Tracked packageView full profile for tavily-mcp

MCPSafe.io

Security pre-install checks for MCP servers.

Mostly safe — a couple of notes worth reading.

Compare to another server

github · tavily-mcpHEAD

Item: tavily-mcp
Rating: 4
Author: MCPSafe

Scanned 5/3/2026, 6:52:43 PM·Cached result·Fast Scan·45 rules·How we decide ↗

AIVSS Score

3.2/ 10

Low

Severity Breakdown

critical

high

medium

low

MCP Server Information

Packagetavily-mcp

VersionHEAD

SourceGITHUB

LicenseMIT

Publishertavily-ai

Package age1y 3m

Stars1.9K

Downloads/wk—

Dependencies0

Repositoryhttps://github.com/tavily-ai/tavily-mcp

Findings

2 of 2 findings

medium (2)

2 findings

medium (2)

AIVSS 2.3CVSS 3.5

Package declares an install-time hook (npm postinstall/preinstall/prepare, setup.py cmdclass override, custom setuptools install class, or non-default pyproject build-backend). Anyone installing this package runs the hook. Confirm the hook is necessary and review its contents; prefer shipping a plain library without install-time execution.

Evidence

],
  "scripts": {
    "build": "tsc && node -e \"require('fs').chmodSync('build/index.js', '755')\"",
    "prepare": "npm run build",
    "watch": "tsc --watch",
    "inspector": "npx @modelcontextprotocol/inspector build/index.js",
    "prepublishOnly": "npm run build"

Remediation

Prefer libraries that do not require install-time code execution: - Drop `postinstall`/`preinstall`/`prepare` scripts if the work can happen at runtime or build-time instead. - Ship pre-built native binaries rather than compiling via a custom `cmdclass` or `build_ext` override. - For Dockerfiles: replace `RUN curl … | sh` with a pinned download + checksum verification + explicit `RUN` of a named script. - If the hook is unavoidable, document exactly what it does so downstream reviewers

Report false positive

AIVSS 3.2CVSS 4.4

Dockerfile never sets a non-root `USER` directive, so the CMD runs as root by default. Any RCE or library-level vulnerability exploited inside this container gets full privileges (MCP Top-10 R3). Add `USER <non-root>` before CMD / ENTRYPOINT in the final stage — e.g. `USER 1000`, `USER nobody`, or `USER nonroot` on distroless.

Evidence

FROM node:22.12-alpine AS builder

COPY . /app

WORKDIR /app

RUN --mount=type=cache,target=/root/.npm npm install

FROM node:22-alpine AS release

WORKDIR /app

COPY --from=builder /app/build /app/build
COPY --from=builder /app/package.json /app/package.json
COPY --from=builder /app/package-lock.json /app/package-lock.json

ENV NODE_ENV=production
ENV TAVILY_API_KEY=your-api-key-here

RUN npm ci --ignore-scripts --omit-dev

ENTRYPOINT ["node", "build/index.js"]

Remediation

Create and switch to a non-root user before the CMD / ENTRYPOINT: RUN adduser --system --uid 1000 app USER 1000 Or reuse the base image's shipped non-root account (e.g. `USER nobody`, `USER nonroot` on distroless). Multi-stage builds only need the USER directive in the final stage.

Report false positive

LLM summary— tavily-mcp:HEAD

This package earns a B grade with a safety score of 92/100, but carries moderate risk from two medium-severity issues: one related to server configuration and another involving an insecure container image. While no critical or high-severity vulnerabilities were found, you should address the container image security concern and review the server configuration settings before deployment.

Signal scores

Static100

CVE check100

Publisher identity50

Permissions100

Supply chain84

Typosquat100

Package health85

Community82

Secrets & exfil100

Injection risks100

Destructive ops100

LLM judge panel

CVE check

No known CVEs found for this package or its dependencies.

Community trust

No community reports

Security policy: Not found
Advisories: 0

Scan details

Total findings: 2
Affected tools: 0 / 1
Scan type: Fast Scan
Rules run: 45
LLM consensus score: N/A
Scanned: 61d ago
Source: GITHUB

MCP Server Information

Source: GITHUB
Package: tavily-mcp
Version: HEAD
License: MIT
Publisher: tavily-ai
Verified: No
Account age: 1y 11m
Added: 1y 3m ago
Versions: 1897
Repository: https://github.com/tavily-ai/tavily-mcp
Ecosystem: GitHub
Stars: 1.9K
Forks: 256
Open issues: 36
Dependencies: 0

AIVSS Score

3.2/ 10Low

Internal score: 92/100

Severity breakdown

Scan Details

Total findings2

Affected tools0 / 1

Scanned61d ago

Scan modeFAST

SourceGITHUB

Scan IDpubfast9a2858e6dae604bf5232

Want deeper analysis?

Fast scan found 2 findings using rule-based analysis. Upgrade for LLM consensus across 5 judges, AI-generated remediation, and cross-file taint analysis.

View plans Scan another package

Building your own MCP server?

Run this exact engine on your private repo — before users see it on /scan.

Same rules, same LLM judges, same grade. Private scans stay isolated to your account and never appear in the public registry. Required for code your team hasn’t shipped yet.

See plans with Private scans How private scans stay private

2 of 2 findings

medium (2)

2 findings

medium (2)

AIVSS 2.3CVSS 3.5

Evidence

],
  "scripts": {
    "build": "tsc && node -e \"require('fs').chmodSync('build/index.js', '755')\"",
    "prepare": "npm run build",
    "watch": "tsc --watch",
    "inspector": "npx @modelcontextprotocol/inspector build/index.js",
    "prepublishOnly": "npm run build"

Remediation

Report false positive

AIVSS 3.2CVSS 4.4

Evidence

FROM node:22.12-alpine AS builder

COPY . /app

WORKDIR /app

RUN --mount=type=cache,target=/root/.npm npm install

FROM node:22-alpine AS release

WORKDIR /app

COPY --from=builder /app/build /app/build
COPY --from=builder /app/package.json /app/package.json
COPY --from=builder /app/package-lock.json /app/package-lock.json

ENV NODE_ENV=production
ENV TAVILY_API_KEY=your-api-key-here

RUN npm ci --ignore-scripts --omit-dev

ENTRYPOINT ["node", "build/index.js"]

Remediation

Report false positive

16	],
17	"scripts": {
18	"build": "tsc && node -e \"require('fs').chmodSync('build/index.js', '755')\"",
19	"prepare": "npm run build",
20	"watch": "tsc --watch",
21	"inspector": "npx @modelcontextprotocol/inspector build/index.js",
22	"prepublishOnly": "npm run build"

1	FROM node:22.12-alpine AS builder
2
3	COPY . /app
4
5	WORKDIR /app
6
7	RUN --mount=type=cache,target=/root/.npm npm install
8
9	FROM node:22-alpine AS release
10
11	WORKDIR /app
12
13	COPY --from=builder /app/build /app/build
14	COPY --from=builder /app/package.json /app/package.json
15	COPY --from=builder /app/package-lock.json /app/package-lock.json
16
17	ENV NODE_ENV=production
18	ENV TAVILY_API_KEY=your-api-key-here
19
20	RUN npm ci --ignore-scripts --omit-dev
21
22	ENTRYPOINT ["node", "build/index.js"]