# io.github.tedfytw1209/mcp-server-EVEfleet > An MCP server that provides tools for EVE Online players to manage their fleets - name: io.github.tedfytw1209/mcp-server-EVEfleet - version: 1.0.2 - connection class: L0 (run_local_package) - trust: 70/100 - quality: –/100 (not scored) - owner: not claimed - descriptor: https://api.protogrid.dev/v1/servers/io.github.tedfytw1209%2Fmcp-server-EVEfleet - tools: https://api.protogrid.dev/v1/servers/io.github.tedfytw1209%2Fmcp-server-EVEfleet/tools **Runs on your machine: something must execute the package.** Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it. ## Connection (mcpServers) ```json { "mcpServers": { "mcp-server-EVEfleet": { "command": "uvx", "args": [ "mcp-server-evefleet==0.1.4" ], "env": { "YOUR_API_KEY": "${YOUR_API_KEY}" } } } } ``` Placeholders to fill: `${YOUR_API_KEY}`. ## Trust - hygiene: 100 - liveness: n/a - freshness: 25 - provenance: 80 - drivers: +repository +namespace-matches-repo ~liveness-unmeasured -stale-395d - Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. ## Quality –/100 (not scored) Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package. ### protocol: n/a (weight 25) - n/a `protocol.modern`, `protocol.stateless`, `protocol.transport`, `protocol.list_ttl`: no remote answered a protocol handshake (not probed yet, unreachable, or local-only) ### authorization: n/a (weight 15) - n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth - n/a `auth.secret_in_url`: no templated URL ### tool hygiene: n/a (weight 30) - n/a `tools.descriptions`, `tools.description_length`, `tools.schemas`, `tools.annotations`, `tools.directory_hints`, `tools.token_cost`, `tools.api_dump`: tool list unknown (behind auth, not probed, or empty) ### stability: n/a (weight 15) - n/a `stability.changes`, `stability.rug_pull`: tool list unknown ### dependencies: 67 (weight 15) - fail `deps.known_vulns`: 8 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-2g87-pp6c-29x5 in aiohttp@3.12.15 (direct, fixed in 3.14.4), GHSA-5wr8-gcqf-gqf3 in aiohttp@3.12.15 (direct, fixed in 3.14.4), GHSA-6mq8-rvhq-8wgg in aiohttp@3.12.15 (direct, fixed in 3.13.3), ...; 38 more of lower severity or without a fix - pass `deps.mcp_sdk_version`: mcp 2.2.0, no known advisory - pass `deps.resolvable`: mcp-server-evefleet@0.1.4 resolved: 56 packages - tools: unknown - badge: [![protogrid quality](https://protogrid.dev/badge/io.github.tedfytw1209/mcp-server-EVEfleet.svg)](https://protogrid.dev/servers/io.github.tedfytw1209/mcp-server-EVEfleet) - Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. ### Tool changes _No tool definition changes recorded._ ## Dependencies - pypi mcp-server-evefleet@0.1.4: resolved, 55 dependencies, MCP SDK mcp 2.2.0 - GHSA-3qf3-8w2g-rqmx (critical) in `` python-jose@3.3.0 ``, direct, no fix yet, advisory summary: "python-jose algorithm confusion guard bypassed by DER-encoded public keys" https://osv.dev/vulnerability/GHSA-3qf3-8w2g-rqmx - GHSA-2g87-pp6c-29x5 (high) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.4 ``, advisory summary: "aiohttp: Multiple instances of excessive or unbounded memory/CPU use" https://osv.dev/vulnerability/GHSA-2g87-pp6c-29x5 - GHSA-5wr8-gcqf-gqf3 (high) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.4 ``, advisory summary: "aiohttp server lacks an initial request/header timeout" https://osv.dev/vulnerability/GHSA-5wr8-gcqf-gqf3 - GHSA-6mq8-rvhq-8wgg (high) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.3 ``, advisory summary: "AIOHTTP's HTTP Parser auto\_decompress feature is vulnerable to zip bomb" https://osv.dev/vulnerability/GHSA-6mq8-rvhq-8wgg - GHSA-cq5v-8q36-5273 (high) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.3 ``, advisory summary: "AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)" https://osv.dev/vulnerability/GHSA-cq5v-8q36-5273 - GHSA-8ppf-4f7h-5ppj (high) in `` pyasn1@0.4.8 ``, direct, fixed in `` 0.6.4 ``, advisory summary: "pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service" https://osv.dev/vulnerability/GHSA-8ppf-4f7h-5ppj - GHSA-hm4w-wwcw-mr6r (high) in `` pyasn1@0.4.8 ``, direct, fixed in `` 0.6.4 ``, advisory summary: "pyasn1: Uncontrolled resource consumption when converting decoded REAL values" https://osv.dev/vulnerability/GHSA-hm4w-wwcw-mr6r - GHSA-jr27-m4p2-rc6r (high) in `` pyasn1@0.4.8 ``, direct, fixed in `` 0.6.3 ``, advisory summary: "Denial of Service in pyasn1 via Unbounded Recursion" https://osv.dev/vulnerability/GHSA-jr27-m4p2-rc6r - GHSA-m4p7-r5rc-7g4j (high) in `` pyasn1@0.4.8 ``, direct, fixed in `` 0.6.4 ``, advisory summary: "pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs" https://osv.dev/vulnerability/GHSA-m4p7-r5rc-7g4j - GHSA-wj6h-64fc-37mp (high) in `` ecdsa@0.19.0 ``, direct, no fix yet, advisory summary: "Minerva timing attack on P-256 in python-ecdsa" https://osv.dev/vulnerability/GHSA-wj6h-64fc-37mp - GHSA-4fvr-rgm6-gqmc (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: HTTP/1 Pipelined Requests Queue Without Limit" https://osv.dev/vulnerability/GHSA-4fvr-rgm6-gqmc - GHSA-63hw-fmq6-xxg2 (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: C HTTP Parser Bypasses max\_line\_size for Fragmented Lines" https://osv.dev/vulnerability/GHSA-63hw-fmq6-xxg2 - GHSA-6jhg-hg63-jvvf (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.3 ``, advisory summary: "AIOHTTP vulnerable to denial of service through large payloads" https://osv.dev/vulnerability/GHSA-6jhg-hg63-jvvf - GHSA-c427-h43c-vf67 (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.4 ``, advisory summary: "AIOHTTP accepts duplicate Host headers" https://osv.dev/vulnerability/GHSA-c427-h43c-vf67 - GHSA-g3cq-j2xw-wf74 (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: Unread Compressed Request Bodies Bypass client\_max\_size During Cleanup" https://osv.dev/vulnerability/GHSA-g3cq-j2xw-wf74 - GHSA-g84x-mcqj-x9qq (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.3 ``, advisory summary: "AIOHTTP vulnerable to DoS through chunked messages" https://osv.dev/vulnerability/GHSA-g84x-mcqj-x9qq - GHSA-hg6j-4rv6-33pg (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.0 ``, advisory summary: "AIOHTTP is vulnerable to cross-origin redirect with per-request cookies" https://osv.dev/vulnerability/GHSA-hg6j-4rv6-33pg - GHSA-hpj7-wq8m-9hgp (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges" https://osv.dev/vulnerability/GHSA-hpj7-wq8m-9hgp - GHSA-jg22-mg44-37j8 (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.0 ``, advisory summary: "AIOHTTP is Vulnerable to Deserialization of Untrusted Data" https://osv.dev/vulnerability/GHSA-jg22-mg44-37j8 - GHSA-jj3x-wxrx-4x23 (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.3 ``, advisory summary: "AIOHTTP vulnerable to DoS when bypassing asserts" https://osv.dev/vulnerability/GHSA-jj3x-wxrx-4x23 - GHSA-m5qp-6w8w-w647 (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.4 ``, advisory summary: "AIOHTTP has a Multipart Header Size Bypass" https://osv.dev/vulnerability/GHSA-m5qp-6w8w-w647 - GHSA-mfx4-hv73-q22v (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.2 ``, advisory summary: "AIOHTTP: HTTP request smuggling via WebSocket upgrade" https://osv.dev/vulnerability/GHSA-mfx4-hv73-q22v - GHSA-mq44-7p77-q5h7 (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.2 ``, advisory summary: "AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate" https://osv.dev/vulnerability/GHSA-mq44-7p77-q5h7 - GHSA-p998-jp59-783m (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.4 ``, advisory summary: "AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows" https://osv.dev/vulnerability/GHSA-p998-jp59-783m - GHSA-w2fm-2cpv-w7v5 (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.4 ``, advisory summary: "aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage" https://osv.dev/vulnerability/GHSA-w2fm-2cpv-w7v5 - GHSA-xcgm-r5h9-7989 (moderate) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: Incomplete websocket frame payloads bypass memory limits" https://osv.dev/vulnerability/GHSA-xcgm-r5h9-7989 - GHSA-9f5j-8jwj-x28g (moderate) in `` ecdsa@0.19.0 ``, direct, fixed in `` 0.19.2 ``, advisory summary: "python-ecdsa: Denial of Service via improper DER length validation in crafted private keys" https://osv.dev/vulnerability/GHSA-9f5j-8jwj-x28g - GHSA-cjwg-qfpm-7377 (moderate) in `` python-jose@3.3.0 ``, direct, fixed in `` 3.4.0 ``, advisory summary: "python-jose denial of service via compressed JWE content" https://osv.dev/vulnerability/GHSA-cjwg-qfpm-7377 - GHSA-9hjg-9r4m-mvj7 (moderate) in `` requests@2.32.3 ``, direct, fixed in `` 2.32.4 ``, advisory summary: "Requests vulnerable to .netrc credentials leak via malicious URLs" https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7 - GHSA-gc5v-m9x4-r6x2 (moderate) in `` requests@2.32.3 ``, direct, fixed in `` 2.33.0 ``, advisory summary: "Requests has Insecure Temp File Reuse in its extract\_zipped\_paths() utility function" https://osv.dev/vulnerability/GHSA-gc5v-m9x4-r6x2 - GHSA-2fqr-mr3j-6wp8 (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence" https://osv.dev/vulnerability/GHSA-2fqr-mr3j-6wp8 - GHSA-2vrm-gr82-f7m5 (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.4 ``, advisory summary: "AIOHTTP has CRLF injection through multipart part content type header construction" https://osv.dev/vulnerability/GHSA-2vrm-gr82-f7m5 - GHSA-3wq7-rqq7-wx6j (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.4 ``, advisory summary: "AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS" https://osv.dev/vulnerability/GHSA-3wq7-rqq7-wx6j - GHSA-494j-54xm-rwp3 (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.4 ``, advisory summary: "AIOHTTP: Secure attribute not enforced for shared cookie" https://osv.dev/vulnerability/GHSA-494j-54xm-rwp3 - GHSA-4m7w-qmgq-4wj5 (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections" https://osv.dev/vulnerability/GHSA-4m7w-qmgq-4wj5 - GHSA-54jq-c3m8-4m76 (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.3 ``, advisory summary: "AIOHTTP vulnerable to brute-force leak of internal static file path components" https://osv.dev/vulnerability/GHSA-54jq-c3m8-4m76 - GHSA-63hf-3vf5-4wqf (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.4 ``, advisory summary: "AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass" https://osv.dev/vulnerability/GHSA-63hf-3vf5-4wqf - GHSA-69f9-5gxw-wvc2 (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.3 ``, advisory summary: "AIOHTTP's unicode processing of header values could cause parsing discrepancies" https://osv.dev/vulnerability/GHSA-69f9-5gxw-wvc2 - GHSA-966j-vmvw-g2g9 (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.4 ``, advisory summary: "AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect" https://osv.dev/vulnerability/GHSA-966j-vmvw-g2g9 - GHSA-9x8q-7h8h-wcw9 (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.1 ``, advisory summary: "aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect" https://osv.dev/vulnerability/GHSA-9x8q-7h8h-wcw9 - GHSA-fh55-r93g-j68g (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.3 ``, advisory summary: "AIOHTTP Vulnerable to Cookie Parser Warning Storm" https://osv.dev/vulnerability/GHSA-fh55-r93g-j68g - GHSA-hcc4-c3v8-rx92 (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.4 ``, advisory summary: "AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector" https://osv.dev/vulnerability/GHSA-hcc4-c3v8-rx92 - GHSA-m6qw-4cw2-hm4m (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.14.0 ``, advisory summary: "aiohttp: CRLF injection in multipart headers" https://osv.dev/vulnerability/GHSA-m6qw-4cw2-hm4m - GHSA-mqqc-3gqh-h2x8 (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.3 ``, advisory summary: "AIOHTTP has unicode match groups in regexes for ASCII protocol elements" https://osv.dev/vulnerability/GHSA-mqqc-3gqh-h2x8 - GHSA-mwh4-6h8g-pg8w (low) in `` aiohttp@3.12.15 ``, direct, fixed in `` 3.13.4 ``, advisory summary: "AIOHTTP has HTTP response splitting via \\r in reason phrase" https://osv.dev/vulnerability/GHSA-mwh4-6h8g-pg8w - PYSEC-2025-185 (unrated) in `` python-jose@3.3.0 ``, direct, no fix yet, advisory summary: "In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant" https://osv.dev/vulnerability/PYSEC-2025-185 Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. ## Remotes _none_ ## Packages - pypi mcp-server-evefleet@0.1.4 secrets: YOUR_API_KEY ## Tools (0) _none observed_