Back to Browse

Harvey Budget MCP Server

FinanceUse Caution4.2LocalRemote
Free

Agent spending mgmt, budget tracking, ROI. Zero Core Budget.

About

Agent spending mgmt, budget tracking, ROI. Zero Core Budget.

Remote endpoints: streamable-http: https://budget.rugslayer.com/mcp

Security Report

4.2
Use Caution4.2High Risk

Harvey Budget is a well-structured MCP server with appropriate x402 payment authentication and permission scoping that matches its finance category purpose. The server properly uses Supabase for data persistence and has clean input validation via Zod. However, there are moderate concerns around missing input validation on string fields, potential SQL injection vectors through unsanitized user-provided identifiers, and broad environment variable access that should be more explicitly scoped. Supply chain analysis found 11 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

6 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

database

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!