Valider Iban MCP Server

This MCP server implements a paid IBAN validation tool on Cloudflare Workers with x402 payment integration. While the code is generally well-structured and demonstrates proper use of authentication via payment, there are several security concerns: a hardcoded Ethereum recipient address that appears to be a public example address (reducing confidence in production readiness), insufficient input validation on the IBAN field, lack of rate limiting or DDoS protection on a paid endpoint, and missing error handling for payment failures. The server's permissions align reasonably with its purpose (network HTTP for payments, env vars potential for configuration), but the payment integration introduces operational risks that should be addressed before production use. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity).

3 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.