Server data from the Official MCP Registry
KYB checks on any company: registries, sanctions, PEP, ICIJ Offshore Leaks, adverse media.
About
KYB checks on any company: registries, sanctions, PEP, ICIJ Offshore Leaks, adverse media.
Security Report
The stdio transport is a reasonable thin client: it reads SONAR_API_KEY from the environment, sends only the company name and optional website to the documented SONAR API, and contains no shell execution, hardcoded secrets, or obfuscation. The score is held down by the streamable-http entry point, which binds to 0.0.0.0 with no authentication, so any network-reachable deployment would let callers spend the operator's SONAR balance, plus an incomplete OAuth module and unvalidated run_id path interpolation. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
9 files analyzed · 11 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: SONAR_API_KEY
Environment variable: SONAR_API_BASE
Environment variable: SONAR_API_TIMEOUT
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-ivanolegvak-sonar-mcp": {
"env": {
"SONAR_API_KEY": "your-sonar-api-key-here",
"SONAR_API_BASE": "your-sonar-api-base-here",
"SONAR_API_TIMEOUT": "your-sonar-api-timeout-here"
},
"args": [
"getsonar-mcp"
],
"command": "uvx"
}
}
}Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Lharries · Communication
Read, search, and send WhatsApp messages through your AI assistant