Back to MCP Trust Indexm8ven
54
/ 100
1 month ago
glama

Markster MCP Server

A comprehensive business management suite that integrates CRM, sales intelligence, and financial modeling tools directly into AI workspaces via 32 specialized tools. It enables users to analyze sales pipelines, simulate pricing impacts with interactive UI components, and execute cross-platform business tasks through natural language.

→ markster-exec/mcp-unicorn· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: APOLLO_API_KEY. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Known vulnerabilities in dependencies: 4 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 5 credentials: APOLLO_API_KEY, AZURE_OPENAI_API_KEY, MARKSTER_DOCS_API_KEY, WORKOS_API_KEY, WORKOS_COOKIE_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies4 high3 medium2 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.19.3GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.19.3GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.19.3GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

highvite@6.3.5GHSA-p9ff-h696-f583

Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket

mediumajv@8.17.1GHSA-2g4f-4pwh-qvx6

ajv has ReDoS when using `$data` option

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretAPOLLO_API_KEY
configAPOLLO_CACHE_DIR
configAPOLLO_CACHE_ENABLED
configAPOLLO_CACHE_PATH
🔐 secretAZURE_OPENAI_API_KEY
configAZURE_OPENAI_API_VERSION
configAZURE_OPENAI_ENDPOINT
configAZURE_OPENAI_FLUX_DEPLOYMENT
configAZURE_OPENAI_FLUX_MODEL
configAZURE_OPENAI_FLUX_PROVIDER_API_VERSION
configAZURE_OPENAI_FLUX_RETRIES
configAZURE_OPENAI_IMAGE_SIZE
configINPUT
configMARKSTER_API_BASE_URL— For live mode Markster Panel API base URL
configMARKSTER_API_TIMEOUT_MS
configMARKSTER_API_URL
🔐 secretMARKSTER_DOCS_API_KEY
configMARKSTER_HTTP_REQUEST_LOGGING
configMARKSTER_MOCK_MODE— No Set true for local mock responses
configMARKSTER_OPENAPI_URL
configMARKSTER_PANEL_URL
configMARKSTER_PUBLIC_BASE_URL
configMARKSTER_RUNTIME_MODE
configMARKSTER_TOOL_CALL_LOGGING— No Set true for verbose tool logging
configMCP_PUBLIC_BASE_URL
configMCP_TEST_ENDPOINT
configMCP_TOOL_TEXT_MAX_BYTES
configMCP_UI_STRUCTURED_MAX_BYTES
configMCP_URL
configPORT— 3002 npm run start
🔐 secretWORKOS_API_KEY
configWORKOS_AUTH_ENABLED
configWORKOS_AUTH_REPORT_ONLY
configWORKOS_AUTH_REQUIRED
configWORKOS_AUTH_VERIFY_JWT
configWORKOS_CLIENT_ID— For auth WorkOS client ID
🔐 secretWORKOS_COOKIE_PASSWORD— For auth Session cookie encryption key
configWORKOS_JWKS_URI
configWORKOS_OAUTH_AUDIENCE
configWORKOS_OAUTH_DISCOVERY_ENABLED
configWORKOS_OAUTH_ISSUER
configWORKOS_OAUTH_SCOPES
configWORKOS_REDIRECT_URI— For auth OAuth redirect URI
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/markster-exec-mcp-unicorn-fymeqn)](https://m8ven.ai/mcp/markster-exec-mcp-unicorn-fymeqn)
commit: b8313cbcce55b7e7b57a26676fc8c59381cec60a
code hash: f92a37fa9a210f5afcbf172a25e12ce5780d55f72f98ad8e9cf8c9ce93165e19
verified: 6/12/2026, 11:51:03 AM
view raw JSON →