Car2DB

Access to Car2DB automotive database for vehicle specs, make/model/trim catalogs, and equipment data.

→ car2db/car2db-api-v3-mcp · listed on pulsemcp

Install from

PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: CAR2DB_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretCAR2DB_API_KEY— "": "your_api_key_here",

configCAR2DB_LANGUAGE— "": "en-US"

configCAR2DB_REFERER— "": "https://yourproject.com",

configMCP_SSE_PORT— ❌ 3000 Port for SSE mode (only used when MCP_TRANSPORT=sse)

configMCP_TRANSPORT— "": "stdio"

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/car2db-car2db-api-v3-mcp-18i3bz)](https://m8ven.ai/mcp/car2db-car2db-api-v3-mcp-18i3bz)

commit: 419854c1e82c0769e281d76edb19615a3c7bcdb2

code hash: 169b8971822015a8f74ce392d9e3cbf606b290b6d169716332d4b1c10a168192

verified: 4/11/2026, 2:13:45 PM

view raw JSON →