⚠️ This snapshot is over 30 days old — treat the grade as stale until the next refresh. Re-scan locally to verify.
Trust Card · Static snapshot
makenotion__notion-mcp-server C
73/100 · 4 findings (0 critical) · scope broad · Ranked #30 of 53 scanned.
Scanned 2026-09-09 · engine v0.1.0 (8 regex rules, OWASP-mapped) · upstream makenotion/notion-mcp-server @ 1d38420 (2026-07-25)
Score breakdown
Score constrained by broad permissions (broad scope).
Fix first (0 critical/high)
| Severity | Rule | Finding | Remediation |
|---|---|---|---|
| MEDIUM | AT-SEC-007 (LLM02) | Raw Secret Leakage in Debug Loggingscripts/start-server.ts:54Evidence: console.log(`Generated auth token written to: ${authTokenFilePath}`) | Implement PII/secret redaction masks before writing to log streams. |
| MEDIUM | AT-SEC-007 (LLM02) | Raw Secret Leakage in Debug Loggingscripts/start-server.ts:150Evidence: console.log(`Initializing session with per-request Notion token ${redactToken(resolution.token)}`) | Implement PII/secret redaction masks before writing to log streams. |
| MEDIUM | AT-SEC-007 (LLM02) | Raw Secret Leakage in Debug Loggingscripts/start-server.ts:249Evidence: console.log(`Authentication: Bearer token required`) | Implement PII/secret redaction masks before writing to log streams. |
| MEDIUM | AT-SEC-007 (LLM02) | Raw Secret Leakage in Debug Loggingscripts/start-server.ts:251Evidence: console.log(`Read your auth token from: ${authTokenFilePath}`) | Implement PII/secret redaction masks before writing to log streams. |
Permissions
Scope: broad · Shell: disabled · Network egress: yes · File deletion: enabled · Human approval: none
Provenance
License: MIT · Lockfile: yes · Security policy: no · Signals: unverified origin
Independently scanned by the AgentTrust registry (not self-reported by the project). Static analysis only — no code executed, findings need human triage, counts may include test/example code. Static snapshot; re-scan before relying on it: npx @eulogik/agenttrust scan https://github.com/makenotion/notion-mcp-server. Scores move with every upstream commit; pages refresh weekly. How scoring works.