Mmcp-dingding-botMCP Server for send text/markdown message via dingding (aka dingtalk) group custom robot

mcp-so:mcp-dingding-bot_Shawyeok

View source

75/100

First Seen

Feb 18, 2026

Last Scanned

Feb 20, 2026

Findings

Score

75/100

CRITICAL 1

Findings (1)

CRITICAL

Text combines credential access with network transmission NLP_CRED_EXFIL_COMBO

exfiltration L22

Text combines credential access with network transmission

mcp-server
MCP Server for send text/markdown message via dingding (aka dingtalk) group custom robot
Overview
Tools
Comments
Overview
what is MCP DingDing Bot?
MCP DingDing Bot is a server application ...

FIX

Remove the combination of credential access and network transmission from the tool. If the tool needs credentials, access them via a secrets manager and never transmit them externally.

FP?

Likely FP if the tool legitimately uses credentials for API authentication (e.g., reading an API key to make authenticated requests to the same service).