← Scan another
Clean
github · 42 files analyzed

domdomegg/airtable-mcp-server

No risky behavior detected.

View source ↗

Check your own MCP server

Free · no signup · instant shareable report.

Outbound network 2
Environment variables (config / keys) 3
Shell / command execution 1

AI review

This is a legitimate Airtable MCP server that reads/writes Airtable data using a user-provided API key. No hidden instructions, prompt injection, or deceptive tool descriptions were found. The code accesses environment variables for configuration as expected, and network calls are made only to Airtable's API.

Model: deepseek-chat

Static findings

Outbound network · Makes outbound network requests

low src/airtableService.ts:337 const response = await this.fetch(url, {
info src/e2e.test.ts:433 const res = await fetch(baseUrl, {

Environment variables (config / keys) · Reads environment variables (config / API keys)

low src/airtableService.ts:31 apiKey: string = process.env.AIRTABLE_API_KEY || '',
info src/e2e.test.ts:148 condition: process.env.RUN_MCPB_TEST,
low src/main.ts:26 const transport = process.env.MCP_TRANSPORT || 'stdio';

Shell / command execution · Executes shell / system commands

info src/e2e.test.ts:14 import {execSync, spawn} from 'node:child_process';

Scanning every extension your team installs?

Pro & Team add monitoring, private scans, and a CI gate for unsafe extensions.

MCPVet is a heuristic aid, not a security guarantee. A clean grade does not prove an extension is safe; always review code and instructions you don't trust.