upstash/context7-mcp mcp server skill
documentation retrieval
Context7 is an MCP server that provides AI coding agents with up-to-date, version-specific documentation and code examples for libraries and frameworks. It fetches current docs directly from source material and injects them into your prompt, helping agents generate accurate code without relying on outdated training data or hallucinated APIs.
Use when working with coding agents (Cursor, Claude, etc.) that need current library documentation or API references Query for setup, configuration, and code generation tasks by mentioning specific libraries in your prompt Specify library versions or use library IDs to get documentation tailored to your exact use case Pair with agent rules to automatically fetch context for library-related questions without explicit commands 5 HIGH✓ 10 MEDIUM 3 LOW
✓ CRITICAL/HIGH reflect AI-verified findings (false positives excluded) · MEDIUM/LOW/INFO are unverified scanner output
AI-verified (CRITICAL/HIGH): 1 confirmed (20%) 4 likely real (80%) 1 false positive — excluded from CRITICAL/HIGH count above
Findings by checker · 1 high-signal, 1 mostly false-positive (hidden by default)
CHK-014 4 findings 1 confirmed 3 likely
0% FP ▼ Show 1 checker that are mostly false positives (2 findings) 18 findings click to expand
CHK-129 Sensitive field in return type/schema — token: str
packages/cli/src/utils/auth.ts
AI: likely real likely ▼
CHK-014 'context7' uses HTTP transport to external URL: https://mcp.context7.com/mcp
plugins/codex/context7/.mcp.json
AI: likely real likely ▼
CHK-014 'context7' uses HTTP transport to external URL: https://mcp.context7.com/mcp
plugins/context7-power/mcp.json
AI: confirmed likely ▼
CHK-014 'context7' uses HTTP transport to external URL: https://mcp.context7.com/mcp
plugins/copilot/context7/.mcp.json
AI: likely real likely ▼
CHK-014 'context7' uses HTTP transport to external URL: https://mcp.context7.com/mcp
plugins/claude/context7/.mcp.json
AI: likely real likely ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in src/client.ts
packages/sdk/src/client.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in commands/command.ts
packages/sdk/src/commands/command.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in get-context/index.ts
packages/sdk/src/commands/get-context/index.ts
possible ▼
CHK-027 Outbound network call in skill — external network call (verify direction — could be benign API fetch)
packages/pi/skills/context7-docs/SKILL.md
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in search-library/index.ts
packages/sdk/src/commands/search-library/index.ts
possible ▼
CHK-125b chmod — permission modification — no scope constraint in mcp/package.json
packages/mcp/package.json
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in setup/mcp-writer.ts
packages/cli/src/setup/mcp-writer.ts
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in utils/github.ts
packages/cli/src/utils/github.ts
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in utils/auth.ts
packages/cli/src/utils/auth.ts
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in commands/generate.ts
packages/cli/src/commands/generate.ts
possible ▼
CHK-025 Hardcoded endpoint in skill: https://context7.com/dashboard
packages/pi/skills/context7-docs/SKILL.md
possible ▼
CHK-025 Hardcoded endpoint in skill: https://context7.com
packages/pi/skills/context7-docs/SKILL.md
possible ▼
CHK-108 Credentials embedded in URL: docs/resources/troubleshooting.mdx [docs context — verify manually]
docs/resources/troubleshooting.mdx
possible ▼
▼ Show 1 false positive (5% of this view) Last scanned: Jul 12, 2026
More servers
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
skypilot-org/skypilot 85
obra/superpowers 85
Foundational skill pack by Jesse Vincent now in anthropics/claude-plugins-official. Includes ffuf web-fuzzing/pentest skill. Partial analysis done — full hook and plugin inspection pending. tier=T2
191k★
Significant-Gravitas/AutoGPT 85
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
186k★
nanocoai/nanoclaw 85
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
30k★
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
Scan your entire org's MCP deployment
2,500+ repos pre-scored. 22% carry CRITICAL findings.