io.github.DmitriyGolub/threejs-devtools

https://github.com/DmitriyGolub/threejs-devtools-mcp

This is not a clean bill of health. Only findings that cleared the disclosure gate appear below, and every high and critical finding is withheld - so this server may have findings that are not shown here. No maintainer has been notified yet, so no disclosure window has opened and nothing above medium severity has been published at all. Accuracy has not been measured, so treat each finding below as a candidate rather than a confirmed problem.

Published findings - 2 decisions

What the rule reportedLinesWhereFirst seen
accepts any origin ('*')1src/bridge/server.ts:2092026-10-01
accepts any origin (*)1src/http.ts:652026-10-01

To have findings about this server withheld from publication entirely, see the opt-out in SECURITY.md. Opt-out is honoured unconditionally.