# io.github.AdonaiVera/fiftyone-mcp-server

> Control FiftyOne computer vision datasets through AI assistants using 80+ operators.

- name: io.github.AdonaiVera/fiftyone-mcp-server
- version: 0.1.2
- connection class: L0 (run_local_package)
- trust: 76/100
- quality: –/100 (not scored)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.AdonaiVera%2Ffiftyone-mcp-server
- tools: https://api.protogrid.dev/v1/servers/io.github.AdonaiVera%2Ffiftyone-mcp-server/tools

**Runs on your machine: something must execute the package.** Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "fiftyone-mcp-server": {
      "command": "uvx",
      "args": [
        "fiftyone-mcp-server==0.1.2"
      ]
    }
  }
}
```


## Trust

- hygiene: 100
- liveness: n/a
- freshness: 45
- provenance: 80
- drivers: +repository +namespace-matches-repo ~liveness-unmeasured -stale-304d
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality –/100 (not scored)

Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package.

### protocol: n/a (weight 25)

- n/a `protocol.modern`, `protocol.stateless`, `protocol.transport`, `protocol.list_ttl`: no remote answered a protocol handshake (not probed yet, unreachable, or local-only)

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: n/a (weight 30)

- n/a `tools.descriptions`, `tools.description_length`, `tools.schemas`, `tools.annotations`, `tools.directory_hints`, `tools.token_cost`, `tools.api_dump`: tool list unknown (behind auth, not probed, or empty)

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool list unknown

### dependencies: 33 (weight 15)

- fail `deps.known_vulns`: 3 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-v4x9-3549-crwv in pymongo@4.9.2 (indirect, fixed in 4.18.2), GHSA-vp6j-j7w5-5xjj in pymongo@4.9.2 (indirect, fixed in 4.18.2), GHSA-pfvf-fwfp-25mp in strawberry-graphql@0.316.0 (indirect, fixed in 0.326.1); 7 more of lower severity or without a fix
- fail `deps.mcp_sdk_version`: mcp 0.9.1 has 5 known advisories (GHSA-3qhf-m339-9g5v, GHSA-9h52-p55h-vw2f, GHSA-j975-95f5-7wqh, ...); update mcp to 1.28.1 or later
- pass `deps.resolvable`: fiftyone-mcp-server@0.1.2 resolved: 149 packages

- tools: unknown
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.AdonaiVera/fiftyone-mcp-server.svg)](https://protogrid.dev/servers/io.github.AdonaiVera/fiftyone-mcp-server)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

_No tool definition changes recorded._

## Dependencies

- pypi fiftyone-mcp-server@0.1.2: resolved, 148 dependencies, MCP SDK mcp 0.9.1
  - GHSA-3qhf-m339-9g5v (high) in `` mcp@0.9.1 ``, direct, fixed in `` 1.9.4 ``, advisory summary: "MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS" https://osv.dev/vulnerability/GHSA-3qhf-m339-9g5v
  - GHSA-9h52-p55h-vw2f (high) in `` mcp@0.9.1 ``, direct, fixed in `` 1.23.0 ``, advisory summary: "Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default" https://osv.dev/vulnerability/GHSA-9h52-p55h-vw2f
  - GHSA-j975-95f5-7wqh (high) in `` mcp@0.9.1 ``, direct, fixed in `` 1.10.0 ``, advisory summary: "MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service" https://osv.dev/vulnerability/GHSA-j975-95f5-7wqh
  - GHSA-jpw9-pfvf-9f58 (high) in `` mcp@0.9.1 ``, direct, fixed in `` 1.27.2 ``, advisory summary: "MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal" https://osv.dev/vulnerability/GHSA-jpw9-pfvf-9f58
  - GHSA-vj7q-gjh5-988w (high) in `` mcp@0.9.1 ``, direct, fixed in `` 1.28.1 ``, advisory summary: "MCP Python SDK: WebSocket server transport does not support Host/Origin validation" https://osv.dev/vulnerability/GHSA-vj7q-gjh5-988w
  - GHSA-v4x9-3549-crwv (high) in `` pymongo@4.9.2 ``, indirect, fixed in `` 4.18.2 ``, advisory summary: "PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding" https://osv.dev/vulnerability/GHSA-v4x9-3549-crwv
  - GHSA-vp6j-j7w5-5xjj (high) in `` pymongo@4.9.2 ``, indirect, fixed in `` 4.18.2 ``, advisory summary: "PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters" https://osv.dev/vulnerability/GHSA-vp6j-j7w5-5xjj
  - GHSA-pfvf-fwfp-25mp (high) in `` strawberry-graphql@0.316.0 ``, indirect, fixed in `` 0.326.1 ``, advisory summary: "Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy" https://osv.dev/vulnerability/GHSA-pfvf-fwfp-25mp
  - GHSA-8fvv-fgr5-f8ch (moderate) in `` pymongo@4.9.2 ``, indirect, fixed in `` 4.18.1 ``, advisory summary: "pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods" https://osv.dev/vulnerability/GHSA-8fvv-fgr5-f8ch
  - GHSA-qx36-8mw2-4r3x (moderate) in `` pymongo@4.9.2 ``, indirect, fixed in `` 4.18.2 ``, advisory summary: "PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption" https://osv.dev/vulnerability/GHSA-qx36-8mw2-4r3x
  - GHSA-m952-2w3f-6r8h (low) in `` strawberry-graphql@0.316.0 ``, indirect, fixed in `` 0.327.2 ``, advisory summary: "Strawberry legacy graphql-ws retains naturally completed subscription slots" https://osv.dev/vulnerability/GHSA-m952-2w3f-6r8h
  - GHSA-qfhq-4f3w-5fph (low) in `` torch@2.9.1 ``, direct, fixed in `` 2.10.0 ``, advisory summary: "PyTorch is vulnerable to memory corruption through its torch.lstm\_cell function" https://osv.dev/vulnerability/GHSA-qfhq-4f3w-5fph
  - GHSA-rrmf-rvhw-rf47 (low) in `` torch@2.9.1 ``, direct, fixed in `` 2.13.0 ``, advisory summary: "PyTorch is vulnerable to memory corruption through its torch.jit.script function" https://osv.dev/vulnerability/GHSA-rrmf-rvhw-rf47
  - PYSEC-2026-2286 (unrated) in `` torch@2.9.1 ``, direct, fixed in `` 2.10.0 ``, advisory summary: "PyTorch is a Python package that provides tensor computation. Prior to version 2.10.0, a vulnerability in PyTorch's \`weights\_only\` unpickler allows an attacker to craft a malicious checkpoint file (\`.pth\`) that, when loaded with \`torch.load(..., weights\_only=True)\`, can corrupt memory and potentiall" https://osv.dev/vulnerability/PYSEC-2026-2286
  - PYSEC-2026-139 (unrated) in `` torch@2.9.1 ``, direct, no fix yet, advisory summary: "A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project w" https://osv.dev/vulnerability/PYSEC-2026-139

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0.

## Remotes

_none_

## Packages

- pypi fiftyone-mcp-server@0.1.2

## Tools (0)

_none observed_