Back to Home
cirne icon

bic-mcp

Verified Safe

by cirne

Overview

Query and analyze Beloved In Christ Foundation grant transaction data for searching, filtering, and aggregation via an MCP server.

Installation

Run Command
npm start

Environment Variables

  • MCP_GUID
  • MCP_API_KEY
  • DATA_DIR

Security Notes

The server includes API key (`MCP_API_KEY`) and GUID (`MCP_GUID`) validation, which are good practices. However, the `MCP_API_KEY` is marked as optional in the documentation, and if it is not set, the `validateApiKey` function returns `true`. This means that access to the MCP endpoint relies solely on the `MCP_GUID` in the URL path, which acts more as obfuscation than a strong authentication mechanism, making deployments without `MCP_API_KEY` insecure. File operations (reading/writing CSV/XLSX) are primarily intended for local CLI scripts and do not appear to be exposed via the web API, minimizing path traversal risks.

Similar Servers

Stats

Interest Score0
Security Score6
Cost ClassMedium
Avg Tokens10000
Stars0
Forks0
Last Update2025-11-28

Tags

MCPGrantsData AnalysisFinancialNext.js