github · airtable-mcp-server29494f187bd7

Evidence

// Extract MCP Bundle to test directory

			const testDir = 'test-mcpb-client';

			execSync(`rm -rf ${testDir}`);

			execSync(`mkdir -p ${testDir} && unzip -q airtable-mcp-server.mcpb -d ${testDir}`);

			// Start the MCP server from the extracted MCP Bundle

			const serverProcess = spawn('node', [path.join(testDir, 'dist/main.js')], {

Remediation

Replace shell-based execution with list-arg subprocess calls (shell=False) or escape every interpolated value with shlex.quote (Python) / shell-escape (Node). Treat every MCP tool input as hostile.

Evidence

// Extract MCP Bundle to test directory

			const testDir = 'test-mcpb-client';

			execSync(`rm -rf ${testDir}`);

			execSync(`mkdir -p ${testDir} && unzip -q airtable-mcp-server.mcpb -d ${testDir}`);

			// Start the MCP server from the extracted MCP Bundle

Remediation

Replace shell-based execution with list-arg subprocess calls (shell=False) or escape every interpolated value with shlex.quote (Python) / shell-escape (Node). Treat every MCP tool input as hostile.

Evidence

() => {

					// Clean up test directory

					if (fs.existsSync(testDir)) {

						execSync(`rm -rf ${testDir}`);

					}

				},

			);

Remediation

Replace shell-based execution with list-arg subprocess calls (shell=False) or escape every interpolated value with shlex.quote (Python) / shell-escape (Node). Treat every MCP tool input as hostile.

Evidence

export function registerCreateComment(server: McpServer, ctx: ToolContext): void {

	server.registerTool(

		'create_comment',

		{

			title: 'Create Comment',

			description: 'Create a comment on a record',

Remediation

Derive the caller's identity from `ctx.principal` (or the MCP auth layer equivalent) and include it in the query's WHERE clause (`... AND owner_id = :user_id`). Raise PermissionError when the row is missing OR not owned by the caller — never leak the distinction.

Evidence

if (options.view) {

				queryParams.append('view', options.view);

			}

			if (offset) {

				queryParams.append('offset', offset);

Remediation

Derive the caller's identity from `ctx.principal` (or the MCP auth layer equivalent) and include it in the query's WHERE clause (`... AND owner_id = :user_id`). Raise PermissionError when the row is missing OR not owned by the caller — never leak the distinction.

Evidence

"description": "List all accessible Airtable bases"

    },

    {

      "name": "list_tables",

      "description": "List all tables in a specific base"

    },

    {

Remediation

Namespace tool names with a server-specific prefix (`acme_read_file` instead of `read_file`). Reserve generic verbs only for servers whose identity the operator has verified. The authoritative reserved-names corpus lives at `_shared/popular-tool-names/v1/names.yaml` — bump to v2 of the corpus when adding/removing names.

Evidence

"description": "List all tables in a specific base"

    },

    {

      "name": "describe_table",

      "description": "Get detailed information about a specific table"

    },

    {

Remediation

Namespace tool names with a server-specific prefix (`acme_read_file` instead of `read_file`). Reserve generic verbs only for servers whose identity the operator has verified. The authoritative reserved-names corpus lives at `_shared/popular-tool-names/v1/names.yaml` — bump to v2 of the corpus when adding/removing names.

Evidence

import {z} from 'zod';

import {

	type IAirtableService,

	type ListBasesResponse,

Remediation

Pull the token / credential from `ctx.principal` (or the MCP auth layer equivalent) on every call. The handler must fail closed when the caller supplies no credential. Never cache a global API token at import time and reuse it across callers.

Evidence

#!/usr/bin/env node

import {StdioServerTransport} from '@modelcontextprotocol/sdk/server/stdio.js';

import {StreamableHTTPServerTransport} from '@modelcontextprotocol/sdk/server/streamableHttp.js';

import express from 'express';

import {AirtableService} from './airtableService.js';

import {createServer} from './index.js';

function setupSignalHandlers(cleanup: () => Promise<void>): void {

	process.on('SIGINT', async () => {

		await cleanup();

		process.exit(0);

	});

	process.on('SIGTERM', async

Remediation

Apply auth middleware at the route or router level: - Express / Fastify / Koa: `passport.authenticate(...)`, `requireAuth`, `verifyToken`, or an equivalent JWT middleware applied via `router.use(authMw)` or as a per-route handler. - FastAPI: `Depends(get_current_user)`, `OAuth2PasswordBearer`, `HTTPBearer`, or `verify_jwt` dependency. - Flask: `@login_required`, `@auth_required`, `@jwt_required`, or call `verify_jwt_in_request()` in the handler. Mounting MCP behind a s

Evidence

# Generated by https://smithery.ai. See: https://smithery.ai/docs/config#dockerfile

# Use a Node.js image

FROM node:24-alpine AS builder

# Set working directory

WORKDIR /app

# Copy package.json and package-lock.json to the working directory

COPY package.json package-lock.json ./

# Install project dependencies

RUN npm install

# Copy the entire project directory

COPY . .

# Build the project

RUN npm run build

# Start a new stage for the final image

FROM node:24-alpine AS release

# Add MCP re

Remediation

Create and switch to a non-root user before the CMD / ENTRYPOINT: RUN adduser --system --uid 1000 app USER 1000 Or reuse the base image's shipped non-root account (e.g. `USER nobody`, `USER nonroot` on distroless). Multi-stage builds only need the USER directive in the final stage.

