Back to Home
jefflesser icon

zeal-mcp-server

Verified Safe

by jefflesser

Overview

An MCP server that exposes Postman API requests as tools for LLMs, enabling programmatic interaction with external APIs, particularly for payroll and HR management via Zeal API.

Installation

Run Command
node mcpServer.js

Environment Variables

  • ZEAL_API_KEY
  • PORT

Security Notes

The Vercel serverless function (`api/mcp.js`) explicitly allows the `ZEAL_API_KEY` to be passed as a query parameter, which is less secure than using HTTP headers and could lead to exposure in logs or browser history. The primary `mcpServer.js` relies on `.env` file for API keys, which is better. Standard security practices are otherwise followed, including `Bearer` token authentication for API calls to Zeal. Basic input validation for required parameters is present in tool calls.

Similar Servers

Stats

Interest Score0
Security Score7
Cost ClassMedium
Avg Tokens3000
Stars0
Forks0
Last Update2025-12-02

Tags

MCPAPIPostmanNode.jsLLM-tools