MCP server for FIFA World Cup 2026 data including fixtures, live scores, odds, and knockout bracket, plus a tool (wc_edge) that autonomously pays for premium data via Injective's x402 protocol.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
tsup DOM Clobbering vulnerability
process.env. You'll be asked to provide them before it can run.CUPORACLE_ALLOW_PAID— funds-gated behind =1 and a funded key, and otherwise fallsCUPORACLE_HOMECUPORACLE_KEYSTORE_PASSWORDCUPORACLE_MAX_SPEND— "": "0.50"CUPORACLE_NETWORK— eip155:1776 eip155:1776 mainnet · eip155:1439 testnetCUPORACLE_PRIVATE_KEY— "": "0x…",CUPORACLE_RPC_URLCUPORACLE_WALLET_ADDRESSEDGELEDGER_URLFOOTBALL_DATA_KEY— [football-data.org](https://www.football-data.org/) free tier →ODDS_API_KEY— [the-odds-api.com](https://the-odds-api.com/) free tier →SMOKE_BIN— dist npm run smoke # smoke the built artifact[](https://m8ven.ai/mcp/edycutjong-cuporacle-mcp-11dukk)