Pour Picks MCP Server

Pour Picks MCP server is a well-structured, read-only bourbon database query tool with solid security fundamentals. Authentication uses Supabase's publishable key by default with optional service-role elevation via environment variables. Code properly validates inputs, sanitizes database queries, and avoids dangerous patterns. Minor concerns include broad exception handling in telemetry and lack of explicit input length limits on some string parameters, but these do not materially impact security. Permissions align well with the server's read-only, catalog-browsing purpose. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.