fdic-mcp-server

MCP server for the FDIC BankFind Suite API

→ jflamb/fdic-mcp-server· npm: fdic-mcp-server· listed on npm

Install from

npm npm Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

2 flows detected: GITHUB_TOKEN. We can’t prove the destination matches the brand the credential belongs to.

⚠️

Known vulnerabilities in dependencies: 6 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 3 credentials: FRED_API_KEY, GEMINI_API_KEY, GITHUB_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configALLOWED_ORIGINS— Browser-origin requests are checked against . If unset, the server allows the local defaults for localhost and 127.0.0.1 on the configured port, plus non-browser requests with no Origin header.

configCHAT_ALLOWED_ORIGINS

configDOCS_LATEST_RELEASE_OUTPUT

configFDIC_MAX_RESPONSE_BYTES— Set to override the upstream FDIC response-size guard. The default is 5242880 bytes (5 MiB).

🔐 secretFRED_API_KEY

🔐 secretGEMINI_API_KEY

configGITHUB_API_URL

configGITHUB_OUTPUT

configGITHUB_REPOSITORY

🔐 secretGITHUB_TOKEN

configHOST— Local HTTP runs bind to 127.0.0.1 by default. Set if you intentionally want a different bind address.

configPORT— TRANSPORT=http =3000 node dist/index.js

configTRANSPORT— http PORT=3000 node dist/index.js

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/fdic-mcp-server-16cp87)](https://m8ven.ai/mcp/fdic-mcp-server-16cp87)

commit: 1c43832503ed406a02f275508d9797c69b8dce82

code hash: a56b5da0f11b2e8b07488587eee4c662084d5c140596569413e877e4e5499c42

verified: 4/18/2026, 3:57:11 PM

view raw JSON →