federation-mcp-server

Search vacation rental properties, check real-time availability, get canonical pricing quotes, and create direct bookings. Each property is its own node with live data. Supports staircase pricing, seasonal rates, and 11 languages.

→ HemmaBo-se/hemmabo-mcp-server · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

3 flows detected: SUPABASE_SERVICE_ROLE_KEY. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 4 credentials: MCP_API_KEY, STRIPE_SECRET_KEY, SUPABASE_ANON_KEY, SUPABASE_SERVICE_ROLE_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretMCP_API_KEY

configPORT

configSTDIO_SESSION_ID

🔐 secretSTRIPE_SECRET_KEY— Optionally add for checkout/cancel/reschedule tools

🔐 secretSUPABASE_ANON_KEY

🔐 secretSUPABASE_SERVICE_ROLE_KEY— "": "your-service-role-key"

configSUPABASE_URL— "": "https://your-project.supabase.co",

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/hemmabo-se-hemmabo-mcp-server-8rkadj)](https://m8ven.ai/mcp/hemmabo-se-hemmabo-mcp-server-8rkadj)

commit: f8a4c29afa0b95511e05e6e74172f028be28e6cb

code hash: d9d489ec963c8476d21d238efed77920b6611e617caf26928e2476cb0b3b3978

verified: 4/18/2026, 6:18:39 PM

view raw JSON →