Back to Home
vivanov87 icon

Avaza-MCP-Server

by vivanov87

Overview

This server provides 106 granular, semantic tools for managing Avaza API functionalities including schedules, timesheets, projects, tasks, financials, expenses, companies, contacts, and webhooks, designed for integration with Model Context Protocol (MCP) clients like LLMs.

Installation

Run Command
node dist/index.js

Environment Variables

  • AVAZA_API_KEY

Security Notes

The `test-runner.js` file in the source code contains a hardcoded Avaza API key (e.g., `1011968-b89ff68fca62ddb710974570fee6a759dec07f96`). This is a critical security vulnerability as it exposes a valid API key to anyone who clones or views the repository. Executing the `test-runner.js` would also effectively use this exposed key. While the main server (`src/index.ts`) correctly uses environment variables for the API key, the presence of a live key in the repository significantly lowers the overall security score. Additionally, the server uses `Access-Control-Allow-Origin: *` for its SSE and health check endpoints, which, while common for local client integrations, implies any web origin could interact with it.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassHigh
Avg Tokens2000
Stars0
Forks0
Last Update2026-01-19

Tags

MCP ServerAvaza APIProject ManagementTimesheet ManagementFinancialsTools