Back to MCP Trust Indexm8ven
58
/ 100
1 month ago
github_topic

korean-patent-mcp

KIPRIS 특허·실용신안·상표·디자인 검색 MCP — 자유검색/항목검색/출원인/권리자/서지상세 7개 도구 | KIPRIS Korean patent·utility·trademark·design search → 7 MCP tools

→ chrisryugj/korean-patent-mcp· listed on github_topic
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

GitHubGlama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 5 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: KIPRIS_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies5 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@xmldom/xmldom@0.9.8GHSA-2v35-w6hq-6mfw

xmldom: Uncontrolled recursion in XML serialization leads to DoS

high@xmldom/xmldom@0.9.8GHSA-f6ww-3ggp-fr8h

xmldom has XML injection through unvalidated DocumentType serialization

high@xmldom/xmldom@0.9.8GHSA-j759-j44w-7fr8

xmldom has XML node injection through unvalidated comment serialization

high@xmldom/xmldom@0.9.8GHSA-wh4c-j3r5-mjhp

xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion

high@xmldom/xmldom@0.9.8GHSA-x6wf-f3px-wcqx

xmldom has XML node injection through unvalidated processing instruction serialization

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configCORS_ORIGIN— (경고) 허용 도메인. 프로덕션은 명시 권장
configFALLBACK_RATE_LIMIT_RPM— 폴백 호출은 무료 한도(1,000회/월) 보호를 위해 전역 상한이 걸린다.
🔐 secretKIPRIS_API_KEY— .env 에 =발급키 입력
configKIPRIS_API_PROTOCOL— 전송 보안: KIPRIS 호출은 기본 https. 키가 쿼리스트링에 실리므로 평문 노출 방지. (=http 로만 평문 전환)
configMCP_BODY_LIMIT— 100kb POST 본문 크기 한도
configRATE_LIMIT_RPM— 60 IP당 분당 요청 한도
configTRUST_PROXY— 1 Express trust proxy 단수. true/all은 XFF 스푸핑 위험
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/chrisryugj-korean-patent-mcp-1mfmwh)](https://m8ven.ai/mcp/chrisryugj-korean-patent-mcp-1mfmwh)
commit: 217d9c4f0adca6bd4c2045864dd319f7e1ea2ad8
code hash: 97529165b2d963f271ce84c33a065dad79349dd063baf530cdd37786748fe976
verified: 6/29/2026, 11:16:00 AM
view raw JSON →