Andreani — Argentine courier and logistics
Andreani — Argentine courier and logistics
This is a monorepo catalog of 109 MCP servers for Latin American commerce. The codebase is well-structured with clear organization, but the analysis is limited to one representative server (Sift fraud detection). That server has solid code quality, proper authentication via API keys, and appropriate scoping for its fraud-detection purpose. However, several moderate concerns emerge: environment variable reliance without validation, potential for broad data exfiltration through the fraud event pipeline, lack of input sanitization on user-provided fields, and no apparent rate-limiting or request-signing mechanisms. The codebase demonstrates good security intent but would benefit from centralized auth validation, input validation middleware, and audit logging. Supply chain analysis found 2 known vulnerabilities in dependencies (1 critical, 0 high severity). Package verification found 1 issue (1 critical, 0 high severity).
4 files analyzed · 12 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Set these up before or after installing:
Environment variable: ANDREANI_API_KEY
Environment variable: ANDREANI_USER
Environment variable: ANDREANI_PASSWORD
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-codespar-mcp-andreani": {
"env": {
"ANDREANI_USER": "your-andreani-user-here",
"ANDREANI_API_KEY": "your-andreani-api-key-here",
"ANDREANI_PASSWORD": "your-andreani-password-here"
},
"args": [
"-y",
"mcp-dev-latam"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.