# io.github.polydev-ai/polydev > Query GPT-5, Claude, Gemini, and Grok simultaneously through one MCP server - name: io.github.polydev-ai/polydev - version: 1.8.72 - connection class: L0 (run_local_package) - trust: 76/100 - quality: –/100 (not scored) - owner: not claimed - descriptor: https://api.protogrid.dev/v1/servers/io.github.polydev-ai%2Fpolydev - tools: https://api.protogrid.dev/v1/servers/io.github.polydev-ai%2Fpolydev/tools **Runs on your machine: something must execute the package.** Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it. ## Connection (mcpServers) ```json { "mcpServers": { "polydev": { "command": "npx", "args": [ "-y", "polydev-ai@1.8.72" ], "env": { "POLYDEV_USER_TOKEN": "${POLYDEV_USER_TOKEN}" } } } } ``` Placeholders to fill: `${POLYDEV_USER_TOKEN}`. ## Trust - hygiene: 100 - liveness: n/a - freshness: 45 - provenance: 80 - drivers: +repository +namespace-matches-repo ~liveness-unmeasured -stale-258d - Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. ## Quality –/100 (not scored) Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package. ### protocol: n/a (weight 25) - n/a `protocol.modern`, `protocol.stateless`, `protocol.transport`, `protocol.list_ttl`: no remote answered a protocol handshake (not probed yet, unreachable, or local-only) ### authorization: n/a (weight 15) - n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth - n/a `auth.secret_in_url`: no templated URL ### tool hygiene: n/a (weight 30) - n/a `tools.descriptions`, `tools.description_length`, `tools.schemas`, `tools.annotations`, `tools.directory_hints`, `tools.token_cost`, `tools.api_dump`: tool list unknown (behind auth, not probed, or empty) ### stability: n/a (weight 15) - n/a `stability.changes`, `stability.rug_pull`: tool list unknown ### dependencies: 50 (weight 15) - fail `deps.known_vulns`: 7 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-6g55-p6wh-862q in postcss@8.4.31 (indirect, fixed in 8.5.12), GHSA-r28c-9q8g-f849 in postcss@8.4.31 (indirect, fixed in 8.5.18), GHSA-f88m-g3jw-g9cj in sharp@0.34.5 (indirect, fixed in 0.35.0), ...; 5 more of lower severity or without a fix - n/a `deps.mcp_sdk_version`: the official MCP SDK is not in the dependency graph - pass `deps.resolvable`: polydev-ai@1.8.72 resolved: 394 packages - tools: unknown - badge: [![protogrid quality](https://protogrid.dev/badge/io.github.polydev-ai/polydev.svg)](https://protogrid.dev/servers/io.github.polydev-ai/polydev) - Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. ### Tool changes _No tool definition changes recorded._ ## Dependencies - npm polydev-ai@1.8.72: resolved, 393 dependencies - GHSA-6g55-p6wh-862q (high) in `` postcss@8.4.31 ``, indirect, fixed in `` 8.5.12 ``, advisory summary: "PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments" https://osv.dev/vulnerability/GHSA-6g55-p6wh-862q - GHSA-r28c-9q8g-f849 (high) in `` postcss@8.4.31 ``, indirect, fixed in `` 8.5.18 ``, advisory summary: "PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure" https://osv.dev/vulnerability/GHSA-r28c-9q8g-f849 - GHSA-f88m-g3jw-g9cj (high) in `` sharp@0.34.5 ``, indirect, fixed in `` 0.35.0 ``, advisory summary: "sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591" https://osv.dev/vulnerability/GHSA-f88m-g3jw-g9cj - GHSA-rgj7-g3m4-5g8c (high) in `` sharp@0.34.5 ``, indirect, fixed in `` 0.35.4 ``, advisory summary: "sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545" https://osv.dev/vulnerability/GHSA-rgj7-g3m4-5g8c - GHSA-wq5f-xc86-pv6w (high) in `` sharp@0.34.5 ``, indirect, fixed in `` 0.35.5 ``, advisory summary: "sharp : Vulnerability in librsvg dependency CVE-2026-96889" https://osv.dev/vulnerability/GHSA-wq5f-xc86-pv6w - GHSA-wq5f-xc86-pv6w (high) in `` sharp@0.35.4 ``, indirect, fixed in `` 0.35.5 ``, advisory summary: "sharp : Vulnerability in librsvg dependency CVE-2026-96889" https://osv.dev/vulnerability/GHSA-wq5f-xc86-pv6w - GHSA-68fv-2mgg-jv7q (high) in `` source-map-js@1.2.1 ``, indirect, fixed in `` 1.2.2 ``, advisory summary: "source-map-js allows event-loop denial of service through indexed source-map section offsets" https://osv.dev/vulnerability/GHSA-68fv-2mgg-jv7q - GHSA-4jqv-mc3x-m676 (moderate) in `` next@15.5.26 ``, direct, fixed in `` 15.5.27 ``, advisory summary: "Next.js has cache poisoning of SSG and ISR pages in self-hosted applications" https://osv.dev/vulnerability/GHSA-4jqv-mc3x-m676 - GHSA-mcj8-r9mp-w47p (moderate) in `` next@15.5.26 ``, direct, fixed in `` 15.5.27 ``, advisory summary: "Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service" https://osv.dev/vulnerability/GHSA-mcj8-r9mp-w47p - GHSA-fxqj-rqcc-2cmp (moderate) in `` postcss@8.4.31 ``, indirect, fixed in `` 8.5.23 ``, advisory summary: "PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when \`from\` is unset" https://osv.dev/vulnerability/GHSA-fxqj-rqcc-2cmp - GHSA-qx2v-qp2m-jg93 (moderate) in `` postcss@8.4.31 ``, indirect, fixed in `` 8.5.10 ``, advisory summary: "PostCSS has XSS via Unescaped \ in its CSS Stringify Output" https://osv.dev/vulnerability/GHSA-qx2v-qp2m-jg93 - GHSA-pxg6-pf52-xh8x (low) in `` cookie@0.6.0 ``, indirect, fixed in `` 0.7.0 ``, advisory summary: "cookie accepts cookie name, path, and domain with out of bounds characters" https://osv.dev/vulnerability/GHSA-pxg6-pf52-xh8x Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. ## Remotes _none_ ## Packages - npm polydev-ai@1.8.72 secrets: POLYDEV_USER_TOKEN ## Tools (0) _none observed_