This WebMCP Music Composer project is a functional demonstration of the WebMCP Protocol, illustrating how AI agents can interact with local browser contexts (tools) to achieve complex workflows autonomously.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Vite has an `server.fs.deny` bypass with an invalid `request-target`
Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling
Vite's server.fs.deny bypassed with /. for files under project root
vite allows server.fs.deny bypass via backslash on Windows
Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
[](https://m8ven.ai/mcp/leanmcp-community-music-composer-webmcp-19d7ac)