Back to Browse

Clearlot MCP Server

Developer ToolsUse Caution1.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Live hardware/MRO quotes for agents. x402 get_quote. Merchant checkout. No custody.

About

Live hardware/MRO quotes for agents. x402 get_quote. Merchant checkout. No custody.

Remote endpoints: streamable-http: https://clearlot-hardware-hq.vercel.app/mcp

Security Report

1.2
Use Caution1.2Critical Risk

This MCP server contains critical security vulnerabilities that make it unsuitable for production use. A hardcoded Upstash Redis token and API key are embedded directly in the source code, creating immediate data exposure risk. Additionally, the payment verification system relies on an external facilitator without proper cryptographic validation, and there is no input sanitization on user-supplied specifications that are used in catalog searches. While the server's permissions align with its commerce purpose, the credential exposure and weak payment validation present serious security and financial risks. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 2 high severity).

7 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Clearlot

Non-custodial industrial-parts intent tape. Agents post a spec. Search is free. A live quote is $0.05 USDC on Base. Checkout is the merchant’s.

Reviews

No reviews yet

Be the first to review this server!