anaplan-mcp

v0.0.1 safe
4.0
Medium Risk

MCP Server for Anaplan.

🤖 AI Analysis

Final verdict: SAFE

The package has minimal risks associated with network calls, shell execution, obfuscation, and credential handling. However, low maintainer activity and poor metadata quality slightly increase the overall risk score.

  • No network calls detected
  • No shell execution detected
  • No obfuscation patterns detected
  • No credential harvesting patterns detected
  • Low maintainer activity and poor metadata quality
Per-check LLM notes
  • Network: No network calls detected, which is normal if the package does not require external API interactions.
  • Shell: No shell execution patterns detected, indicating the package likely does not execute system commands.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious intent.
  • Credentials: No credential harvesting patterns detected, indicating safe handling of secrets.
  • Metadata: The package shows signs of low maintainer activity and poor metadata quality, raising concerns but not definitive evidence of malicious intent.

📦 Package Quality Overall: Low (2.8/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (2671 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 24 type-annotated function signatures detected in source
○ Low Multiple Contributors 1.0

Unable to verify contributor count: no GitHub repository found

  • No GitHub repository linked — contributor count unavailable

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: valantic.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 6.0

3 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
  • Package has no PyPI classifiers (low effort / metadata quality)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with anaplan-mcp 
Create a fully functional mini-application that leverages the 'anaplan-mcp' package to manage and interact with Anaplan models. Your application will serve as a bridge between local Python scripts and Anaplan models, enabling users to automate tasks such as data upload/download, model execution, and status checks.

Step 1: Set up the project environment
- Initialize a new Python project.
- Install the 'anaplan-mcp' package along with other necessary dependencies like 'requests'.
- Configure a virtual environment for your project.

Step 2: Define the core functionalities
- Develop a function to authenticate with the Anaplan MCP server using API keys or tokens.
- Implement functions to upload data from CSV files into Anaplan modules.
- Create functions to download data from Anaplan modules into CSV files.
- Add functionality to execute Anaplan actions and check their statuses.

Step 3: Enhance user experience
- Design a simple command-line interface (CLI) that allows users to easily select and run these functions.
- Provide options for logging and error handling within the CLI.
- Include a help menu and documentation for all commands available in the CLI.

Step 4: Test and validate
- Write unit tests for each of the core functionalities to ensure they work as expected.
- Perform integration tests to verify the interaction with the Anaplan MCP server.
- Document any issues encountered during testing and how they were resolved.

Step 5: Deployment and maintenance
- Package your application into a distributable format, such as a pip-installable package.
- Prepare deployment instructions and maintain a GitHub repository for version control.
- Plan for regular updates based on feedback and changes in the 'anaplan-mcp' package.

Suggested Features:
- Support for multiple Anaplan environments (e.g., Dev, QA, Prod).
- Automatic retry logic for failed requests to the Anaplan MCP server.
- Integration with popular cloud storage services for data persistence.
- Detailed logging of all interactions with the Anaplan MCP server.
- Customizable action execution with parameters passed through the CLI.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!