w3bs.AccountStart building
PACKAGES / Profullstack

wx93-mcp

MCP server that lets MCP clients shorten URLs, list links and read click stats on wx93.me.

ThreatCrush · No malware found
INSTALLw3bs install wx93.me/wx93-mcp

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install wx93.me/wx93-mcpInstall wx93-mcp and track it for updates
  2. wx93-mcpStart the stdio MCP server (point your MCP client's command at it)
  3. WX93_API_KEY=<api-key> wx93-mcpStart it signed in to your wx93.me account via an API key

Every option: wx93-mcp --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in wx93-mcp 0.4.1. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-10-29 04:48 UTC · threatcrush 0.13.30
Files
72 (installer + github.com/profullstack/wx93.me)
Findings
6 critical · 3 high · 44 medium · 12 low
65 other findings (not malware)
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:543sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:675sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:963sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1030sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1601sql-template-interpolation · CWE-89
  • critical
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1609sql-template-interpolation · CWE-89
  • high
    Database URL with credentialssource/.github/workflows/ci.yml:22secret-database-url · CWE-798
  • high
    outbound request to a non-constant URLsource/apps/web/public/sw.js:29js-ssrf-outbound-request · CWE-918
  • high
    Database URL with credentialssource/docker-compose.yml:18secret-database-url · CWE-798
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/abuse.js:184sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:252sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:523sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:524sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:526sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:771sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:784sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:792sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:943sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1005sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1102sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1290sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1491sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1515sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/app.js:1610sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/auth.js:119sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/auth.js:152sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/auth.js:192sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/auth.js:207sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/auth.js:209sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/billing.js:81sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/billing.js:87sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/credits.js:142sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/credits.js:145sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/credits.js:162sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/credits.js:177sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/credits.js:190sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:165sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:169sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:171sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:181sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:290sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:348sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:349sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/links.js:355sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/oauth.js:41sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:45sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:52sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:57sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:82sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:87sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/apps/web/src/qrcodes.js:88sql-template-interpolation · CWE-89
  • medium
    regular expression compiled from a variablesource/apps/web/src/throttle.js:48js-regex-from-input · CWE-1333
  • medium
    SQL built from a template literal or f-stringsource/packages/db/src/migrate.js:31sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:114sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:146sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:177sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:185sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:287sql-template-interpolation · CWE-89
  • low
    Hardcoded Credentialsource/test/api.test.js:390secret-generic-credential · CWE-798
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:570sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:578sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:587sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:663sql-template-interpolation · CWE-89
  • low
    SQL built from a template literal or f-stringsource/test/api.test.js:697sql-template-interpolation · CWE-89
  • low
    Hardcoded Credentialsource/test/qr.test.js:153secret-generic-credential · CWE-798

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/wx93.me/wx93-mcp/badge.svg)](https://w3bs.org/packages/wx93.me/wx93-mcp)