commercevault-edd-mcp-server
Warn
Audited by Snyk on Jun 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 1.00). The skill explicitly provides APIs to create and manage orders and mentions refunds and payment gateways. The documented tools include edd_create_order (with a "gateway" parameter that can be "stripe") and references to order lifecycle management and refunds. It requires EDD API credentials (API key/token) and shows code that posts orders to the EDD /orders endpoint (including gateway and status), which is a direct mechanism to initiate financial transactions via payment gateways. These are specific financial execution capabilities (payment gateway/order creation/refunds), not generic tooling.
Issues (1)
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata