← MCP Security Catalog

Specifai MCP Server 0.5.1

npm · @presidio-dev/specifai-mcp-server · latest release

Scan failed
Security result
13
Observed tools
39
Version rating
100
Change risk

Independent inventory

Observed 2026-08-17T17:51:08.222Z using mcpSecurity-inventory. Protocol 2024-11-05.

ToolCategoryRisk
get-bpdsGet Business Process Documents for this project
Input schema
{
  "type": "object",
  "properties": {
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    }
  },
  "includeDescription": {
    "type": "boolean",
    "description": "Include description in the output, default is false"
  },
  "limit": {
    "type": "number",
    "description": "Limit the number of documents to return, default 10"
  },
  "offset": {
    "type": "number",
    "description": "Offset the number of documents to return, default is 0"
  },
  "required": [
    "cwd"
  ]
}
——
get-brdsGet Business Requirement Documents for this project, returns ID, Title, Description(not included by default)
Input schema
{
  "type": "object",
  "properties": {
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    },
    "includeDescription": {
      "type": "boolean",
      "description": "Include description in the output, default is false"
    },
    "limit": {
      "type": "number",
      "description": "Limit the number of documents to return, default is 10"
    },
    "offset": {
      "type": "number",
      "description": "Offset the number of documents to return, default is 0"
    }
  },
  "required": [
    "cwd"
  ]
}
——
get-nfrsGet Non-Functional Requirement Documents for this project, returns ID, Title, Description(not included by default)
Input schema
{
  "type": "object",
  "properties": {
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    },
    "includeDescription": {
      "type": "boolean",
      "description": "Include description in the output, default is false"
    },
    "limit": {
      "type": "number",
      "description": "Limit the number of documents to return, default is 10"
    },
    "offset": {
      "type": "number",
      "description": "Offset the number of documents to return, default is 0"
    }
  },
  "required": [
    "cwd"
  ]
}
——
get-prdsGet Product Requirement Documents for this project, returns ID, Title, Description(not included by default), Ado Id (When PRD/US/Task is linked to ADO), Jira Id (When PRD/US/Task is linked to JIRA), PMO Id(when available), Ado Issue Type(when available), Jira Issue Type(when available), and LinkedBRDIds (when available)
Input schema
{
  "type": "object",
  "properties": {
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    },
    "includeDescription": {
      "type": "boolean",
      "description": "Include description in the output, default is false"
    },
    "limit": {
      "type": "number",
      "description": "Limit the number of documents to return, default is 10"
    },
    "offset": {
      "type": "number",
      "description": "Offset the number of documents to return, default is 0"
    },
    "includeUserStories": {
      "type": "boolean",
      "description": "Include user stories in the output each user stories will include ID and Title, Description will not be included, default is false"
    },
    "includeTasks": {
      "type": "boolean",
      "description": "Include tasks in the output each task will include ID and Title, Description will not be included, default is false"
    }
  },
  "required": [
    "cwd"
  ]
}
——
get-taskGet list of Tasks for a particular User Story in a particular PRD
Input schema
{
  "type": "object",
  "required": [
    "prdId",
    "userStoryId",
    "taskId",
    "cwd"
  ],
  "properties": {
    "prdId": {
      "type": "string",
      "description": "The ID of the PRD to get user stories for, PRD ID convention is PRD<PRD Number>, PRD number is zero padded with minimum 2 digits, e.g. PRD01, PRD12, PRD103, etc."
    },
    "userStoryId": {
      "type": "string",
      "description": "The ID of the User Story to get tasks for, US ID convention is US<US Number>, US number is non zero padded, e.g. US1, US12, US103, etc."
    },
    "taskId": {
      "type": "string",
      "description": "The ID of the Task to get, TASK ID convention is TASK<TASK Number>, TASK number is non zero padded, e.g. TASK1, TASK12, TASK103, etc."
    },
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    }
  }
}
——
get-task-by-idRetrieves complete information about a specific task when you know its exact ID. This tool provides direct access to a single task's details without having to retrieve and filter through all tasks., returns full task object, ID, Title, Description, Ado Id (When Task is linked to ADO), Jira Id (When Task is linked to JIRA), PMO Id(when available), Ado Issue Type(when available), Jira Issue Type(when available)
Input schema
{
  "type": "object",
  "required": [
    "taskId",
    "cwd"
  ],
  "properties": {
    "taskId": {
      "type": "string",
