← MCP Security Catalog

infimium 0.5.9

npm · infimium · latest release

Scan failed
Security result
11
Observed tools
32
Version rating
100
Change risk

Independent inventory

Observed 2026-08-15T20:15:41.421Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
dep_graphInspect dependency relationships for a symbol.
Input schema
{
  "type": "object",
  "properties": {
    "symbol_name": {
      "type": "string"
    },
    "project_path": {
      "type": "string"
    }
  },
  "required": [
    "symbol_name"
  ],
  "additionalProperties": false
}
expand_symbolLoad the full implementation of one symbol returned by semantic_code_search.
Input schema
{
  "type": "object",
  "properties": {
    "symbol_name": {
      "type": "string"
    },
    "file_path": {
      "type": "string"
    },
    "project_path": {
      "type": "string"
    }
  },
  "required": [
    "symbol_name"
  ],
  "additionalProperties": false
}
fetch_urlFetch a URL and extract readable content.
Input schema
{
  "type": "object",
  "properties": {
    "url": {
      "type": "string"
    },
    "extract": {
      "type": "string",
      "enum": [
        "text",
        "markdown"
      ],
      "default": "markdown"
    }
  },
  "required": [
    "url"
  ],
  "additionalProperties": false
}
get_contextRead the balanced YAML context layer with repo overview, Git state, task, memory, and AST-first handoff guidance. Pass project_path once to activate the current IDE workspace as the default.
Input schema
{
  "type": "object",
  "properties": {
    "refresh": {
      "type": "boolean",
      "default": true
    },
    "limit": {
      "type": "number",
      "default": 8
    },
    "format": {
      "type": "string",
      "enum": [
        "yaml",
        "json"
      ],
      "default": "yaml"
    },
    "project_path": {
      "type": "string"
    }
  },
  "additionalProperties": false
}
hello_infimiumHealth probe for the Infimium MCP server.
Input schema
{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}
planGenerate a grounded implementation plan for the current repository.
Input schema
{
  "type": "object",
  "properties": {
    "task": {
      "type": "string"
    },
    "dry_run": {
      "type": "boolean",
      "default": false
    },
    "write_plan": {
      "type": "boolean",
      "default": false
    },
    "output_path": {
      "type": "string",
      "default": "plan.md"
    },
    "top_k": {
      "type": "number",
      "default": 5
    },
    "language": {
      "type": "string"
    },
    "project_path": {
      "type": "string"
    }
  },
  "required": [
    "task"
  ],
  "additionalProperties": false
}
project_memoryManage compact project memory across chats, agents, and IDEs: remember active work, complete and archive sessions, search history, or update durable rules.
Input schema
{
  "type": "object",
  "properties": {
    "action": {
      "type": "string",
      "enum": [
        "resume",
        "remember",
        "complete",
        "search",
        "ledger",
        "supersede"
      ],
      "default": "resume"
    },
    "note": {
      "type": "string"
    },
    "task": {
      "type": "string"
    },
    "event_type": {
      "type": "string",
      "enum": [
        "note",
        "progress",
        "decision",
        "blocker",
        "index",
        "plan"
      ],
      "default": "note"
    },
    "limit": {
      "type": "number",
      "default": 8
    },
    "project_path": {
      "type": "string"
    },
    "query": {
      "type": "string"
    },
    "key": {
      "type": "string"
    },
    "value": {
      "type": "string"
    },
    "category": {
      "type": "string",
      "enum": [
        "decision",
        "rule",
        "quirk",
        "blocker"
      ]
    },
    "use_model": {
      "type": "boolean",
      "default": true
    }
  },
  "additionalProperties": false
}
query_local_docsQuery indexed local documentation.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string"
    },
    "top_k": {
      "type": "number",
      "default": 5
    },
    "project_path": {
      "type": "string"
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false
}
semantic_code_searchSearch code semantically and return compact symbol signatures.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string"
    },
    "language": {
      "type": "string"
    },
    "top_k": {
      "type": "number",
      "default": 5
    },
    "project_path": {
      "type": "string"
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false
}
shellRun an allowlisted shell command.
Input schema
{
  "type": "object",
  "properties": {
    "command": {
      "type": "string"
    },
    "cwd": {
      "type": "string"
    },
    "timeout": {
      "type": "number",
      "default": 30
    }
  },
  "required": [
    "command"
  ],
  "additionalProperties": false
}
web_searchSearch the web for current information.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string"
    },
    "max_results": {
      "type": "number",
      "default": 5
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false
}

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

Compared with initial baseline using full_baseline.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 0f31b0e73f9bb7d0280f11894bca2bb3ae7e5c3a7560ab43f04e5a999735c2ca

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.