Back to Home
cleopatterson icon

mcp-server

Verified Safe

by cleopatterson

Overview

This MCP server provides a service for AI assistants (like Voiceflow and ChatGPT) to find painters, create painting job deals in HubSpot, analyze job images, and access service-specific knowledge bases and pricing guides.

Installation

Run Command
npm start

Environment Variables

  • HUBSPOT_TOKEN
  • MCP_API_KEY
  • OPENAI_API_KEY
  • CLOUDINARY_API_SECRET
  • OAUTH_CLIENT_ID
  • OAUTH_CLIENT_SECRET
  • PORT
  • OAUTH_BASE_URL

Security Notes

The server uses environment variables for sensitive API keys (HubSpot, OpenAI, Cloudinary secret) and implements authentication for its /mcp endpoint via Bearer token or X-API-Key. It performs secure image uploads using Cloudinary with a generated signature. While the OAuth 2.0 flow is functional for integrating with AI platforms, it simplifies token issuance by directly returning the MCP_API_KEY as the access_token, which is less secure than a standard OAuth token implementation but acceptable for a private MCP server integration with trusted AI clients. No 'eval' or obvious malicious code patterns were found, and JSON parsing limits are increased to handle larger payloads, mitigating some DoS risks.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassHigh
Avg Tokens750
Stars0
Forks0
Last Update2025-11-19

Tags

MCPHubSpotAI AgentService MatchingPaintingJSONRPC