MCP, MCP server
Lexware Mcp Server
An open-source, self-hostable MCP server for the Lexware Office accounting API.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV
Why this grade
- NETWORK_NO_FIXED_HOST Low
Makes a network call whose host is not written as a fixed address.
src/config.ts, line 124
* `create-upload-ticket` hands to a browser and bakes into its curl command. - SECRETS_PATH_DOTENV Low
Mentions a .env file.
CONTRIBUTING.md, line 9
cp .env.example .env # fill in LEXWARE_API_KEY and MCP_AUTH_TOKEN
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Pass
No shell or command execution found, and no extra permission was declared.
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
src/config.ts, line 124
* `create-upload-ticket` hands to a browser and bakes into its curl command.
src/instructions.ts, line 36
"it returns a browser link and a curl command, and get-upload-result reads the file id after a " +
src/server.ts, line 44
// Ticket-gated upload path: bytes go browser/curl -> server -> Lexware, never through
Show more
src/tools/documents.ts, line 608
ids: jsonObj(z.array(z.string()).min(1).max(50)).describe("Voucher ids to fetch (max 50 per call)."),
src/tools/uploads.ts, line 17
* Builds the ready-to-run curl command for the local-file path.
src/tools/uploads.ts, line 33
* receipt was filed as `application/octet-stream` - while curl still reported
src/tools/uploads.ts, line 38
* `upload.bin`. Content-Type is different: curl is never allowed to decide it.
src/tools/uploads.ts, line 63
// ("spaces/file.pdf: command not found") before curl ever starts. DOUBLE rather
Dockerfile, line 52
CMD node -e "fetch('http://127.0.0.1:'+(process.env.PORT||8080)+'/status').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
.dockerignore, line 3
dist
.gitignore, line 2
dist/
CONTRIBUTING.md, line 9
cp .env.example .env # fill in LEXWARE_API_KEY and MCP_AUTH_TOKEN
Show more
.gitignore, line 5
!.env.example
README.md, line 165
cp .env.example .env # set LEXWARE_API_KEY and MCP_AUTH_TOKEN
README.md, line 236
docker run -p 8080:8080 --env-file .env lexware-mcp
docker-compose.yml, line 10
# local .env file (see .env.example). Never commit real secrets.
docker-compose.yml, line 12
- .env
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 8da792d08146. can reach a host that is not written as a fixed address. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: 8da792d08146665036943a9ee7d1b7f444225939
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.