SStack OverflowThe Stack Overflow Model Context Protocol (MCP) enables AI tools and agents to access trusted developer knowledge from Stack Overflow. It standardizes how knowledge is exposed, discovered, and retrieved for use in agent workflows and developer environments.

mcp-so:stack-overflow_Stack Overflow

View source

100/100

First Seen

Feb 18, 2026

Last Scanned

Feb 18, 2026

Findings

Score

100/100

LOW 1

Findings (1)

LOW

npx MCP server without version pin MCPCFG_001

mcp-config L47

Detects MCP server configs using npx to run packages without version pinning

"command": "npx"

FIX

Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.

FP?

Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.