{"id":11718059,"name":"@sequa-ai/sequa-mcp","ecosystem":"npm","description":"A proxy for the Model Context Protocol (MCP) that connects local STDIO with remote MCP servers","homepage":"https://github.com/sequa-ai/sequa-mcp#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/sequa-ai/sequa-mcp","keywords_array":["mcp","model-context-protocol","proxy","ai","sequa"],"namespace":"sequa-ai","versions_count":18,"first_release_published_at":"2025-06-02T02:48:38.477Z","latest_release_published_at":"2025-12-09T23:24:06.221Z","latest_release_number":"1.1.2","last_synced_at":"2026-04-08T09:31:24.033Z","created_at":"2025-06-02T02:49:18.090Z","updated_at":"2026-04-08T09:31:24.033Z","registry_url":"https://www.npmjs.com/package/@sequa-ai/sequa-mcp","install_command":"npm install @sequa-ai/sequa-mcp","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"1.1.2"}},"repo_metadata":{"id":297034608,"uuid":"990350739","full_name":"sequa-ai/sequa-mcp","owner":"sequa-ai","description":null,"archived":false,"fork":false,"pushed_at":"2025-11-08T16:51:11.000Z","size":180,"stargazers_count":16,"open_issues_count":0,"forks_count":3,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-11-27T12:34:34.267Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/sequa-ai.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-05-26T01:41:44.000Z","updated_at":"2025-11-08T16:51:14.000Z","dependencies_parsed_at":null,"dependency_job_id":"0c0526d5-db54-4913-bbba-7c047dc81efc","html_url":"https://github.com/sequa-ai/sequa-mcp","commit_stats":null,"previous_names":["sequa-ai/sequa-mcp"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/sequa-ai/sequa-mcp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sequa-ai%2Fsequa-mcp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sequa-ai%2Fsequa-mcp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sequa-ai%2Fsequa-mcp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sequa-ai%2Fsequa-mcp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sequa-ai","download_url":"https://codeload.github.com/sequa-ai/sequa-mcp/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/sequa-ai%2Fsequa-mcp/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29427995,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-13T22:20:51.549Z","status":"ssl_error","status_checked_at":"2026-02-13T22:20:49.838Z","response_time":78,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"sequa-ai","name":"sequa.ai","uuid":"187640573","kind":"organization","description":"","email":"contact@sequa.ai","website":null,"location":"Germany","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/187640573?v=4","repositories_count":1,"last_synced_at":"2025-06-04T00:06:57.261Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/sequa-ai","funding_links":[],"total_stars":0,"followers":0,"following":0,"created_at":"2025-06-04T00:06:57.284Z","updated_at":"2025-06-04T00:06:57.284Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sequa-ai","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/sequa-ai/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-04-05T19:13:00.381Z","dependent_packages_count":0,"downloads":43,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":24.520971698115098,"dependent_packages_count":35.390369481104436,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":29.955670589609767},"purl":"pkg:npm/%40sequa-ai/sequa-mcp","advisories":[{"uuid":"GSA_kwCzR0hTQS05cHc1LXd4NjctcTk2NM4ABMUQ","url":"https://github.com/advisories/GHSA-9pw5-wx67-q964","title":"@sequa-ai/sequa-mcp has Command Injection vulnerability","description":"A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of the file src/helpers/node-oauth-client-provider.ts of the component OAuth Server Discovery. Performing manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. Upgrading to version 1.0.14 is able to mitigate this issue. The patch is named e569815854166db5f71c2e722408f8957fb9e804. It is recommended to upgrade the affected component. The vendor explains: \"We only promote that mcp server with our own URLs that have a valid response, but yes if someone would use it with a non sequa url, this is a valid attack vector. We have released a new version (1.0.14) that fixes this and validates that only URLs can be opened.\"","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-09-17T21:30:43.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-10619","https://github.com/sequa-ai/sequa-mcp/commit/e569815854166db5f71c2e722408f8957fb9e804","https://github.com/advisories/GHSA-9pw5-wx67-q964","https://www.npmjs.com/package/%40sequa-ai/sequa-mcp/v/1.0.14"],"source_kind":"github","identifiers":["GHSA-9pw5-wx67-q964","CVE-2025-10619"],"repository_url":"https://github.com/sequa-ai/sequa-mcp","blast_radius":1.0,"created_at":"2025-09-18T20:09:54.279Z","updated_at":"2026-04-05T20:02:13.837Z","epss_percentage":0.00479,"epss_percentile":0.64601,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05cHc1LXd4NjctcTk2NM4ABMUQ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05cHc1LXd4NjctcTk2NM4ABMUQ","packages":[{"ecosystem":"npm","package_name":"@sequa-ai/sequa-mcp","versions":[{"first_patched_version":"1.0.14","vulnerable_version_range":"\u003c 1.0.14"}],"purl":"pkg:npm/%40sequa-ai%2Fsequa-mcp"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05cHc1LXd4NjctcTk2NM4ABMUQ/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@sequa-ai/sequa-mcp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@sequa-ai/sequa-mcp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@sequa-ai/sequa-mcp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-11-19T05:19:28.643Z","issues_count":0,"pull_requests_count":4,"avg_time_to_close_issue":null,"avg_time_to_close_pull_request":2319526.0,"issues_closed_count":0,"pull_requests_closed_count":3,"pull_request_authors_count":2,"issue_authors_count":0,"avg_comments_per_issue":null,"avg_comments_per_pull_request":0.0,"merged_pull_requests_count":2,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":4,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":2319526.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":2,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/sequa-ai%2Fsequa-mcp/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@sequa-ai%2Fsequa-mcp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@sequa-ai%2Fsequa-mcp/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@sequa-ai%2Fsequa-mcp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@sequa-ai%2Fsequa-mcp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@sequa-ai%2Fsequa-mcp/codemeta","maintainers":[{"uuid":"leonardofficial","login":"leonardofficial","name":null,"email":"leonard@blacklusion.io","url":null,"packages_count":3,"html_url":"https://www.npmjs.com/~leonardofficial","role":null,"created_at":"2025-09-09T09:17:24.807Z","updated_at":"2025-09-09T09:17:24.807Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/leonardofficial/packages"},{"uuid":"fabian-emilius","login":"fabian-emilius","name":null,"email":"fabian.emilius@outlook.com","url":null,"packages_count":3,"html_url":"https://www.npmjs.com/~fabian-emilius","role":null,"created_at":"2025-06-02T02:49:18.817Z","updated_at":"2025-06-02T02:49:18.817Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/fabian-emilius/packages"}]}