Eveoy MCP Server

Eveoy MCP is a well-architected Cloudflare Worker-based MCP server for managing in-store customer visits and payments. The codebase demonstrates good security discipline: Zod schema validation on all inputs, public-only content filtering via a classifier, proper rate limiting, and no hardcoded credentials. However, there are moderate concerns around anonymous checkout without email verification, overly broad fetch permissions via origin allowlist, and incomplete error handling in critical paths. Permissions are appropriate for a marketing/payment platform, but the lack of explicit user consent before CRM logging and the fire-and-forget integration logging merit attention. Supply chain analysis found 2 known vulnerabilities in dependencies (1 critical, 1 high severity).

5 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.