/ 100

27 days ago

official

BidDeed MCP

Item: BidDeed MCP
Rating: 0
Author: M8ven

AI-powered foreclosure auction intelligence for Florida counties via MCP tools.

→ breverdbidder/cli-anything-biddeed · listed on official

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Official

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

12 flows detected: NEXT_PUBLIC_SUPABASE_ANON_KEY, SUPABASE_SERVICE_ROLE_KEY, SUPABASE_ACCESS_TOKEN. We can’t prove the destination matches the brand the credential belongs to.

🚨

Reads files from sensitive locations

Touches: ~/.config/cli-anything, ~/.config/cli-anything/linkedin_session.json

🔐

You'll be asked for 35 credentials: BATCHDATA_API_KEY, BIDDEED_API_KEY, BIDDEED_SUPABASE_KEY, EXA_API_KEY, GEMINI_API_KEY, NEXT_PUBLIC_SUPABASE_ANON_KEY, REISKIP_API_KEY, ROUTER_PROXY_KEY, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, SUPABASE_ACCESS_TOKEN, SUPABASE_DB_PASSWORD, SUPABASE_KEY, SUPABASE_SERVICE_KEY, SUPABASE_SERVICE_ROLE_KEY, TELEGRAM_BOT_TOKEN, WATCH_TOKEN, WORKOS_API_KEY, ZONEWISE_API_KEY, POSTHOG_API_KEY, GITHUB_TOKEN, ANTHROPIC_API_KEY, GOOGLE_PSI_KEY, GOOGLE_SEARCH_CONSOLE_KEY, STITCH_API_KEY, GOOGLE_API_KEY, DEEPSEEK_API_KEY, GH_TOKEN, FIRECRAWL_API_KEY, YOUTUBE_DATA_API_KEY, YOUTUBE_API_KEY, INSTAGRAM_ACCESS_TOKEN, SUPADATA_API_KEY, LINKEDIN_PASSWORD, BIDDEED_BOT_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretBATCHDATA_API_KEY

🔐 secretBIDDEED_API_KEY

🔐 secretBIDDEED_SUPABASE_KEY

configBIDDEED_SUPABASE_URL

configCLAUDE_ROUTER_URL

configDATABASE_URL

configECC_HOOK_INPUT_MAX_BYTES

configECC_HOOK_INPUT_TRUNCATED

🔐 secretEXA_API_KEY

configFORCE_TEMPLATE_UPDATE

🔐 secretGEMINI_API_KEY

configGITHUB_ACTIONS

configGITHUB_OUTPUT

configMCP_PUBLIC_URL

🔐 secretNEXT_PUBLIC_SUPABASE_ANON_KEY

configNEXT_PUBLIC_SUPABASE_URL

configPORT

🔐 secretREISKIP_API_KEY

configREPO_NAME

🔐 secretROUTER_PROXY_KEY

configSCAN_TYPE

🔐 secretSTRIPE_SECRET_KEY

🔐 secretSTRIPE_WEBHOOK_SECRET

🔐 secretSUPABASE_ACCESS_TOKEN

🔐 secretSUPABASE_DB_PASSWORD

🔐 secretSUPABASE_KEY

🔐 secretSUPABASE_SERVICE_KEY

🔐 secretSUPABASE_SERVICE_ROLE_KEY

configSUPABASE_URL

🔐 secretTELEGRAM_BOT_TOKEN

configTELEGRAM_CHAT_ID

configURL

🔐 secretWATCH_TOKEN

🔐 secretWORKOS_API_KEY

configWORKOS_CLIENT_ID

🔐 secretZONEWISE_API_KEY

configTELEGRAM_NOTIFY

configNO_COLOR

configCLI_ANYTHING_NO_COLOR

configSUPABASE_DB_DSN

configV4_OVERLAY

configGITHUB_RUN_ID

configTRIGGER_SOURCE

configDISPATCH_ID

configDOSSIER_ID

configPHASE

configPOSTHOG_HOST

🔐 secretPOSTHOG_API_KEY

🔐 secretGITHUB_TOKEN

configGITHUB_REPO

🔐 secretANTHROPIC_API_KEY

🔐 secretGOOGLE_PSI_KEY

🔐 secretGOOGLE_SEARCH_CONSOLE_KEY

🔐 secretSTITCH_API_KEY

🔐 secretGOOGLE_API_KEY

configGH_PAT

configANTHROPIC_BASE_URL

configZONING_EXTRACT_MODEL

configNAV_TIMEOUT_MS

configSELECTOR_WAIT_MS

configPOLITE_DELAY_S

configMAX_RETRIES

configGITHUB_SERVER_URL

configGITHUB_REPOSITORY

🔐 secretDEEPSEEK_API_KEY

🔐 secretGH_TOKEN

configCLIPROXY_URL

🔐 secretFIRECRAWL_API_KEY

🔐 secretYOUTUBE_DATA_API_KEY

🔐 secretYOUTUBE_API_KEY

configYOUTUBE_CHANNEL_ID

🔐 secretINSTAGRAM_ACCESS_TOKEN

🔐 secretSUPADATA_API_KEY

configLINKEDIN_SESSION_JSON

configLINKEDIN_EMAIL

configLINKEDIN_USERNAME

🔐 secretLINKEDIN_PASSWORD

configGDRIVE_VAULT_FOLDER_ID

configSUPABASE_DB_URL

configGHA_RUN_ID

configSTRATEGY

🔐 secretBIDDEED_BOT_TOKEN

configBIDDEED_BOT_CHAT_ID

configSUPABASE_SERVICE_ROLE

configCO_NO_OVERRIDE

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/breverdbidder-cli-anything-biddeed-1aoo05)](https://m8ven.ai/mcp/breverdbidder-cli-anything-biddeed-1aoo05)

commit: bd2ff6f5cd88b735bad33c8bb1ab8c3556840a80

code hash: 65846f2b451dcd33b3f465090e24b10d736550f48de9f93fb51665aab06a8cca

verified: 7/4/2026, 9:10:44 AM

view raw JSON →