Back to MCP Trust Indexm8ven
74
/ 100
1 month ago
glama

infomaniak-admin-mcp

Enables agentic administration of Infomaniak accounts via Claude, offering 169 tools for web hosting, mail, domains, DNS, and more, with a strict two-phase commit for safe mutations.

→ henrikogaard/infomaniak-admin-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: INFOMANIAK_API_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 high

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.0.4GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.0.4GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configCHROME_COOKIES_PATH
configCHROME_PROFILE
configCONFIRMATION_TTL_SECONDS— export ="60"
🔐 secretINFOMANIAK_API_TOKEN— export =...
configINFOMANIAK_AUDIT_LOG_ENABLED— export =true
configINFOMANIAK_AUDIT_LOG_INCLUDE_READS— export =true
configINFOMANIAK_AUDIT_LOG_PATH— export =./logs/infomaniak-mcp-audit.jsonl
configINFOMANIAK_AUTH_MODE— export ="auto"
configINFOMANIAK_LIVE_TESTS
configINFOMANIAK_TEST_ACCOUNT_ID— export =123456
configINFOMANIAK_TEST_MAILBOX— export =admin@example.com
configINFOMANIAK_TEST_MAIL_HOSTING_ID— export =456789
configINFOMANIAK_TEST_USER_ID— export =7890
configMCP_HTTP_HOST
configMCP_HTTP_PATH
configMCP_HTTP_PORT
configMCP_HTTP_STATELESS
configMCP_TRANSPORT— stdiohttpstreamable-http
configRATE_LIMIT_PER_MINUTE— export ="60"
configVITEST
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/henrikogaard-infomaniak-admin-mcp-1n6liz)](https://m8ven.ai/mcp/henrikogaard-infomaniak-admin-mcp-1n6liz)
commit: 157012b7b3584cda481920c38572bc25d12cf40a
code hash: 9c307a7c17878b22ba2d4651faac48042565870ab7eab0ba1b8c69dd56e2f301
verified: 6/11/2026, 10:57:23 AM
view raw JSON →