Evidence

# airtable-mcp-server

A Model Context Protocol server that provides read and write access to Airtable databases. This server enables LLMs to inspect database schemas, then read and write records.

https://github.com/user-attachments/assets/c8285e76-d0ed-4018-94c7-20535db6c944

## Installation

**Step 1**: [Create an Airtable personal access token by clicking here](https://airtable.com/create/tokens/new). Details:

- Name: Anything you want e.g. 'Airtable MCP Server Token'.

- Scopes: `schema.base

Remediation

Declare a real authentication mechanism in the manifest, matching what the running server actually enforces: - `"auth": "bearer"` with a token scheme documented for callers - `"auth": "oauth"` / `"oauth2": { ... }` for delegated flows - `"apiKey": { "header": "X-API-Key", "prefix": "..." }` - `"mtls": true` when client certificates are required If the server is intentionally unauthenticated (stdio-only, local developer tool, trusted-host network), document the assumption in the manifest via a `"

Evidence

#!/usr/bin/env node

import {StdioServerTransport} from '@modelcontextprotocol/sdk/server/stdio.js';

import {StreamableHTTPServerTransport} from '@modelcontextprotocol/sdk/server/streamableHttp.js';

import express from 'express';

import {AirtableService} from './airtableService.js';

import {createServer} from './index.js';

function setupSignalHandlers(cleanup: () => Promise<void>): void {

	process.on('SIGINT', async () => {

		await cleanup();

		process.exit(0);

	});

	process.on('SIGTERM', async

Remediation

Apply CSRF middleware at the route or router level: - Express: `app.use(csurf())` / `csrf-csrf` package - FastAPI: `fastapi-csrf-protect` with `Depends(...)` - Flask: `CSRFProtect(app)` from `flask_wtf.csrf` Or move to bearer-token auth and set `SameSite=Strict` / `SameSite=Lax` on any session cookies. Document the choice in the project README so reviewers can confirm intent.

Evidence

labels: ${{ steps.meta.outputs.labels }}

          platforms: linux/amd64,linux/arm64

      - name: Create GitHub Release

        uses: softprops/action-gh-release@v2

        with:

          files: airtable-mcp-server.mcpb

          generate_release_notes: true

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

- name: Set up Docker Buildx

        uses: docker/setup-buildx-action@v3

      - name: Login to Docker Hub

        uses: docker/login-action@v3

        with:

          username: domdomegg

          password: ${{ secrets.DOCKER_ACCESS_TOKEN }}

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

type=semver,pattern={{version}}

            type=raw,value=latest,enable={{is_default_branch}}

      - name: Build and push Docker image

        uses: docker/build-push-action@v5

        with:

          context: .

          push: true

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

password: ${{ secrets.DOCKER_ACCESS_TOKEN }}

      - name: Extract Docker metadata

        id: meta

        uses: docker/metadata-action@v5

        with:

          images: domdomegg/airtable-mcp-server

          tags: |

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

env:

          NODE_AUTH_TOKEN: ${{ steps.npm-token.outputs.token }}

      - name: Set up Docker Buildx

        uses: docker/setup-buildx-action@v3

      - name: Login to Docker Hub

        uses: docker/login-action@v3

        with:

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

- name: Checkout ${{ github.sha }}

        uses: actions/checkout@v4

      - name: Use Node.js ${{ matrix.node-version }}

        uses: actions/setup-node@v4

        with:

          node-version: ${{ matrix.node-version }}

          registry-url: https://registry.npmjs.org/

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

CI: true

    steps:

      - name: Checkout ${{ github.sha }}

        uses: actions/checkout@v4

      - name: Use Node.js ${{ matrix.node-version }}

        uses: actions/setup-node@v4

        with:

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

- uses: google-github-actions/auth@v2

        with:

          workload_identity_provider: 'projects/457105351064/locations/global/workloadIdentityPools/github-secrets-pool/providers/github-secrets-github'

      - uses: google-github-actions/setup-gcloud@v2

      - name: Get NPM token

        id: npm-token

        run: |

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

- name: Checkout ${{ github.sha }}

        uses: actions/checkout@v4

      - name: Use Node.js with the npmjs.org registry

        uses: actions/setup-node@v4

        with:

          node-version: lts/*

          registry-url: https://registry.npmjs.org/

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

CI: true

    steps:

      - name: Checkout ${{ github.sha }}

        uses: actions/checkout@v4

      - name: Use Node.js with the npmjs.org registry

        uses: actions/setup-node@v4

        with:

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

unzip airtable-mcp-server.mcpb -d .github/tmp

      - name: Upload MCP Bundle artifact

        if: matrix.node-version == 'lts/*'

        uses: actions/upload-artifact@v4

        with:

          name: airtable-mcp-server-mcpb

          path: .github/tmp/*

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc

Evidence

MCPB_FILE_SHA256=$(sha256sum airtable-mcp-server.mcpb | cut -d' ' -f1)

          sed "s/{{VERSION}}/$VERSION/g; s/{{MCPB_FILE_SHA256}}/$MCPB_FILE_SHA256/g" server.json > server.json.tmp

          mv server.json.tmp server.json

      - uses: google-github-actions/auth@v2

        with:

          workload_identity_provider: 'projects/457105351064/locations/global/workloadIdentityPools/github-secrets-pool/providers/github-secrets-github'

      - uses: google-github-actions/setup-gcloud@v2

Remediation

Pin every `uses:` to a 40-character commit SHA. Trailing comment with the version helps reviewers: `uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v4.1.1` Automate the migration with `pinact` (https://github.com/suzuki-shunsuke/pinact) or `ratchet` (https://github.com/sethvargo/ratchet). Add a `pinact run --check` pre-commit hook so future PRs stay pinned. Re-pin when the action releases a new version — Dependabot can do this automatically with `version-update-strategy: inc