Tracking Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Tracking Mcp Server (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP server that helps debug conversion tracking issues across GoHighLevel, Meta CAPI, webhooks, and GTM.
# Install dependencies
npm install
# Test tools locally
node test.js
# Run interactive CLI agent
node agent.js
# Start MCP server (for AI client connections)
node index.js| Tool | Description |
|---|---|
getWebhookEvents | Returns stored webhook events |
getGHLContacts | Fetch contacts from GoHighLevel |
getMetaEvents | Returns Meta CAPI tracked events |
getGTMEvents | Returns frontend GTM events |
getSystemLogs | Returns error logs |
debugConversion | Full analysis with issues + fixes |
Edit your Claude Desktop config file:
Windows: %APPDATA%\Claude\claude_desktop_config.json
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"conversion-debugger": {
"command": "node",
"args": ["D:/first mcp server/index.js"],
"env": {
"USE_MOCK_DATA": "true"
}
}
}
}Restart Claude Desktop after saving. You'll see the tools available in the chat.
Add to your VS Code settings.json or workspace settings:
{
"github.copilot.chat.mcpServers": {
"conversion-debugger": {
"command": "node",
"args": ["D:/first mcp server/index.js"],
"env": {
"USE_MOCK_DATA": "true"
}
}
}
}Or create .vscode/mcp.json in your workspace:
{
"servers": {
"conversion-debugger": {
"command": "node",
"args": ["${workspaceFolder}/index.js"],
"env": {
"USE_MOCK_DATA": "true"
}
}
}
}Add to Cursor settings (~/.cursor/mcp.json or project .cursor/mcp.json):
{
"mcpServers": {
"conversion-debugger": {
"command": "node",
"args": ["D:/first mcp server/index.js"],
"env": {
"USE_MOCK_DATA": "true"
}
}
}
}Add to your Continue config (~/.continue/config.json):
{
"experimental": {
"modelContextProtocolServers": [
{
"transport": {
"type": "stdio",
"command": "node",
"args": ["D:/first mcp server/index.js"]
}
}
]
}
}import { Client } from "@modelcontextprotocol/sdk/client/index.js";
import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js";
import { spawn } from "child_process";
const transport = new StdioClientTransport({
command: "node",
args: ["D:/first mcp server/index.js"],
});
const client = new Client({ name: "my-client", version: "1.0.0" });
await client.connect(transport);
// List available tools
const tools = await client.listTools();
console.log(tools);
// Call a tool
const result = await client.callTool({
name: "debugConversion",
arguments: {},
});
console.log(result);
await client.close();Copy .env.example to .env and configure:
# Use mock data (set to false for live API calls)
USE_MOCK_DATA=true
# GoHighLevel
GHL_API_KEY=your_api_key
GHL_LOCATION_ID=your_location_id
# Meta CAPI
META_ACCESS_TOKEN=your_access_token
META_PIXEL_ID=your_pixel_idOnce connected to an MCP client, try these prompts:
debugConversion and explain the issuesgetGHLContacts with date filtersfirst mcp server/
├── index.js # MCP server entry point
├── agent.js # Interactive CLI agent
├── test.js # Tool testing script
├── package.json
├── .env.example
├── config/
│ └── env.js # Environment configuration
├── clients/
│ ├── httpClient.js # HTTP utilities
│ ├── ghlClient.js # GoHighLevel API client
│ └── metaClient.js # Meta CAPI client
├── data/
│ ├── mockData.js # Mock data for testing
│ └── dataProvider.js # Live/mock data switching
└── tools/
├── utils.js
├── getWebhookEvents.js
├── getGHLContacts.js
├── getMetaEvents.js
├── getGTMEvents.js
├── getSystemLogs.js
└── debugConversion.js~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.