Back to Browse

Floom MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Deploy Python functions as web apps with auto-generated UI, REST API, and shareable links.

About

Deploy Python functions as web apps with auto-generated UI, REST API, and shareable links.

Security Report

5.2
Moderate5.2Moderate Risk

Floom is a well-structured worker runtime with comprehensive security controls for sandboxed execution, but has several moderate-severity issues requiring attention. The main concerns are: (1) insufficient input validation on some API endpoints allowing potential path traversal, (2) overly broad exception handling that could mask security errors, (3) potential timing-based authentication bypass risks in the magic link validation flow, and (4) missing CORS origin validation in certain scenarios. The codebase demonstrates good security practices in most areas (secret scanning, isolation via E2B sandboxes, approval gates) but these gaps should be addressed before production deployment. Package verification found 1 issue (1 critical, 0 high severity).

4 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

process_spawn

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

What You'll Need

Set these up before or after installing:

Base URL of the Floom control planeOptional

Environment variable: FLOOM_BASE_URL

API key for authenticating with FloomRequired

Environment variable: FLOOM_API_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-floomhq-floom": {
      "env": {
        "FLOOM_API_KEY": "your-floom-api-key-here",
        "FLOOM_BASE_URL": "your-floom-base-url-here"
      },
      "args": [
        "-y",
        "floom"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!