An MCP server for the Octopus Energy Japan GraphQL API that allows users to retrieve electricity consumption, cost estimates, and contract details. It enables 30-minute interval usage analysis and postal code area searches while ensuring privacy by excluding personal address information.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@hono/node-server has authorization bypass for protected static paths via encoded slashes in Serve Static Middleware
Hono vulnerable to arbitrary file access via serveStatic vulnerability
Hono: Path traversal in toSSG() allows writing files outside the output directory
@hono/node-server: Middleware bypass via repeated slashes in serveStatic
Hono missing validation of cookie name on write path in setCookie()
process.env. You'll be asked to provide them before it can run.OCTOPUS_ACCOUNT_NUMBER— OCTOPUS_EMAIL=you@example.com OCTOPUS_PASSWORD=your-password =A-AAAA1111 npx tako-mcpOCTOPUS_EMAIL— you@example.com OCTOPUS_PASSWORD=your-password OCTOPUS_ACCOUNT_NUMBER=A-AAAA1111 npx tako-mcpOCTOPUS_PASSWORD— OCTOPUS_EMAIL=you@example.com =your-password OCTOPUS_ACCOUNT_NUMBER=A-AAAA1111 npx tako-mcpPORT— 未指定時は空きポートが自動選択されます。[](https://m8ven.ai/mcp/arrow2nd-tako-mcp-597cod)