/ 100

7 days ago

pulsemcp

Alibaba Cloud RDS

Item: Alibaba Cloud RDS
Rating: 74
Author: M8ven

Provides a bridge to Alibaba Cloud's Relational Database Service (RDS) for managing database instances, monitoring performance, and configuring network settings through natural language interactions.

→ aliyun/alibabacloud-rds-openapi-mcp-server · listed on pulsemcp

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

PulseMCP mcp.so

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 8 credentials: DINGTALK_APP_CLIENT_SECRET, FEISHU_APP_SECRET, QQ_CLIENT_SECRET, WECOM_SECRET, ACCESS_SECRET, ALIBABA_CLOUD_ACCESS_KEY_SECRET, API_KEY, ALIBABA_CLOUD_SECURITY_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configDINGTALK_APP_CLIENT_ID

🔐 secretDINGTALK_APP_CLIENT_SECRET

configDINGTALK_ROBOT_CODE

configFEISHU_BOT_OPEN_ID

configFEISHU_BOT_USER_ID

configFEISHU_BOT_NAME

configFEISHU_GROUP_POLICY

configFEISHU_APP_ID

🔐 secretFEISHU_APP_SECRET

configFEISHU_DOMAIN

configQQ_APP_ID

🔐 secretQQ_CLIENT_SECRET

configWECOM_BOT_ID

🔐 secretWECOM_SECRET

configWECOM_WEBSOCKET_URL

configRDS_COPILOT_CHAT_WORKERS

configRDS_COPILOT_ENDPOINT

configACCESS_KEY_ID

🔐 secretACCESS_SECRET

configRDS_BOT_BRIDGES

configALIBABA_CLOUD_ACCESS_KEY_ID— "": "$you_access_id",

🔐 secretALIBABA_CLOUD_ACCESS_KEY_SECRET— "": "$you_access_key"

configTOOLSET_DEBUG

configMCP_TOOLSETS— Environment variable:

configSERVER_PORT

configSERVER_TRANSPORT— export =sse;

configSERVER_HOST— export =127.0.0.1; # Default: 127.0.0.1. API_KEY is required when binding to a non-loopback host.

🔐 secretAPI_KEY— export SERVER_HOST=127.0.0.1; # Default: 127.0.0.1. is required when binding to a non-loopback host.

🔐 secretALIBABA_CLOUD_SECURITY_TOKEN— export =$you_sts_security_token; # optional, required when using STS Token

configALLOW_HEADER_CREDENTIALS— export =false; # Default false. Set true only in trusted deployments that require per-request credentials.

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/aliyun-alibabacloud-rds-openapi-mcp-server-1gxaiu)](https://m8ven.ai/mcp/aliyun-alibabacloud-rds-openapi-mcp-server-1gxaiu)

commit: 70e3995d567cdea92c4a46d10355ec65e5a62c8a

code hash: 13a48fba848affd78b373daa04ab41feb2d297fcd77c8dd5518c5480ea9a0737

verified: 7/24/2026, 8:48:58 AM

view raw JSON →