registry / record
github.com/googleapis/mcp-toolbox
Does github.com/googleapis/mcp-toolbox MCP work in Claude Code and Cursor? Throne executed github.com/googleapis/mcp-toolbox mcp in a single-use Firecracker microVM and replayed both recorded client behaviours. Compatibility verdict: inconclusive. Is github.com/googleapis/mcp-toolbox mcp safe? Static security scan: 41 finding(s) to review under security ruleset v1. The full per-step results, security findings, scan date, and evidence hash are below.
> throne registry github.com/googleapis/mcp-toolbox
sealed
- scan id
- 93dfa52dfb2b44b8a11aa635ed292904
- target
- https://github.com/googleapis/mcp-toolbox
- sealed at
- 2026-06-16 16:46:25Z
- evidence hash
- sha256:c739eff52f003e1f7494c8b6da8003bb89258d954d4fab11254d0870049c6471
server never launched: no package.json or pyproject.toml at the repository root, Throne can launch Node (npm/pnpm/yarn) and Python (uv) projects
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
server never launched: no package.json or pyproject.toml at the repository root, Throne can launch Node (npm/pnpm/yarn) and Python (uv) projects
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
not run, server never launched
token assigned a literal value opaq… (23 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:345token assigned a literal value opaq… (19 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:360token assigned a literal value opaq… (22 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:378token assigned a literal value opaq… (21 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:404token assigned a literal value opaq… (16 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:415token assigned a literal value opaq… (18 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:455token assigned a literal value opaq… (23 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:708token assigned a literal value opaq… (19 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:723token assigned a literal value opaq… (22 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:741token assigned a literal value opaq… (21 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:767token assigned a literal value opaq… (16 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:778token assigned a literal value opaq… (18 chars), verify it is not a live credential
mcp-toolbox-HEAD/internal/auth/generic/generic_test.go:818token assigned a literal value this… (23 chars), verify it is not a live credential
mcp-toolbox-HEAD/tests/auth/auth_integration_test.go:209"prepack" runs on git-dependency installs and local dev (not registry installs): 'node scripts/downloadBinary.js darwin arm64'
mcp-toolbox-HEAD/npm/server-darwin-arm64/package.json"prepack" runs on git-dependency installs and local dev (not registry installs): 'node scripts/downloadBinary.js darwin x64'
mcp-toolbox-HEAD/npm/server-darwin-x64/package.json"prepack" runs on git-dependency installs and local dev (not registry installs): 'node scripts/downloadBinary.js linux x64'
mcp-toolbox-HEAD/npm/server-linux-x64/package.json"prepack" runs on git-dependency installs and local dev (not registry installs): 'node scripts/downloadBinary.js win32 arm64'
mcp-toolbox-HEAD/npm/server-win32-arm64/package.json"prepack" runs on git-dependency installs and local dev (not registry installs): 'node scripts/downloadBinary.js win32 x64'
mcp-toolbox-HEAD/npm/server-win32-x64/package.jsonspawn() called with a dynamically built command (heuristic, review): "command, npxArgs, { shell: os.platform() === 'win32', stdio: 'inherit', env });"
mcp-toolbox-HEAD/cmd/internal/skills/generator.go:197execSync() called with a dynamically built command (heuristic, review): "checkCommand, { stdio: 'pipe', encoding: 'utf-8' }).trim();"
mcp-toolbox-HEAD/cmd/internal/skills/generator.go:209spawn() called with a dynamically built command (heuristic, review): "toolboxBinary, toolboxArgs, { stdio: 'inherit', env });"
mcp-toolbox-HEAD/cmd/internal/skills/generator.go:228execSync() called with a dynamically built command (heuristic, review): '`xattr -d com.apple.quarantine "${binPath}"`, { stdio: \'ignore\' });'
mcp-toolbox-HEAD/npm/server/bin/run.js:40spawn() called with a dynamically built command (heuristic, review): "binPath, process.argv.slice(2), { stdio: 'inherit' })"
