Back to MCP Trust Indexm8ven
71
/ 100
2 days ago
glama

dropscan-mcp

MCP server for the Dropscan postal-mail-to-email API. It enables reading and managing physical mail items, including listing, downloading scans, and (when explicitly enabled) executing actions like forwarding or destroying letters.

→ bitterdev/dropscan-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configDROPSCAN_DOWNLOAD_DIR— The download tools save the asset to disk (default ~/Downloads, override with save_path or the env var) and return the saved path, byte size and content type.
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/bitterdev-dropscan-mcp-mzwh0h)](https://m8ven.ai/mcp/bitterdev-dropscan-mcp-mzwh0h)
commit: 86a9fa603e5e3767b1ce72d483fb53598e6d1cbb
code hash: ef8a00a4b433c207e1bb37cafcf6b2987fb090e7fdc6797335c42335b04171cd
verified: 7/29/2026, 9:11:20 AM
view raw JSON →