LLuminThis is an MCP (Model Context Protocol) server for integrating with Lumin's API services. It allows AI assistants (MCP clients, e.g Claude Desktop, Cursor) to interact with Lumin features such as document management, signature requests, and user information.
mcp-so:lumin_luminpdf
View sourceA
100/100 First Seen
Feb 18, 2026
Last Scanned
Feb 18, 2026
Findings
1
Score
100/100
LOW 1
Findings (1)
LOW
npx MCP server without version pin
L56 Detects MCP server configs using npx to run packages without version pinning
"command": "npx" FIX
Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.
FP?
Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.