yachtsy-mcp-server
manee1112/yachtsy-mcp-serverYachtsy MCP Server — an AI-powered sailing and yacht marketplace integration built on the Model Context Protocol (MCP). Seamlessly connects 25,000+ yacht, sailboat, and marine listings with intelligent search, analytics, and chat-based maritime insights for sailors, brokers, and developers.
High risk — review the findings below
We found multiple concerning patterns in this package. Some of these might be legitimate (for example, a build tool might need to run commands), but you should review each finding below and decide if the explanations make sense for what this package claims to do.
What We Found(1 issue)
Each card explains what was found and what it means in plain English. Click "Technical details" for the full breakdown.
Caution. This package reads your secret passwords and API tokens from your system. If it also has network access, your credentials could be sent to someone else's server. Check WHY it needs your secrets.
Technical details
Reading sensitive environment variables (tokens, secrets, keys, passwords) suggests data exfiltration. MCP servers should declare required env vars, not silently read secrets.
process.env.YACHTSY_API_KEYFinding Summary
0
Critical
1
High
0
Medium
0
Low
0
Info