Back to Browse

Reportia HTTP MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Reportia HTTP API as 66 curated MCP tools (accounting, mappings, SIIGO).

About

Reportia HTTP API as 66 curated MCP tools (accounting, mappings, SIIGO).

Security Report

4.2
Use Caution4.2High Risk

This is a well-structured MCP server wrapping a Reportia API with proper authentication, input validation, and security controls. The codebase demonstrates good security practices including Zod validation, guarded destructive operations, and safe credential handling via environment variables. Minor code quality issues and incomplete file analysis do not materially impact the security posture. Supply chain analysis found 8 known vulnerabilities in dependencies (2 critical, 1 high severity). Package verification found 1 issue.

3 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

Base URL of the Reportia API (without trailing slash). Example: https://reportia.example.comOptional

Environment variable: REPORTIA_BASE_URL

Bearer token for M2M authentication. Mutually exclusive with REPORTIA_COOKIE; either can be paired with REPORTIA_EMAIL+REPORTIA_PASSWORD (session login) for cookie fallback.Required

Environment variable: REPORTIA_TOKEN

Pre-issued Reportia session cookie (e.g. connect.sid=s%3A...). For upstream callers that already hold the resolved user's session and want the child to authenticate as that user without re-login. Mutually exclusive with REPORTIA_TOKEN. Skips /api/auth/login and /api/auth/logout.Required

Environment variable: REPORTIA_COOKIE

Email for cookie-session authentication.Optional

Environment variable: REPORTIA_EMAIL

Password for cookie-session authentication.Required

Environment variable: REPORTIA_PASSWORD

Default companyId used when a tool accepts it as optional.Optional

Environment variable: REPORTIA_COMPANY_ID

HTTP request timeout in milliseconds (default 30000).Optional

Environment variable: REPORTIA_TIMEOUT_MS

Directory where downloaded Excel/PDF exports are saved (default ./downloads).Optional

Environment variable: REPORTIA_DOWNLOAD_DIR

Custom User-Agent header (default mcp-reportia/0.1.0).Optional

Environment variable: REPORTIA_USER_AGENT

Maximum bytes for a single binary download (default 104857600 = 100MB).Optional

Environment variable: REPORTIA_MAX_DOWNLOAD_BYTES

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-javalenciacai-mcp-reportia": {
      "env": {
        "REPORTIA_EMAIL": "your-reportia-email-here",
        "REPORTIA_TOKEN": "your-reportia-token-here",
        "REPORTIA_COOKIE": "your-reportia-cookie-here",
        "REPORTIA_BASE_URL": "your-reportia-base-url-here",
        "REPORTIA_PASSWORD": "your-reportia-password-here",
        "REPORTIA_COMPANY_ID": "your-reportia-company-id-here",
        "REPORTIA_TIMEOUT_MS": "your-reportia-timeout-ms-here",
        "REPORTIA_USER_AGENT": "your-reportia-user-agent-here",
        "REPORTIA_DOWNLOAD_DIR": "your-reportia-download-dir-here",
        "REPORTIA_MAX_DOWNLOAD_BYTES": "your-reportia-max-download-bytes-here"
      },
      "args": [
        "-y",
        "@james.valencia/mcp-reportia"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!