ModelsAtlas
Explore
Atlas / MCP servers / shufflethis / ugc-vz-neu

ugc-vz-neuBLOCK

mcp/shufflethis/ugc-vz-neu
MCP server by shufflethis · creator economy · dach · influencer marketing · Audited 2026-10-11
⚑ Report / re-scanSource ↗

Kostenloses UGC-Creator-Verzeichnis für DACH – echte Creator mit Portfolio- und Social-Nachweisen. Next.js, REST API v1, MCP-Server (ugc-vz-mcp) für AI-Agents. Keine Provision, keine KI-Avatare.

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
4 4r · 0w · 0d
Transport
streamable-http
License
MIT
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://registry.modelcontextprotocol.io/v0/servers?search=ugc-vz) [](https://ugc-vz.de/developers) [](https://ugc-vz.de/developers#webmcp) [](https://www.npmjs.com/package/ugc-vz-mcp) [](#status) [](https://github.com/shufflethis/ugc-vz-neu/actions/workflows/ci.yml) [](LICENSE)

[UGC VZ](https://ugc-vz.de) is a free directory of real, verified UGC creators in the German-speaking region (DACH) — portfolio and social proof, no AI-avatar content. Brands search for free, review public profiles, and deliberately request contact; UGC VZ delivers the creators' contact details by e-mail and takes no commission. The entire directory is machine-readable: agents like Claude, ChatGPT, and Cursor get the same data and logic through four protocol bindings of one registry — MCP, WebMCP site tools, REST/OpenAPI, and A2A. Free, no API key, no registration.

Read from source at commit 75be51cd2322OBSERVED · 2026-10-11
Advertisement
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add ugc-vz --env A2A_AGENT_API_KEYS=${A2A_AGENT_API_KEYS} --env A2A_INTERNAL_API_KEY=${A2A_INTERNAL_API_KEY} --env CREATOR_SESSION_SECRET=${CREATOR_SESSION_SECRET} --env CRON_SECRET=${CRON_SECRET} -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "ugc-vz": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "A2A_AGENT_API_KEYS": "${A2A_AGENT_API_KEYS}",
        "A2A_INTERNAL_API_KEY": "${A2A_INTERNAL_API_KEY}",
        "CREATOR_SESSION_SECRET": "${CREATOR_SESSION_SECRET}",
        "CRON_SECRET": "${CRON_SECRET}"
      }
    }
  }
}
03

Exposed tools (4)

4 read · 0 write · 0 destructive.

ToolRiskDescription
AuthorizationreadBezahlter A2A API-Key als Authorization: Bearer <key>. Starter: 29 EUR/Monat mit 10 Suchen. Pro: 100 EUR/Monat unlimited.
creatorsreadOeffentliche Creator-Suche und -Profile.
metareadVokabular und Hilfsendpunkte.
outreachreadKontaktanfragen (loesen echte E-Mails aus).
04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)WARN
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (6 observation(s))
Network
declared (13 observation(s))
Shell
declared (3 observation(s))
Dependencies
not all pinned
Secrets in source
none-found

Findings (21)

