Haulest MCP Server

The Haulest bridge is a thin stdio-to-HTTP proxy that forwards tool, prompt, and resource calls to the remote haulest.com endpoint without caching or storing data, and it reads its optional partner key from an environment variable rather than hardcoding it. Its permissions (outbound HTTP and env vars) match a moving-research proxy, and the remaining findings are low-severity hardening items: the bearer key goes to whatever URL HAULEST_MCP_URL points to, the dependency versions should be verified, and remote tool metadata is passed through unfiltered. Remote server behaviour could not be audited from this code.

5 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.