Back to Browse

Pop MCP Server

Developer ToolsUse Caution3.0MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Italian e-invoicing (FatturaPA/SdI), Peppol, KSeF, ZUGFeRD, and PDF invoice generation via POP

About

Italian e-invoicing (FatturaPA/SdI), Peppol, KSeF, ZUGFeRD, and PDF invoice generation via POP

Remote endpoints: streamable-http: https://mcp.popapi.io/mcp

Security Report

3.0
Use Caution3.0High Risk

The server is a legitimate POP e-invoicing client with no sign of exfiltration, crypto mining, or shell execution, and its permissions match its purpose. The score is lowered by the onboarding flow, where pop_onboarding_request_otp returns the one-time password directly in the tool response, which lets anyone who knows an account email obtain an onboarding token without email access. Onboarding tools are also callable without authentication and can modify live account configuration. Supply chain analysis found 11 known vulnerabilities in dependencies (0 critical, 5 high severity). Package verification found 1 issue.

10 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Reviews

No reviews yet

Be the first to review this server!