HIGHNetwork egress · net.metadata_ip · CWE-200, CWE-319
scripts/test-mcp-events.ts:17
for (const address of ['127.0.0.1','10.0.0.1','172.16.0.1','192.168.0.1','169.254.169.254','100.64.0.1','198.18.0.1','192.0.2.1','198.51.100.1','203.0.113.1','224.0.0.1','::1','::ffff:127.0.0.1','2001
Why it matters. cloud metadata endpoint: the classic SSRF credential grab
HIGHNetwork egress · net.metadata_ip · CWE-200, CWE-319
scripts/validate-agent-layer.ts:482
checkWba(__internals.isForbiddenJwksHost('169.254.169.254') === true, 'IPv4-Literal (Metadaten-Range) muss als verbotener JWKS-Host erkannt werden');
Why it matters. cloud metadata endpoint: the classic SSRF credential grab
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
app/lib/mcp-event-worker.ts:17
) SELECT claimed.*, s.owner_hash, s.callback_url, s.secret_encrypted,
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
app/lib/mcp-event-worker.ts:35
const result = await postSigned(delivery.callback_url, delivery.subscription_id,
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
app/lib/mcp-events.ts:85
await sql.query(`INSERT INTO mcp_event_subscriptions(id, owner_hash, event_name, arguments, callback_url, secret_encrypted, expires_at)
MEDIUMNetwork egress · net.beacon_words · CWE-200, CWE-319
scripts/test-mcp-events-db.mjs:20
await db.exec(`INSERT INTO mcp_event_subscriptions(id,owner_hash,event_name,arguments,callback_url,secret_encrypted,expires_at) VALUES
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
scripts/test-discovery-ui.mjs:6
const base = 'http://127.0.0.1:3998';
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
scripts/validate-agent-layer.ts:499
'signature-agent': '"https://127.0.0.1/jwks"',
MEDIUMPrompt injection · prompt.hidden_style · CWE-94, CWE-1427
docs/superpowers/plans/2026-08-12-famefact-internal-dossier.md:173
<div style="display:none;max-height:0;overflow:hidden;opacity:0;color:transparent;">${htmlEscape(preheader)}</div>
MEDIUMPrompt injection · prompt.hidden_style · CWE-94, CWE-1427
docs/superpowers/plans/2026-08-12-famefact-internal-dossier.md:182
<td style="font-size:21px;font-weight:800;color:#ffffff;letter-spacing:-.3px;">UGC<span style="color:#c8ff45;">VZ</span></td>
MEDIUMPrompt injection · prompt.hidden_style · CWE-94, CWE-1427
docs/superpowers/plans/2026-08-12-famefact-internal-dossier.md:640
<div class="creator-avatar" style="width:46px;height:46px;line-height:46px;border-radius:50%;background:#8b3fca;color:#ffffff;text-align:center;font-size:15px;font-weight:800;">${getInitials(creator.n
LOWInventory / provenance · inv.hidden_file · CWE-1104
.vercelignore
.vercelignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
app/brands/ugc-creator-deutschland/page.tsx:4
import SearchBox from '../../components/SearchBox';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
app/brands/ugc-creator-finden/page.tsx:4
import SearchBox from '../../components/SearchBox';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
app/brands/ugc-creator-preise/page.tsx:4
import SearchBox from '../../components/SearchBox';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
app/brands/ugc-creator-preise/page.tsx:5
import BreadcrumbSchema from '../../components/BreadcrumbSchema';
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
app/brands/ugc-plattform-deutschland/page.tsx:4
import BreadcrumbSchema from '../../components/BreadcrumbSchema';
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@fortawesome/fontawesome-svg-core, @fortawesome/free-brands-svg-icons, @fortawesome/react-fontawesome, @google/generative-ai, @headlessui/react, @modelcontextprotocol/server, @neondatabase/serverless,
Why it matters. 37 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWPrompt injection · review.reviewer_manipulation · CWE-94, CWE-1427
README.md
### How to test (judges)
Why it matters. The README contains a section explicitly addressed to automated reviewers/judges with step-by-step testing instructions, which is an attempt to influence the review process.
Fix. rewrite it so the instruction says plainly what it does, and asks the user before it acts
INFOInventory / provenance · inv.oversize · CWE-1104
public/favicon.svg
public/favicon.svg
Why it matters. 1362503 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
public/ugc-creator-finden.mp4
public/ugc-creator-finden.mp4
Why it matters. 33232506 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha 75be51cd2322full audit observations/trust-audit/mcp-server/shufflethis__ugc-vz-neu.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-1175be51cd2322BLOCKD69first audit
06

Questions

What is the ugc-vz-neu MCP server?

Kostenloses UGC-Creator-Verzeichnis für DACH – echte Creator mit Portfolio- und Social-Nachweisen. Next.js, REST API v1, MCP-Server (ugc-vz-mcp) für AI-Agents. Keine Provision, keine KI-Avatare.

What tools does ugc-vz-neu expose?

4 in total: 4 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is ugc-vz-neu safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does ugc-vz-neu need?

It reads A2A_AGENT_API_KEYS, A2A_INTERNAL_API_KEY, CREATOR_SESSION_SECRET, CRON_SECRET, GEONODE_SCRAPER_API_KEY, LEAD_LINK_SECRET, MCP_EVENTS_ENCRYPTION_KEY, MCP_EVENTS_TOKEN_HASHES, OPENROUTER_API_KEY, RESEND_API_KEY, RESEND_WEBHOOK_SECRET and SHEET_EXPORT_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does ugc-vz-neu run?

It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as ugc-vz at 0.1.0.

How current is this page?

The grade is for one exact copy of the source (75be51cd2322), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement