redis/mcp-redis

Review signals: 13 known vulnerability.

OSV reports a known vulnerability in this dependency version. 4 distinct locations. 13 findings.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• The string tools can set a value with an expiration time: Real input produced the expected result: Successfully set coldpass:claim:session with expiration 120 seconds

  Source: - `string` tools to set, get strings with expiration.

  Input: {"tool": "set", "arguments": {"key": "coldpass:claim:session", "value": "session-42", "expiration": 120}}

  Expected: Successfully set coldpass:claim:session with expiration 120 seconds

  Command: uv run redis-mcp-server --url redis://localhost:6379/0 tools/call {"tool": "set", "arguments": {"key": "coldpass:claim:session", "value": "session-42", "expiration": 120}}

  Observed: Successfully set coldpass:claim:session with expiration 120 seconds"}], "structuredContent": {"result": "Successfully set coldpass:claim:session with expiration 120 seconds"}, "isError": false}

Examples

• Repository test suite runs and passes (CI test command): command completed successfully

  Source: .github/workflows/ci.yml

  Input: uv run pytest tests/ -v

  Expected: all tests pass

  Command: uv run pytest tests/ -v

  Observed: 30 0 100% src/tools/sorted_set.py 30 0 100% src/tools/stream.py 72 0 100% src/tools/string.py 39 4 90% src/version.py 1 0 100% -------------------------------------------------------- TOTAL 1056 125 88% Coverage HTML written to dir htmlcov Coverage XML written to file coverage.xml Required test coverage of 80% reached. Total coverage: 88.16% ============================= 345 passed in 16.24s =============================

Local or hosted: local

Run the Redis MCP Server (stdio) from a development install and call its string 'set' tool against a live Redis, reading back the confirmation; plus the repo's CI pytest suite.

cd <guest-path> && ls -la && cat README.md | head -300 && python3 --version && id -u && git status 2>&1 | head -3
cd <guest-path> && sed -n 300,600p README.md; echo ----; which uv docker node npm; ls .coldpass; cat .env.example; ls examples tests; echo $CDP_URL $<env-var> $REDIS_HOST
cd <guest-path> && git init -q && git remote add origin https://github.com/redis/mcp-redis && git fetch --depth 1 origin 0506f6b62e109c4364d92ca390d13fc15e9c202f 2>&1 | tail -3; git reset --mixed FETCH_HEAD 2>&1; git log --oneline -1; which redis-server redis-cli; uv --version; sudo -n true && echo SUDO_OK; (timeout 120 uv python install 3.14 2>&1 | tail -5)
sudo apt-get -o DPkg::Lock::Timeout=300 update -qq 2>&1 | tail -2; sudo apt-get -o DPkg::Lock::Timeout=300 install -y -qq redis-server 2>&1 | tail -3; which redis-server; redis-server --version; (redis-cli ping 2>&1 || true)
cd <guest-path> && export PATH=<guest-path> && uv venv --python 3.14 -q 2>&1 | tail -3; source .venv/bin/activate && uv sync 2>&1 | tail -4; uv run redis-mcp-server --help 2>&1 | head -30
cd <guest-path> && ls src/tools; grep -n "def \<email>" src/tools/string.py | head -30; sed -n '/Testing/,/Example Use/p' README.md | head -60
cd <guest-path> && sed -n 1,60p src/tools/string.py; sed -n '/^## Testing/,/^## Example/p' README.md | head -40; ls .github/workflows; sed -n 1,40p src/main.py | grep -n "def \|mcp" 
cd <guest-path> && grep -n "string\` tools to set, get strings with expiration" README.md && mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"mcp","argv":["uv","run","redis-mcp-server","--url","redis://localhost:6379/0"],"cwd":"<guest-path>","env":{"REDIS_HOST":"127.0.0.1","REDIS_PORT":"6379","REDIS_DB":"0"},"tool":"set","arguments":{"key":"coldpass:probe:greeting","value":"hello-coldpass","expiration":300},"expected_text":"Successfully set coldpass:probe:greeting with expiration 300 seconds"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"The string tools can set a value with an expiration time","source":"- `string` tools to set, get strings with expiration.","input":"key coldpass:claim:session value session-42 expiration 120","expected":"Successfully set coldpass:claim:session with expiration 120 seconds","probe_kind":"mcp","argv":["uv","run","redis-mcp-server","--url","redis://localhost:6379/0"],"tool":"set","arguments":{"key":"coldpass:claim:session","value":"session-42","expiration":120},"expected_text":"Successfully set coldpass:claim:session with expiration 120 seconds","cwd":"<guest-path>","env":{"REDIS_HOST":"127.0.0.1","REDIS_PORT":"6379","REDIS_DB":"0"}}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Entry points inspected (src/main.py, pyproject scripts, README). The server is a stdio MCP server that only runs when a client launches it and makes tool calls; there is no built-in cron, scheduler, loop, --once or --now flag, or webhook trigger in the product.","checks":[]}
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Repository test suite (README Testing points to the MCP Inspector; the CI workflow runs the pytest suite)","source":"README.md#testing","reason":"README's Testing section only documents an interactive MCP Inspector (npx), which needs a browser/UI and is not a finite check; not run. The offline/integration pytest suite is run separately by the CI workflow, see report."}]
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -40
cd <guest-path> && grep -n "run:\|pytest\|redis" .github/workflows/ci.yml | head -30; grep -n "pytest" -A5 pyproject.toml | head -20
cd <guest-path> && timeout 600 uv run pytest tests/ -v 2>&1 | tail -25; echo EXIT=${PIPESTATUS[0]}
cd <guest-path> && cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"Repository test suite runs and passes (CI test command)","source":".github/workflows/ci.yml","input":"uv run pytest tests/ -v","expected":"all tests pass","argv":["uv","run","pytest","tests/","-v"],"cwd":"<guest-path>","env":{"REDIS_HOST":"127.0.0.1","REDIS_PORT":"6379","REDIS_DB":"0"},"expected_text":"345 passed"}]
EOF
<env-var>=<guest-path> python3 -I <guest-path> --validate --replay > <guest-path> 2>&1; echo EXIT=$?; python3 -c "
import json;d=json.load(open('<guest-path>'));print(d.get('valid'),d.get('problems'));r=d['replay'];print(r['status']);print([ (e.get('verdict')) for e in r['details'].get('example_checks',[])], [c.get('verdict') for c in r['details'].get('claims',[])])" 2>&1 | tail -5
cd <guest-path> && python3 -c "
import json;d=json.load(open('<guest-path>'))['replay']['details']
print([e.get('verdict') for e in d['example_checks']],[c.get('verdict') for c in d['claims']], d['working'])" && mkdir -p .coldpass && cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Run the Redis MCP Server (stdio) from a development install and call its string 'set' tool against a live Redis, reading back the confirmation; plus the repo's CI pytest suite.","operation_scope":"Linux guest (Ubuntu, WSL2 kernel), Python 3.14.9 via uv, local Redis 7.0.15 on 127.0.0.1:6379 (apt redis-server; already running). No Docker, no cloud/EntraID, no browser, no OpenAI key.","steps":["git init; git remote add origin https://github.com/redis/mcp-redis; git fetch --depth 1 origin 0506f6b62e109c4364d92ca390d13fc15e9c202f; git reset --mixed FETCH_HEAD","sudo apt-get -o DPkg::Lock::Timeout=300 install -y redis-server (Redis 7.0.15 already reachable on localhost)","uv python install 3.14 (installed 3.14.9)","uv venv --python 3.14","uv sync","uv run redis-mcp-server --help","uv run redis-mcp-server --url redis://localhost:6379/0 (stdio MCP server, driven by checker tools/call set)","uv run pytest tests/ -v (CI test command, without the uv add step): 345 passed, 88% coverage"],"deviations":["Guest system Python is 3.12.3, but the README requires Python 3.14 (badge and dev install). Installed 3.14.9 with uv instead.","Redis was not installed; installed redis-server 7.0.15 via apt-get (the README does not give a Redis install command).","CI's 'uv add --dev pytest ...' step was skipped to avoid modifying pyproject.toml/uv.lock; pytest is already in the dev dependency group, so 'uv run pytest tests/ -v' ran directly.","README 'Testing' section (MCP Inspector via npx) was not run: it is an interactive UI, not a finite check.","Not run: examples/redis_assistant.py (needs OPENAI_API_KEY, an external credential), Docker build, Azure EntraID flows, Claude Desktop/VS Code integrations (client configs, not product behavior)."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
python3 -I -c "import json;json.load(open('<guest-path>'));print('report ok')"
cd <guest-path> && python3 -I -c "
import json;d=json.load(open('<guest-path>'));print(list(d.keys()));r=d['replay'];print(r['status'], list(r['details'].keys()))
print([e.get('verdict') for e in r['details'].get('example_checks',[]) ] if 'example_checks' in r['details'] else 'no example_checks key')
print([c.get('verdict') for c in r['details'].get('claims',[])])
print(r['details'].get('working'))
"
cd <guest-path> && grep -o '"verdict": "[a-z]*"' <guest-path> | sort | uniq -c; grep -o '"example_checks"' <guest-path> | head -1; grep -o '"outcome": "[^"]\{0,160\}' <guest-path> | tail -2
cd <guest-path> && mkdir -p .coldpass && cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Run the Redis MCP Server (stdio) from a development install and call its string 'set' tool against a live Redis, reading back the confirmation; plus the repo's CI pytest suite.","operation_scope":"Linux guest (Ubuntu, WSL2 kernel), Python 3.14.9 via uv, local Redis 7.0.15 on 127.0.0.1:6379 (apt redis-server). No Docker, no cloud/EntraID, no browser, no OpenAI key.","steps":["git init; git remote add origin https://github.com/redis/mcp-redis; git fetch --depth 1 origin 0506f6b62e109c4364d92ca390d13fc15e9c202f; git reset --mixed FETCH_HEAD","sudo apt-get -o DPkg::Lock::Timeout=300 install -y redis-server","uv python install 3.14 (installed 3.14.9)","uv venv --python 3.14","uv sync","uv run redis-mcp-server --help","uv run redis-mcp-server --url redis://localhost:6379/0 (stdio MCP server; tools/call set returned 'Successfully set coldpass:probe:greeting with expiration 300 seconds')","uv run pytest tests/ -v (CI test command without the uv add step): 345 passed, 88% coverage"],"deviations":["Guest system Python is 3.12.3, but the README requires Python 3.14 (badge and dev install). Installed 3.14.9 with uv instead.","Redis was not installed; installed redis-server 7.0.15 via apt-get (the README gives no Redis install command). Redis was already answering PONG on localhost:6379 when checked.","CI's 'uv add --dev pytest ...' step was skipped to avoid modifying pyproject.toml/uv.lock; pytest is already in the dev dependency group, so 'uv run pytest tests/ -v' ran directly.","README 'Testing' section (MCP Inspector via npx) was not run: it is an interactive UI, not a finite check.","Not run: examples/redis_assistant.py (needs OPENAI_API_KEY, an external credential), Docker build, Azure EntraID flows, Claude Desktop/VS Code integrations (client configs, not product behavior).","No product scheduler/cycle exists; cycles.json has detected:false."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
python3 -I -c "import json;json.load(open('<guest-path>'));print('report ok')"; <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | grep -o '"valid": [a-z]*\|"status": "[A-Z]*"' | head -3