lapalma24-mcp
Verified Safeby La-Palma-24
Overview
Provides a Model Context Protocol (MCP) server for searching and discovering vacation rental properties in La Palma, Canary Islands.
Installation
npm run start:httpEnvironment Variables
- API_BASE_URL
- API_KEY
- PORT
- MCP_SERVER_NAME
- MCP_SERVER_VERSION
Security Notes
The server uses an API key (`API_KEY`) to access its backend API (`API_BASE_URL`). A default key, 'demo_key_12345', is hardcoded if the environment variable is not set. While the README implies public read-only access for the MCP server itself, the security posture of the backend API with this 'demo_key_12345' is critical. If this demo key grants anything beyond strictly public read-only access to the backend API, or if it's not overridden in a production deployment, it could pose a security risk. No obvious direct code execution vulnerabilities like 'eval' or arbitrary command execution were found.
Similar Servers
mcpo
Exposes Model Context Protocol (MCP) tools as OpenAPI-compatible HTTP servers.
awesome-remote-mcp-servers
A curated directory for developers to discover, evaluate, and integrate high-quality, official remote Model Context Protocol (MCP) servers into their AI applications and LLM clients.
mcp-omnisearch
Provides a unified interface for various search, AI response, content processing, and enhancement tools via Model Context Protocol (MCP).
spring-boot-ai
A Spring Boot application implementing a Model Context Protocol (MCP) server that provides a remote 'Booking Tool' for an AI agent.