sentry-mcp

Security Findings (53)

• CriticalArbitrary Code Execution ×2

  • analyze_issue_with_seer:tool name or description implies arbitrary script/code execution (evaluate_script, execute javascript, etc.)
  • get_doc:tool name or description implies arbitrary script/code execution (evaluate_script, execute javascript, etc.)

  Rule: AS-006Fix: This tool can execute arbitrary code or shell commands on the host system. Remove it unless strictly required. If kept: (1) restrict access to trusted users/agents only, (2) require human approval before each invocation (Claude Desktop: set approval_required: true; other clients: enable equivalent confirmation), (3) use the most restrictive sandbox or read-only mode available, and (4) never expose this tool to untrusted input sources.
• HighExcessive Permission Surface ×17

  • find_teams:tool declares network permission
  • find_projects:tool declares network permission
  • find_releases:tool declares network permission
  • get_issue_details:tool declares network permission
  • get_trace_details:tool declares network permission
  • get_event_attachment:tool declares network permission
  • update_issue:tool declares network permission
  • search_events:tool declares network permission
  • create_team:tool declares network permission
  • create_project:tool declares network permission
  • update_project:tool declares network permission
  • create_dsn:tool declares network permission
  • find_dsns:tool declares network permission
  • analyze_issue_with_seer:tool declares network permission
  • search_docs:tool declares network permission
  • get_doc:tool declares network permission
  • search_issues:tool declares network permission

  Rule: AS-002Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.
• MediumExcessive Permission Surface ×16

  • find_organizations:tool declares db permission
  • find_teams:tool declares db permission
  • find_projects:tool declares db permission
  • find_releases:tool declares db permission
  • get_issue_details:tool declares db permission
  • get_event_attachment:tool declares fs permission
  • update_issue:tool declares fs permission
  • search_events:tool declares db permission
  • create_team:tool declares fs permission
  • create_project:tool declares fs permission
  • update_project:tool declares fs permission
  • create_dsn:tool declares fs permission
  • analyze_issue_with_seer:tool declares fs permission
  • search_docs:tool declares db permission
  • get_doc:tool declares fs permission
  • search_issues:tool declares db permission

  Rule: AS-002Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.
• LowDoS Resilience — Missing Rate Limit / Timeout ×17

  • find_teams:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • find_projects:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • find_releases:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • get_issue_details:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • get_trace_details:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • get_event_attachment:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • update_issue:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • search_events:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • create_team:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • create_project:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • update_project:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • create_dsn:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • find_dsns:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • analyze_issue_with_seer:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • search_docs:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • get_doc:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration
  • search_issues:tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  Rule: AS-011Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.
• LowExcessive Permission Surface

  search_events:tool declares http permission

  Rule: AS-002Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.