grade F

3 days ago

mcp_so

Desktop Commander MCP

This is MCP server for Claude that gives it terminal control, file system search and diff file editing capabilities

→ wonderwhy-er/ClaudeDesktopCommander · listed on mcp_so

Install from

mcp.so

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Reads files from sensitive locations

Touches: /.dockerenv, /.dockerenv

⚠️

Known vulnerabilities in dependencies: 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configCODESPACES

configCODESPACE_NAME

configCOMPOSE_PROJECT_NAME

configCOMPOSE_SERVICE

configCOMSPEC

configCONTAINER_HOST

configCONTAINER_IMAGE

configComSpec

configDC_DEBUG

configDC_FLAG_URL

configDOCKER_CONTAINER

configDOCKER_IMAGE

configDOCKER_NODE_ID

configDOCKER_SWARM_MODE

configGITHUB_ACTIONS

configGITHUB_REPOSITORY

configGITHUB_WORKFLOW

configGITLAB_CI

configGITPOD_WORKSPACE_ID

configHOSTNAME

configHOST_PLATFORM

configIMAGE_NAME

configJENKINS_URL

configJOB_NAME

configKUBERNETES_NAMESPACE

configKUBERNETES_NODE_NAME

configKUBERNETES_PORT

configKUBERNETES_SERVICE_HOST

configLXC_NAME

configMCP_CLIENT_DOCKER

configMCP_DXT

configMCP_SERVER_URL

configPODMAN_CONTAINER

configPODMAN_IMAGE

configPOD_NAME

configPOD_NAMESPACE

configPROMPT

configSHELL— execute_command({ "command": "echo $" })

configSystemRoot

configTERM

configTERM_PROGRAM

configTRAVIS

configVSCODE_PID

configWSLENV

configWSL_DISTRO_NAME

configWT_SESSION

config_

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/wonderwhy-er-claudedesktopcommander-yr4qzk)](https://m8ven.ai/mcp/wonderwhy-er-claudedesktopcommander-yr4qzk)

commit: 70f4450eebae6645de1c2e75ff0d30a1e38305cb

code hash: 66b3e9cdead30cb20b985061504374e3408fa5a33ebce7662c03ad9594f64883

verified: 4/18/2026, 7:17:14 PM

view raw JSON →