Back to Browse

Electron MCP Server

Developer ToolsUse Caution1.2MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

electron.dance MCP server: upcoming gigs, community links, RSVP, and Spotify top tracks.

About

electron.dance MCP server: upcoming gigs, community links, RSVP, and Spotify top tracks.

Remote endpoints: streamable-http: https://electron.dance/api/mcp

Security Report

1.2
Use Caution1.2Critical Risk

This codebase contains a Next.js frontend application with an MCP server endpoint that has significant security vulnerabilities. The most critical issue is hardcoded credentials in environment variable expectations (MCP_TOKEN, MCP_DEFAULT_USER_ID) combined with insufficient token validation. Additionally, there is a web scraping endpoint (/api/scrape/gig-url) that lacks input validation and rate limiting, creating opportunities for SSRF and DoS attacks. The application uses browser automation tools (Puppeteer, Playwright) and external APIs (Spotify, Twilio) with broad permissions, and there are authorization gaps between open and protected tools. Supply chain analysis found 13 known vulnerabilities in dependencies (0 critical, 4 high severity).

7 files analyzed · 24 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

This is a Next.js project bootstrapped with create-next-app.

Getting Started

First, run the development server:

npm run dev
# or
yarn dev
# or
pnpm dev
# or
bun dev

Open http://localhost:3000 with your browser to see the result.

You can start editing the page by modifying app/page.tsx. The page auto-updates as you edit the file.

This project uses next/font to automatically optimize and load Geist, a new font family for Vercel.

Learn More

To learn more about Next.js, take a look at the following resources:

You can check out the Next.js GitHub repository - your feedback and contributions are welcome!

Deploy on Vercel

The easiest way to deploy your Next.js app is to use the Vercel Platform from the creators of Next.js.

Check out our Next.js deployment documentation for more details.

Reviews

No reviews yet

Be the first to review this server!