Enables AI agents to search, compare, and track prices across 40+ retailers in Southeast Asia and the US using MCP tools.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n
Next.js: Server-Side Request Forgery in Server Actions on custom servers
Next.js Vulnerable to Denial of Service with Server Components
Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades
Next.js HTTP request deserialization can lead to DoS when using insecure React Server Components
process.env. You'll be asked to provide them before it can run.ADMIN_API_KEYAFFILIATE_ALLOWED_DOMAINSAFFILIATE_STRICT_ALLOWLISTAPI_BASE_URLARTIFACT_CLEANUP_AUTO_APPLYARTIFACT_CLEANUP_REPORT_PATHARTIFACT_CLEANUP_RETENTION_HOURSAWIN_ADVERTISER_IDSAWIN_PUBLISHER_IDBUYWHERE_ADMIN_API_KEYSBUYWHERE_API_BASE_URLBUYWHERE_SYSTEM_API_KEYCATALOG_DATABASE_URLCATALOG_POOL_MAXCORS_ALLOWED_ORIGINSDATABASE_URLDISK_SPACE_CHECK_INTERVAL_MSEMBED_BATCH_LIMITEMBED_INTERVAL_MSFX_REFRESH_INTERVAL_MSGEMINI_API_KEYGENERAL_SEARCH_FALLBACK_TIMEOUT_MSHEALTH_CACHE_TTL_MSINGEST_DB_RETRY_ATTEMPTSINGEST_SCHEMA_GUARD_TTL_MSLINK_HEALTH_BATCH_SIZELINK_HEALTH_INTERVAL_MSLINK_HEALTH_TIMEOUT_MSMCP_PORTMCP_REFRESH_LOCK_TIMEOUT_MSMCP_REFRESH_STATEMENT_TIMEOUT_MSMCP_WARMUP_LOCK_TIMEOUT_MSMCP_WARMUP_STATEMENT_TIMEOUT_MSMONITORING_API_KEYP95_COMPUTE_INTERVAL_MSP95_THRESHOLD_MSPAPERCLIP_API_KEYPAPERCLIP_API_URLPAPERCLIP_COMPANY_IDPG_LOCK_TIMEOUTPG_POOL_MAXPG_STATEMENT_TIMEOUTPORTPOSTHOG_API_KEYPOSTHOG_HOSTPUBLIC_API_BASEREDIS_HOSTREDIS_PORTREFRESH_HOUR_UTCREFRESH_MIN_UTCREPLICA_DATABASE_URLREPLICA_LSN_GAP_HEALTHY_BYTESREPLICA_MAX_LAG_MSREPLICA_POOL_MAXREPLICA_PROBE_INTERVAL_MSREPLICA_STATEMENT_TIMEOUTRESET_HOUR_UTCRESET_MIN_UTCSCRAPER_REFRESH_URLSEARCH_HANDLER_TIMEOUT_MSSEARCH_OR_TOPUPSEARCH_STATEMENT_TIMEOUT_MSSEARCH_USE_TIERSENTRY_DSNSEO_HEAD_PREEMPTSTRIPE_SECRET_KEYSTRIPE_WEBHOOK_SECRETTEST_API_KEYUPTIMEROBOT_API_KEYUPTIMEROBOT_KEYUPTIMEROBOT_WEBHOOK_RELAY_API_KEYUPTIMEROBOT_WEBHOOK_RELAY_URLVECTOR_DB_TIMEOUT_MSVECTOR_DB_URLWORKSPACES_ROOTTRACKING_BASE_URLSHOPEE_AFFILIATE_IDLAZADA_TRACKING_IDAMAZON_ASSOCIATE_TAGAFFILIATE_TAGAMAZON_US_ASSOCIATE_TAGWALMART_AFFILIATE_IDBESTBUY_AFFILIATE_IDTARGET_AFFILIATE_IDEBAY_US_AFFILIATE_IDWAYFAIR_US_AFFILIATE_IDLOG_LEVELLOG_DIRLOG_DIR_FALLBACKENVIRONMENTPOSTHOG_PROJECT_KEYPOSTHOG_DISABLEDPAPERCLIP_RUN_IDCATALOG_FRESHNESS_FLAT_THRESHOLD_HOURSCATALOG_FRESHNESS_MIN_COUNT_CHANGECATALOG_FRESHNESS_ALERT_STATE_FILECATALOG_FRESHNESS_DATA_DIRCATALOG_FRESHNESS_ALERT_ISSUE_IDPAPERCLIP_TASK_IDBUYWHERE_API_BASEBUYWHERE_API_URL— "": "https://api.buywhere.ai"BUYWHERE_API_KEY— export ="bw_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"BUYWHERE_BASE_URL— export ="https://api.buywhere.ai"[](https://m8ven.ai/mcp/buywhere-buywhere-lzzxco)