Clean
Check your own MCP server
Free · no signup · instant shareable report.
Outbound network 2
Environment variables (config / keys) 3
Shell / command execution 1
AI review
This is a legitimate Airtable MCP server that reads/writes Airtable data using a user-provided API key. No hidden instructions, prompt injection, or deceptive tool descriptions were found. The code accesses environment variables for configuration as expected, and network calls are made only to Airtable's API.
Model: deepseek-chat
Static findings
Outbound network · Makes outbound network requests
low
src/airtableService.ts:337
const response = await this.fetch(url, {
info
src/e2e.test.ts:433
const res = await fetch(baseUrl, {
Environment variables (config / keys) · Reads environment variables (config / API keys)
low
src/airtableService.ts:31
apiKey: string = process.env.AIRTABLE_API_KEY || '',
info
src/e2e.test.ts:148
condition: process.env.RUN_MCPB_TEST,
low
src/main.ts:26
const transport = process.env.MCP_TRANSPORT || 'stdio';
Shell / command execution · Executes shell / system commands
info
src/e2e.test.ts:14
import {execSync, spawn} from 'node:child_process';
Scanning every extension your team installs?
Pro & Team add monitoring, private scans, and a CI gate for unsafe extensions.
MCPVet is a heuristic aid, not a security guarantee. A clean grade does not prove an extension is safe; always review code and instructions you don't trust.