Back to MCP Trust Indexm8ven
74
/ 100
18 days ago
glama

mcp-research

An incremental financial-data MCP server built on Cloudflare, currently offering a read-only Hono API for accounts, transactions, and analytics with D1 and Drizzle. Future plans include OAuth and MCP integration.

→ patryksztuczka/mcp-research· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 8 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
⚠️
Tests do not pass
Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
// known CVEs in dependencies8 high2 medium5 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highpnpm@10.33.0GHSA-5wx6-mg75-v57r

pnpm: Manifest identity spoof satisfies allowBuilds and runs attacker lifecycle

highpnpm@10.33.0GHSA-72r4-9c5j-mj57

pnpm: `patch-remove` could delete project-selected files outside the patches directory

highpnpm@10.33.0GHSA-fr4h-3cph-29xv

pnpm: Hoisted install imports lockfile alias outside node_modules

highpnpm@10.33.0GHSA-gj8w-mvpf-x27x

pnpm: Repository-controlled configDependencies can select a pacquet native install engine

highpnpm@10.33.0GHSA-hwx4-2j3j-g496

pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/patryksztuczka-mcp-research-kqhqst)](https://m8ven.ai/mcp/patryksztuczka-mcp-research-kqhqst)
commit: 63d2ae23bf835524f42d4f068b62c49a4eeb8ce2
code hash: c9b04fde84a0352d9e1fe7814cea88446edff893f2d5c8677813b584c99c37b1
verified: 7/13/2026, 9:56:16 AM
view raw JSON →