Mailchimp mcp

• Analyzed: May 5, 2026, 5:41 PM
• Findings: 1
• Version: 1.0.0
• Hash: e189312b19a42f27688ce42839e706c6d9f0a709e193263ba5808862a6fe5c88
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate integration for Mailchimp using the Model Context Protocol (MCP) via the 'mcporter' utility. The included shell scripts (init-mcporter.sh and invoke.sh) are designed to securely seed OAuth credentials from environment variables into a local vault (~/.mcporter/credentials.json) using proper locking mechanisms and safe secret handling with jq. The SKILL.md documentation includes explicit safety instructions requiring the AI agent to seek user confirmation for any destructive or customer-visible actions, and no indicators of data exfiltration or malicious intent were found.