MCP server for Omie — ERP, customers, products, orders, invoices, financials
MCP server for Omie — ERP, customers, products, orders, invoices, financials
This MCP server monorepo for Latin American commerce APIs is well-intentioned with a comprehensive catalog of 109 regional payment, banking, and business integrations. However, the primary security concern is the heavy reliance on API keys and OAuth2 tokens passed via environment variables with minimal validation or protection mechanisms demonstrated in the provided code sample. The Sift fraud-detection server shown uses Basic Auth correctly but lacks input validation and error handling rigor. Permissions are appropriate for the category (network_http, env_vars are standard for financial tools), but the scale of the catalog and distributed nature of secrets management across 109+ packages introduces operational risk. Supply chain analysis found 2 known vulnerabilities in dependencies (1 critical, 0 high severity). Package verification found 1 issue (1 critical, 0 high severity).
4 files analyzed · 10 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Set these up before or after installing:
Environment variable: OMIE_APP_SECRET
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-codespar-mcp-omie": {
"env": {
"OMIE_APP_SECRET": "your-omie-app-secret-here"
},
"args": [
"-y",
"mcp-dev-latam"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.