Back to Home
Hsidhu icon

invoiceShelfMCP

Verified Safe

by Hsidhu

Overview

Integrate LLMs with Invoice Shelf for managing customers, invoices, and estimates through a Model Context Protocol (MCP) server.

Installation

Run Command
npm start

Environment Variables

  • INVOICE_SHELF_BASE_URL
  • INVOICE_SHELF_API_TOKEN
  • MCP_LOGGING_ENABLED

Security Notes

The server explicitly sets `process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";` in `src/index.ts`, which disables SSL certificate validation. While the README warns against using this in production, its direct inclusion in the main entry point is a critical security vulnerability, as it makes the application susceptible to Man-in-the-Middle (MITM) attacks if deployed with this setting. No `eval` or obfuscation was found. API tokens are managed via environment variables, which is a good practice.

Similar Servers

Stats

Interest Score0
Security Score6
Cost ClassMedium
Avg Tokens250
Stars0
Forks0
Last Update2025-11-24

Tags

MCPInvoice ShelfLLM integrationFinancialInvoicing