A

@heroku/mcp-server

npm · v1.2.5 · 6,990 dl/week · 137 packages installed

Heroku Platform MCP Server

Installing this server brings 137 third-party packages inside your agent's trust boundary (8 direct). This is attack surface, not a vulnerability count — it does not affect the grade above.

Findings (0)

✓ No registry-level findings. (This is a metadata scan, not a code audit.)

Embed this badge

MCP security grade A 
[![MCP security](https://vulnrable.com/api/mcpbadge?pkg=%40heroku%2Fmcp-server&eco=npm)](https://vulnrable.com/mcp/heroku--mcp-server/)
Source repo Registry page Check your own config →

Automated registry-metadata scan; not a code audit. Rescanned on each site deploy.