Mercury Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mercury Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP Server for Mercury Banking API. Supports both stdio (for Docker) and HTTP transports.
{
"mcpServers": {
"mercury": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"MERCURY_API_KEY",
"ghcr.io/fyko/mercury-mcp-server"
],
"env": {
"MERCURY_API_KEY": "replace_me"
}
}
}
}Run the server normally (without -i flag or with a tty):
docker run -e MERCURY_API_KEY=your-key -e MCP_API_KEY=your-auth-key -p 9236:9236 ghcr.io/fyko/mercury-mcp-serveror locally:
# create .env, bun autoloads it
MERCURY_API_KEY=your-key
MCP_API_KEY=your-auth-key
PORT=9236bun startThe server auto-detects which mode to use based on whether stdin is a tty.
To use the server in Cursor:
{
"mcpServers": {
"mercury": {
"url": "https://whatever.example.com/mcp",
"headers": {
"Authorization": "Bearer MCP_API_KEY"
}
}
}
}list-accounts - list all mercury accountsget-account-transactions - get transactions for an accountdocker build -t mercury-mcp-server .bun install
bun run dev # hot reloading~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.