MCP server for Feishu that enables document management, calendar CRUD, and event scheduling via Streamable HTTP transport, deployed on Vercel with OAuth and JWT authentication.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Next.js is vulnerable to RCE in React flight protocol
Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes
Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up
Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n
Next.js has a Middleware / Proxy bypass through dynamic route parameter injection
process.env. You'll be asked to provide them before it can run.AUTH_SECRET— 使用 openssl rand -hex 32 分别生成 和 MCP_JWT_SECRET，写入 .env。两者不能相同，重启时也不要重新生成。AUTH_TRUST_HOSTFEISHU_ADMIN_OPEN_IDSFEISHU_ALLOWED_OPEN_IDS— ou_reader1,ou_reader2FEISHU_APP_IDFEISHU_APP_KEYFEISHU_APP_SECRETMCP_ACCESS_KEYMCP_JWT_SECRET— 使用 openssl rand -hex 32 分别生成 AUTH_SECRET 和 ，写入 .env。两者不能相同，重启时也不要重新生成。[](https://m8ven.ai/mcp/v1xingyue-feishu-bridge-mcp-1o7v6j)