Aguara Watch

MMcp Server TempmailAn MCP (Model Context Protocol) server for temporary email management using the ChatTempMail API.

mcp-so:mcp-server-tempmail_Selenium39

View source
B
75/100

First Seen

Feb 19, 2026

Last Scanned

Feb 20, 2026

Findings

2

Score

75/100

CRITICAL 1
LOW 1

Findings (2)

CRITICAL
Text combines credential access with network transmission
L18

Text combines credential access with network transmission

temporary-email
An MCP (Model Context Protocol) server for temporary email management using the ChatTempMail API.
Overview
Tools
Comments
Overview
what is Mcp Server Tempmail?
Mcp Server Tempmail is a...
FIX

Remove the combination of credential access and network transmission from the tool. If the tool needs credentials, access them via a secrets manager and never transmit them externally.

FP?

Likely FP if the tool legitimately uses credentials for API authentication (e.g., reading an API key to make authenticated requests to the same service).

LOW
npx MCP server without version pin
L50

Detects MCP server configs using npx to run packages without version pinning

"command": "npx"
FIX

Pin the npx package in the MCP config to an exact version (e.g., @scope/server@1.2.3). Unpinned npx commands can silently fetch a compromised package version.

FP?

Likely FP if the MCP config is a local development setup example, though unpinned npx in production configs is a real supply chain risk.