ToolProof Trust Profile

ai-smithery-infranodus-mcp-server-infranodus

High-impact capability. Restrict to sandbox/test resources and avoid production credentials.

100risk score
Connect With Limitsconnection signal
destructive_capabilityrisk type
86evidence score
Source: https://github.com/infranodus/mcp-server-infranodus
Registry: ai.smithery/infranodus-mcp-server-infranodus 1.0.0

Connection signal

High-impact capability. Restrict to sandbox/test resources and avoid production credentials.

Observed tools

  • None observed in this static profile.

Top findings

  • Detected capability: environment_access — bin/infranodus-mcp-server.js:13
  • References credential or secret pattern: JWT_SECRET — render.yaml:19
  • References credential or secret pattern: API_KEY_GENERIC — bin/infranodus-mcp-server.js:13

Recommended controls

  • Install in a sandbox before team or production use.
  • Pin the exact package/repository version.
  • Review install scripts, Dockerfile behavior, and dependency pins.
  • Do not use production credentials during first install.
  • Restrict filesystem, repository, cloud, and database scope.
  • Require human approval for destructive actions.

Static analysis can miss behavior. This profile is an connection review signal, not production approval.