arguments can reach shell/process execution.

Secret Exfiltration Path

Tool context combines credential access with outbound network capability.

Unbounded Filesystem

AI-controlled paths may access files outside the intended workspace.

Agent SSRF

AI-controlled URLs may reach local, metadata, or internal network services.

Vulnerabilities(208)

23Critical

69High

115Medium

1Low

Filter:

README

No README available for this server.

View repository

Embed Security Badge

Add this badge to your README or documentation

Badge Type

Style

[![Heroku MCP Server MCPSafe Security](https://api.mcpsafe.org
/api/badge/heroku-mcp-server.svg)](https://mcpsafe.org/registry/heroku-mcp-server)

Need more customization options?Badge Documentation

Server Information

Source: GITHUB
Package: @heroku/mcp-server
Version: 1.2.5
License: Apache-2.0
Added: Jan 27, 2026
Updated: Jul 13, 2026

Actions

Compare with other servers Request rescan

Heroku MCP Server

Security ScoreF

Vulnerabilities Found

Quality ScoreC

Maintenance62

Popularity65

Documentation20

Available Documentation

Compatibility67

Features

Agentic MCP Risk Intelligence

Vulnerabilities(208)

Hardcoded Credentials Detected

Hardcoded Credentials Detected

Hardcoded Credentials Detected

Hardcoded Credentials Detected

Potential Command Injection

Hardcoded Credentials Detected

child_process.exec() with User Input

eval() with External Input

eval() with External Input

eval() with External Input

Hardcoded Credentials Detected

Hardcoded Credentials Detected

Hardcoded Credentials Detected

Hardcoded Credentials Detected

Hardcoded Credentials Detected

Hardcoded Credentials Detected

Hardcoded Credentials Detected

Potential Command Injection

Potential Command Injection

Potential Command Injection

Hardcoded Credentials Detected

Hardcoded Credentials Detected

Hardcoded Credentials Detected

fs Operation with User-Controlled Path

HTTP Request with User-Controlled URL

HTTP Request with User-Controlled URL

HTTP Request with User-Controlled URL

HTTP Request with User-Controlled URL

HTTP Request with User-Controlled URL

HTTP Request with User-Controlled URL

HTTP Request with User-Controlled URL

HTTP Request with User-Controlled URL

HTTP Request with User-Controlled URL

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

fs Operation with User-Controlled Path

fs Operation with User-Controlled Path

fs Operation with User-Controlled Path

fs Operation with User-Controlled Path

path.join() with User Input

fs Operation with User-Controlled Path

fs Operation with User-Controlled Path

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

path.join() with User Input

fs Operation with User-Controlled Path

fs Operation with User-Controlled Path

fs Operation with User-Controlled Path

fs Operation with User-Controlled Path

path.join() with User Input

path.join() with User Input

fs Operation with User-Controlled Path