74
/ 100
7 days ago
pulsemcp
Aiven
Provides direct access to Aiven's cloud database and messaging services, enabling management of PostgreSQL, Kafka, ClickHouse, Valkey, and OpenSearch infrastructure through the Aiven API.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 4 credentials: AIVEN_TOKEN, MCP_ACORN_SECRET, MCP_EDGE_AUTH_SECRET, OPENAI_APPS_CHALLENGE_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 high1 low
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
yaml is vulnerable to Stack Overflow via deeply nested YAML collections
Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
AIVEN_ALLOW_SECRETS— No false Set to true to expose the aiven_service_connection_info tool, which returns live credentials (passwords, connection URIs, certs) into the conversation. Disabled while AIVEN_READ_ONLY=true.config
AIVEN_API_ORIGINconfig
AIVEN_READ_ONLY— No false Set to true to expose only read-only toolsconfig
AIVEN_SERVICES_SCOPE🔐 secret
AIVEN_TOKEN— You must provide your Aiven API token via the environment variable. [Create a token here](https://console.aiven.io/profile/tokens).config
AIVEN_WRITE_ALLOWLIST— No -- Comma-separated tool names to re-enable while AIVEN_READ_ONLY=true (e.g. aiven_kafka_topic_create). Ignored when read-only mode is not enabled.config
EXTRA_PROTECTION— No false Set to true on HTTP deployments to require a valid X-Edge-Auth header on every request except GET /health. See [Edge protection rollout](#edge-protection-rollout) below.config
MAINTENANCE_MODE🔐 secret
MCP_ACORN_SECRET🔐 secret
MCP_EDGE_AUTH_SECRET— When EXTRA_PROTECTION=true -- Shared secret; must match the value Cloudflare injects as X-Edge-Auth via Transform Rules.config
MCP_HOST— To point a remote deployment at a custom host (e.g. your local build), set :config
MCP_MAX_TOOL_RESULT_CHARSconfig
MCP_TRANSPORT— pnpm install && pnpm generate:api-types && pnpm generate && pnpm build && AIVEN_TOKEN="<YOUR_TOKEN>" ="http" PORT=3000 node dist/index.jsconfig
MODEL_ARMOR_DEBUGconfig
MODEL_ARMOR_ENABLEDconfig
MODEL_ARMOR_LOCATIONconfig
MODEL_ARMOR_SA_JSONconfig
MODEL_ARMOR_TEMPLATE🔐 secret
OPENAI_APPS_CHALLENGE_TOKENconfig
PORT— pnpm install && pnpm generate:api-types && pnpm generate && pnpm build && AIVEN_TOKEN="<YOUR_TOKEN>" MCP_TRANSPORT="http" =3000 node dist/index.jsconfig
SENTRY_DSN// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/aiven-open-mcp-aiven-1pkd94)commit: f3d9f6334ad6207bb05120f9a379ab1801770ff4
code hash: 8c49bd5ba5555a2749209cd7a414d6178cca5fcdefba0cbcdbeb58e377be6fcc
verified: 7/24/2026, 8:46:34 AM