Back to MCP Trust Indexm8ven
5
/ 100
1 month ago
npm

AmadeusITGroup/otter

Experimental package — This module provides a MCP Server

→ AmadeusITGroup/otter· npm: @o3r/mcp· listed on npm
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

npmnpm

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 8 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: CHROME_CLIENT_SECRET, CHROME_REFRESH_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies8 high6 medium2 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@angular/common@21.2.4GHSA-39pv-4j6c-2g6v

@angular/common: Weak 32-Bit Cache Key Hashing in `HttpTransferCache` Leading to Cross-Request Data Leakage and State Poisoning

high@angular/common@21.2.4GHSA-48r7-hpm6-gfxm

@angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate)

high@angular/common@21.2.4GHSA-p3vc-36g9-x9gr

@angular/common: Denial of Service (DoS) via OOM in Number Formatting (digitsInfo)

high@angular/common@21.2.4GHSA-q6f4-qqrg-jv6x

@angular/common: Information Leak via Default Caching of Credentialed Requests in HttpTransferCache

high@angular/core@21.2.4GHSA-rgjc-h3x7-9mwg

Angular Client Hydration DOM Clobbering & Response-Cache Poisoning

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configCHROME_CLIENT_ID
🔐 secretCHROME_CLIENT_SECRET
configCHROME_EXT_ID
🔐 secretCHROME_REFRESH_TOKEN
configPLAYWRIGHT_TARGET_URL
configUPDATE_SCREENSHOTS_DOCKER
configUPDATE_SCREENSHOTS_PORT
configUSE_MOCKS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/o3r-mcp-1b5usx)](https://m8ven.ai/mcp/o3r-mcp-1b5usx)
commit: f805ac8ff5d445a1b80e228cb2b5f217926346d7
code hash: 94bda870fbc778bc52c28fab0b6ddce7acb4fa3c8bbad6220cb3de8cd630373d
verified: 6/16/2026, 12:59:52 PM
view raw JSON →