web3auth-integrate.json

{
  "tool_id": "web3auth-integrate",
  "version": "smithery",
  "grade": "C",
  "risk_score": 27,
  "scan_date": "2026-04-19T02:17:59.379451382Z",
  "scanner": "tooltrust-scanner/v0.3.8",
  "source_url": "https://smithery.ai/server/web3auth/integrate",
  "vendor": "Smithery",
  "description": "MetaMask Embedded Wallets MCP (formerly Web3Auth) gives AI coding assistants live access to Embedded Wallets documentation, SDK references, integration examples, and community troubleshooting. MetaMask Embedded Wallets is not a wallet app itself, but embedded wallet infrastructure that helps developers add non-custodial Web3 wallets to web, mobile, and gaming apps using familiar login methods like Google, GitHub, email, SMS, and other OAuth or passwordless flows.\n\nThis MCP server is built for real integration work. It lets agents search docs, fetch full documentation pages, retrieve complete example code, inspect SDK types and hooks, and surface real-world implementation issues. It is especially useful for tasks like choosing the right SDK, implementing social login, understanding key derivation behavior, avoiding wallet address changes caused by auth or configuration mistakes, and debugging framework-specific issues across React, Next.js, Flutter, React Native, and other platforms.\n\nUse it when you want an AI assistant to generate or review MetaMask Embedded Wallets integrations using current source material instead of stale model memory. Pair it with the MetaMask Embedded Wallets Skill for best results: the skill teaches the assistant how to reason about architecture, authentication, SDK selection, and common pitfalls, while this MCP server provides up-to-date docs, examples, SDK references, and implementation details.",
  "findings": [
    {
      "id": "AS-002",
      "severity": "High",
      "title": "Excessive Permission Surface",
      "description": "tool declares network permission",
      "recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
      "tool_name": "search_docs"
    },
    {
      "id": "AS-011",
      "severity": "Low",
      "title": "DoS Resilience — Missing Rate Limit / Timeout",
      "description": "tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration",
      "recommendation": "Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.",
      "tool_name": "search_docs"
    },
    {
      "id": "AS-014",
      "severity": "Info",
      "title": "DEPENDENCY_INVENTORY_UNAVAILABLE",
      "description": "Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.",
      "recommendation": "Review and remediate the identified issue.",
      "tool_name": "search_docs"
    },
    {
      "id": "AS-002",
      "severity": "High",
      "title": "Excessive Permission Surface",
      "description": "tool declares network permission",
      "recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
      "tool_name": "get_doc"
    },
    {
      "id": "AS-011",
      "severity": "Low",
      "title": "DoS Resilience — Missing Rate Limit / Timeout",
      "description": "tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration",
      "recommendation": "Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.",
      "tool_name": "get_doc"
    },
    {
      "id": "AS-014",
      "severity": "Info",
      "title": "DEPENDENCY_INVENTORY_UNAVAILABLE",
      "description": "Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.",
      "recommendation": "Review and remediate the identified issue.",
      "tool_name": "get_doc"
    },
    {
      "id": "AS-002",
      "severity": "Medium",
      "title": "Excessive Permission Surface",
      "description": "tool declares fs permission",
      "recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
      "tool_name": "get_example"
    },
    {
      "id": "AS-002",
      "severity": "High",
      "title": "Excessive Permission Surface",
      "description": "tool declares network permission",
      "recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
      "tool_name": "get_example"
    },
    {
      "id": "AS-002",
      "severity": "Low",
      "title": "Excessive Permission Surface",
      "description": "tool declares http permission",
      "recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
      "tool_name": "get_example"
    },
    {
      "id": "AS-011",
      "severity": "Low",
      "title": "DoS Resilience — Missing Rate Limit / Timeout",
      "description": "tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration",
      "recommendation": "Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.",
      "tool_name": "get_example"
    },
    {
      "id": "AS-014",
      "severity": "Info",
      "title": "DEPENDENCY_INVENTORY_UNAVAILABLE",
      "description": "Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.",
