70
grade C
4 days ago
mcp_so
Aloha Fyi Hawaii
First dedicated Hawaii tourism MCP server. Search 2,583 tours, 579 events, Groupon deals across Oahu, Maui, Big Island, and Kauai. Every result includes affiliate booking links. Powered by aloha.fyi.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 2 credentials: MCP_API_KEY, MCP_BYPASS_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
DATABASE_URL— "postgresql://..." PORT=9624 node dist/http.js🔐 secret
MCP_API_KEY🔐 secret
MCP_BYPASS_TOKENconfig
MCP_CACHE_TTL_MSconfig
MCP_DAILY_QUOTAconfig
MCP_IP_SALTconfig
MCP_RATE_LIMITconfig
MCP_REDIRECT_BASEconfig
PORT— DATABASE_URL="postgresql://..." =9624 node dist/http.jsconfig
SUPABASE_DB_URL// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/baphometnxg-aloha-fyi-mcp-1fbj7z)commit: aa4126a850599d9206dd16adcc1a16393fa07f41
code hash: cb6a934ab2ccd5ef90c1afb681e41b5c02b162c664779afc5e69657dbe4ed108
verified: 4/18/2026, 6:08:34 PM