      "description": "The unique identifier for the task you want to retrieve Must follow the format: TASK followed by a number without leading zeros Examples: TASK1 TASK12, TASK103 Note: The number portion is NOT zero-padded (use TASK1, not TASK01), Convert the Task ID to mentioned format to use this tool."
    },
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    }
  }
}
——
get-tasksGet Tasks for a particular User Story
Input schema
{
  "type": "object",
  "required": [
    "prdId",
    "userStoryId",
    "cwd"
  ],
  "properties": {
    "prdId": {
      "type": "string",
      "description": "The ID of the PRD to get user stories for, PRD ID convention is PRD<PRD Number>, PRD number is zero padded with minimum 2 digits, e.g. PRD01, PRD12, PRD103, etc."
    },
    "userStoryId": {
      "type": "string",
      "description": "The ID of the User Story to get tasks for, US ID convention is US<US Number>, US number is non zero padded, e.g. US1, US12, US103, etc."
    },
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    }
  }
}
——
get-tcsGet Test Case Documents for this project
Input schema
{
  "type": "object",
  "properties": {
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    },
    "includeDescription": {
      "type": "boolean",
      "description": "Include description in the output, default is false"
    },
    "limit": {
      "type": "number",
      "description": "Limit the number of documents to return, default is 10"
    },
    "offset": {
      "type": "number",
      "description": "Offset the number of documents to return, default is 0"
    }
  },
  "required": [
    "cwd"
  ]
}
——
get-uirsGet User Interface Requirement Documents for this project
Input schema
{
  "type": "object",
  "properties": {
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    },
    "includeDescription": {
      "type": "boolean",
      "description": "Include description in the output, default is false"
    },
    "limit": {
      "type": "number",
      "description": "Limit the number of documents to return, default is 10"
    },
    "offset": {
      "type": "number",
      "description": "Offset the number of documents to return, default is 0"
    }
  },
  "required": [
    "cwd"
  ]
}
——
get-user-storiesGet User Stories for a particular PRD
Input schema
{
  "type": "object",
  "required": [
    "prdId",
    "cwd"
  ],
  "properties": {
    "prdId": {
      "type": "string",
      "description": "The ID of the PRD to get user stories for, PRD ID convention is PRD<PRD Number>, PRD number is zero padded with minimum 2 digits, e.g. PRD01, PRD12, PRD103, etc."
    },
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    }
  }
}
——
list-all-tasksList all the tasks available across all PRDs and User Stories, without task description, only return ID, Title, Ado Id (When Task is linked to ADO), Jira Id (When Task is linked to JIRA), PMO Id(when available), Ado Issue Type(when available), Jira Issue Type(when available)
Input schema
{
  "type": "object",
  "required": [
    "cwd"
  ],
  "properties": {
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    },
    "limit": {
      "type": "number",
      "description": "Limit the number of documents to return, default is 10"
    },
    "offset": {
      "type": "number",
      "description": "Offset the number of documents to return, default is 0"
    }
  }
}
——
searchSearch documents by text content or Pmo ID across all documents, returns document ID, Title, Description, Type, Ado Id (When PRD/US/Task is linked to ADO), Jira Id (When PRD/US/Task is linked to JIRA), PMO Id(when available), Ado Issue Type(when available), Jira Issue Type(when available)
Input schema
{
  "type": "object",
  "required": [
    "searchTerm",
    "cwd"
  ],
  "properties": {
    "searchTerm": {
      "type": "string",
      "description": "The search term to search for"
    },
    "type": {
      "type": "string",
      "description": "Optional type of document to search in, valid values are: PRD, BRD, NFR, UIR, TC, BP, US, TASK"
    },
    "cwd": {
      "type": "string",
      "description": "Absolute path where the tool is called from and containing the `.specifai-path` file to auto-infer the specifai project path. This path will be current working directory (cwd) from where the tool is called."
    }
  }
}
——
set-project-pathUpdate the project path and reload the solution. use this tool only when we not automatically able to infer the project path or asked by the user or us., we will try to auto infer it from the environment first.
Input schema
{
  "type": "object",
  "required": [
    "path"
  ],
  "properties": {
    "path": {
      "type": "string",
      "description": "The absolute path to a directory containing specifai specification files."
    }
  }
}
——

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

Compared with initial baseline using full_baseline.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: 57a200c70e225f35a9c4fb7107ce7e45ae1bc12eda56eb2ea9353f5f9a785525

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.