      "recommendation": "Review and remediate the identified issue.",
      "tool_name": "get_example"
    },
    {
      "id": "AS-002",
      "severity": "High",
      "title": "Excessive Permission Surface",
      "description": "tool declares network permission",
      "recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
      "tool_name": "get_sdk_reference"
    },
    {
      "id": "AS-011",
      "severity": "Low",
      "title": "DoS Resilience — Missing Rate Limit / Timeout",
      "description": "tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration",
      "recommendation": "Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.",
      "tool_name": "get_sdk_reference"
    },
    {
      "id": "AS-014",
      "severity": "Info",
      "title": "DEPENDENCY_INVENTORY_UNAVAILABLE",
      "description": "Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.",
      "recommendation": "Review and remediate the identified issue.",
      "tool_name": "get_sdk_reference"
    },
    {
      "id": "AS-002",
      "severity": "High",
      "title": "Excessive Permission Surface",
      "description": "tool declares network permission",
      "recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
      "tool_name": "search_community"
    },
    {
      "id": "AS-002",
      "severity": "Medium",
      "title": "Excessive Permission Surface",
      "description": "tool declares db permission",
      "recommendation": "Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.",
      "tool_name": "search_community"
    },
    {
      "id": "AS-011",
      "severity": "Low",
      "title": "DoS Resilience — Missing Rate Limit / Timeout",
      "description": "tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration",
      "recommendation": "Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.",
      "tool_name": "search_community"
    },
    {
      "id": "AS-014",
      "severity": "Info",
      "title": "DEPENDENCY_INVENTORY_UNAVAILABLE",
      "description": "Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.",
      "recommendation": "Review and remediate the identified issue.",
      "tool_name": "search_community"
    }
  ],
  "summary": {
    "critical": 0,
    "high": 5,
    "medium": 2,
    "low": 6,
    "info": 5
  },
  "methodology": "https://github.com/AgentSafe-AI/tooltrust-directory/blob/main/docs/methodology.md",
  "tool_names": [
    "get_doc",
    "get_example",
    "get_sdk_reference",
    "search_community",
    "search_docs"
  ],
  "tool_contexts": [
    {
      "tool_name": "search_docs",
      "action": "ALLOW",
      "grade": "B",
      "behavior": [
        "uses_network"
      ],
      "dependency_visibility": "No dependency data",
      "dependency_note": "No metadata.dependencies or repo_url were exposed by this MCP server."
    },
    {
      "tool_name": "get_doc",
      "action": "ALLOW",
      "grade": "B",
      "behavior": [
        "uses_network"
      ],
      "destinations": [
        "dynamic URL input (url)",
        "hardcoded domain: docs.metamask.io",
        "hardcoded domain: llms.txt"
      ],
      "dependency_visibility": "No dependency data",
      "dependency_note": "No metadata.dependencies or repo_url were exposed by this MCP server."
    },
    {
      "tool_name": "get_example",
      "action": "REQUIRE_APPROVAL",
      "grade": "C",
      "behavior": [
        "reads_files",
        "uses_network"
      ],
      "dependency_visibility": "No dependency data",
      "dependency_note": "No metadata.dependencies or repo_url were exposed by this MCP server."
    },
    {
      "tool_name": "get_sdk_reference",
      "action": "ALLOW",
      "grade": "B",
      "behavior": [
        "uses_network"
      ],
      "dependency_visibility": "No dependency data",
      "dependency_note": "No metadata.dependencies or repo_url were exposed by this MCP server."
    },
    {
      "tool_name": "search_community",
      "action": "REQUIRE_APPROVAL",
      "grade": "C",
      "behavior": [
        "uses_network"
      ],
      "destinations": [
        "dynamic email recipient (topic_id)",
        "hardcoded domain: builder.metamask.io"
      ],
      "dependency_visibility": "No dependency data",
      "dependency_note": "No metadata.dependencies or repo_url were exposed by this MCP server."
    }
  ],
  "scan_history": [
    {
      "scan_date": "2026-04-14T02:14:16Z",
      "grade": "C",
      "risk_score": 27,
      "version": "smithery"
    },
    {
      "scan_date": "2026-04-16T02:26:28Z",
      "grade": "C",
      "risk_score": 27,
      "version": "smithery"
    },
    {
      "scan_date": "2026-04-17T02:14:47Z",
      "grade": "C",
      "risk_score": 27,
      "version": "smithery"
    }
  ]
}