hidrix-tools

MCP tool server that gives any AI agent the ability to search, scrape, and analyze content across the internet.

→ sonpiaz/hidrix-tools · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

7 flows detected: APIFY_API_TOKEN, GETXAPI_KEY, TELEGRAM_BOT_TOKEN. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 7 credentials: APIFY_API_TOKEN, GETXAPI_KEY, META_ADS_ACCESS_TOKEN, RAPIDAPI_KEY, SUPADATA_API_KEY, TELEGRAM_BOT_TOKEN, TRANSCRIPT_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

low@mozilla/readability@0.5.0GHSA-3p6v-hrg8-8qj7

@mozilla/readability Denial of Service through Regex

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretAPIFY_API_TOKEN— facebook_scraper (group/page/search) $5/month credit [console.apify.com](https://console.apify.com/settings/integrations)

🔐 secretGETXAPI_KEY— x_search, x_thread_reader, x_user_posts $0.001/call, no subscription [getxapi.com](https://getxapi.com)

🔐 secretMETA_ADS_ACCESS_TOKEN— facebook_scraper (ads mode) Free, unlimited [facebook.com/ads/library/api](https://www.facebook.com/ads/library/api/)

configNOTIFY_WEBHOOK_URL

configPORT

🔐 secretRAPIDAPI_KEY— x_search (fallback), reddit_search, youtube_search, tiktok_search Varies [rapidapi.com](https://rapidapi.com)

🔐 secretSUPADATA_API_KEY— youtube_channel (primary) Paid from $9/mo [supadata.ai](https://supadata.ai)

🔐 secretTELEGRAM_BOT_TOKEN

configTELEGRAM_CHAT_ID

🔐 secretTRANSCRIPT_API_KEY

configX_SEARCH_URL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/sonpiaz-hidrix-tools-12ij64)](https://m8ven.ai/mcp/sonpiaz-hidrix-tools-12ij64)

commit: d8700e11c075b94547c339879e3890f23228adf0

code hash: d7f7259413c24061704f1aa684c47fa5ea8f5f7b53aa8b4f5a21943b74ec236d

verified: 6/24/2026, 10:10:22 AM

view raw JSON →