mcp-toolbox-HEAD/npm/server/bin/run.js:49execSync() called with a dynamically built command (heuristic, review): '`chmod +x "${destPath}"`);'
mcp-toolbox-HEAD/npm/server-darwin-arm64/scripts/downloadBinary.js:73execSync() called with a dynamically built command (heuristic, review): '`chmod +x "${destPath}"`);'
mcp-toolbox-HEAD/npm/server-darwin-x64/scripts/downloadBinary.js:73execSync() called with a dynamically built command (heuristic, review): '`chmod +x "${destPath}"`);'
mcp-toolbox-HEAD/npm/server-linux-x64/scripts/downloadBinary.js:73execSync() called with a dynamically built command (heuristic, review): '`chmod +x "${destPath}"`);'
mcp-toolbox-HEAD/npm/server-win32-arm64/scripts/downloadBinary.js:73execSync() called with a dynamically built command (heuristic, review): '`chmod +x "${destPath}"`);'
mcp-toolbox-HEAD/npm/server-win32-x64/scripts/downloadBinary.js:73system() called with a dynamically built command (heuristic, review): ')'
mcp-toolbox-HEAD/pypi/src/toolbox_server/main.py:10subprocess.run() called with a dynamically built command (heuristic, review): '[binary_path] + sys.argv[1:])'
mcp-toolbox-HEAD/pypi/src/toolbox_server/main.py:4018 non-local endpoint host(s) referenced in code, verify each is expected for this server's purpose: accounts.google.com (mcp-toolbox-HEAD/internal/auth/google/google.go:112), alloydb.googleapis.com (mcp-toolbox-HEAD/internal/sources/alloydbadmin/alloydbadmin.go:94), cloud.google.com (mcp-toolbox-HEAD/internal/log/handler.go:137), console.cloud.google.com (mcp-toolbox-HEAD/internal/server/static/js/auth.js:135), datatracker.ietf.org (mcp-toolbox-HEAD/internal/server/prm.go:18), developers.google.com (mcp-toolbox-HEAD/internal/server/static/js/toolDisplay.js:515), geminidataanalytics.googleapis.com (mcp-toolbox-HEAD/internal/tools/bigquery/bigqueryconversationalanalytics/bigqueryconversationalanalytics.go:38), mcp-toolbox.dev (mcp-toolbox-HEAD/.hugo/static/js/custom-layout.js:116), monitoring.googleapis.com (mcp-toolbox-HEAD/internal/sources/cloudmonitoring/cloud_monitoring.go:86), oauth2.googleapis.com (mcp-toolbox-HEAD/internal/auth/google/google.go:174), opentelemetry.io (mcp-toolbox-HEAD/internal/server/mcp.go:732), sqladmin.googleapis.com (mcp-toolbox-HEAD/internal/sources/cloudsqladmin/cloud_sql_admin.go:103), storage.googleapis.com (mcp-toolbox-HEAD/.ci/generate_release_table.sh:42), us-npm.pkg.dev (mcp-toolbox-HEAD/.ci/publish_npm_to_ar.sh:32), us-python.pkg.dev (mcp-toolbox-HEAD/.ci/publish_pypi_to_ar.sh:39)
mcp-toolbox-HEAD/.ci/generate_release_table.sh:42obsolete protocol version string '2024-11-05' in source
mcp-toolbox-HEAD/internal/server/mcp/util/util.go:18obsolete protocol version string '2024-11-05' in source
mcp-toolbox-HEAD/internal/server/mcp.go:403obsolete protocol version string '2024-11-05' in source
mcp-toolbox-HEAD/internal/server/mcp_test.go:43obsolete protocol version string '2024-11-05' in source
mcp-toolbox-HEAD/tests/alloydb/alloydb_integration_test.go:124obsolete protocol version string '2024-11-05' in source
mcp-toolbox-HEAD/tests/alloydbainl/alloydb_ai_nl_integration_test.go:239obsolete protocol version string '2024-11-05' in source
mcp-toolbox-HEAD/tests/auth/auth_integration_test.go:310obsolete protocol version string '2024-11-05' in source
mcp-toolbox-HEAD/tests/cloudgda/cloud_gda_integration_test.go:188obsolete protocol version string '2024-11-05' in source
mcp-toolbox-HEAD/tests/embedding.go:104obsolete protocol version string '2024-11-05' in source
mcp-toolbox-HEAD/tests/firestore/firestore_integration_test.go:375obsolete protocol version string '2024-11-05' in source
mcp-toolbox-HEAD/tests/tool.go:976- target
- https://github.com/googleapis/mcp-toolbox github
- engine
- sandboxed
- claude code
- calibration: partial recorded=9,spec=0,assumed=9
- cursor
- calibration: partial recorded=11,spec=0,assumed=7
- chatgpt desktop
- calibration: unavailable recorded=0,spec=2,assumed=16
- steps exercised
- 18 of 18
- test suite
- v1.0.0
- security ruleset
- v1.0.0
- sealed at
- 2026-06-16 16:46:25Z
- evidence hash
- sha256:c739eff52f003e1f7494c8b6da8003bb89258d954d4fab11254d0870049c6471
- valid until
- 2026-09-14
maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.
this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.