Is io.github.popapidev/pop-mcp safe to use?

io.github.popapidev/pop-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.popapidev/pop-mcp?

io.github.popapidev/pop-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.popapidev/pop-mcp?

io.github.popapidev/pop-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

io.github.popapidev/pop-mcp

Italian e-invoicing (FatturaPA/SdI), Peppol, and PDF invoice generation via POP

0 tools GitHub

No known CVEs

No license

Maintenance unknown

No commit data

Works with most clients

Transport: stdio

0 tools

Grade F

Edit this pageView history

AI / ML Finance

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-popapidev-pop-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-popapidev-pop-mcp)](https://mcppedia.org/s/io-github-popapidev-pop-mcp)

Read me

What io.github.popapidev/pop-mcp does

Italian e-invoicing (FatturaPA/SdI), Peppol, and PDF invoice generation via POP

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

21/100across 5 weighted dimensions

How we score →

0255075100

−79

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.popapidev/pop-mcp safe to use?: io.github.popapidev/pop-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.popapidev/pop-mcp?: io.github.popapidev/pop-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.popapidev/pop-mcp?: io.github.popapidev/pop-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Similar servers

Others in ai-ml / finance

View all →

Memory MCP Server98

Persistent memory using a knowledge graph

86.1k 5

Modelcontextprotocol96

The official MCP server implementation for the Perplexity API Platform

2.2k 4

Mcp Server Qdrant96

An official Qdrant Model Context Protocol (MCP) server implementation

1.4k 2

Context Mode95

Privacy-first. MCP is the protocol for tool access. We're the virtualization layer for context.

15.4k 6

MCP Security Weekly

Get CVE alerts and security updates for io.github.popapidev/pop-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML Finance

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-popapidev-pop-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-popapidev-pop-mcp)](https://mcppedia.org/s/io-github-popapidev-pop-mcp)

Read me

What io.github.popapidev/pop-mcp does

Italian e-invoicing (FatturaPA/SdI), Peppol, and PDF invoice generation via POP

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

pop-mcp

MCP (Model Context Protocol) server for POP — enabling LLMs to generate, submit, and manage Italian e-invoices (FatturaPA/SdI), Peppol invoices, and PDF invoices directly from AI assistants.

npm: @getpopapi/pop-mcp

What is POP?

POP is a cloud service for electronic invoice generation and delivery, supporting:

🇮🇹 Italian e-invoicing (FatturaPA/SdI) — compliant with D.Lgs. 127/2015
🇪🇺 Peppol — pan-European cross-border B2B invoicing (UBL 2.1)
📄 PDF invoices — branded, with email delivery
✅ Validation — fiscal codes, VAT numbers, document pre-submission checks
🗄️ Preservation — Italian legal archival (conservazione sostitutiva)

Tools Available (8 total)

Invoice Creation

Tool	Endpoint	Plan
`pop_create_sdi_invoice`	POST `/create-xml`	Any
`pop_create_peppol_invoice`	POST `/create-ubl`	Any (Basic+ to submit)
`pop_create_pdf_invoice`	POST `/create-pdf`	Any (Basic+ for email)

Status & Retrieval

Tool	Endpoint	Plan
`pop_get_invoice_status`	POST `/sdi-via-pop/document-notifications`	Any
`pop_get_peppol_document`	POST `/peppol/document-get`	Basic+
`pop_get_sdi_document`	POST `/sdi-via-pop/document-get`	Growth+

Validation & Advanced SdI

Tool	Endpoint	Plan
`pop_verify_sdi_document`	POST `/sdi-via-pop/document-verify`	Growth+
`pop_preserve_document`	POST `/sdi-via-pop/document-preserve`	Growth+

Prerequisites

Node.js >= 18
A POP license key
For SdI/Peppol submission: active integration on your POP account (Basic/Growth plan)

Authentication

Get Your License Key

New to POP? Visit popapi.io to create your account and get your license key.

API-only users can activate their account and obtain a license_key with this flow:

Open https://popapi.io/otp-login/
Enter your email address
Receive a one-time password (OTP) by email and enter it
Complete the configuration wizard
Open https://popapi.io/ → Account > API
Copy the default generated license_key

Key Management

Your account includes one default license_key, visible under Account > API
You can generate additional keys linked to the same account from that same page
Every license_key must be treated as a secret credential — do not commit it to source control

Recommended First Steps

Get your license_key
Test it with GET /account-profile
Send one document-generation request with a real payload
Add optional delivery integrations only after local generation works

Installation

From npm (recommended)

npm install -g @getpopapi/pop-mcp

From Source

git clone https://github.com/getpopapi/pop-mcp
cd pop-mcp
npm install
npm run build

Configuration

Set your POP license key as an environment variable:

export POP_API_KEY=your_license_key_here

Optional — use the staging environment:

export POP_ENVIRONMENT=staging

Claude Desktop Setup

Add to your claude_desktop_config.json:

If installed from npm:

{
  "mcpServers": {
    "pop": {
      "command": "pop-mcp",
      "env": {
        "POP_API_KEY": "your_license_key_here"
      }
    }
  }
}

If running from source:

{
  "mcpServers": {
    "pop": {
      "command": "node",
      "args": ["/path/to/pop-mcp/dist/index.js"],
      "env": {
        "POP_API_KEY": "your_license_key_here"
      }
    }
  }
}

Config file locations:

macOS: `~/Library/Application Support/Claude/

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

21/100across 5 weighted dimensions

How we score →

0255075100

−79

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.popapidev/pop-mcp safe to use?: io.github.popapidev/pop-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.popapidev/pop-mcp?: io.github.popapidev/pop-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.popapidev/pop-mcp?: io.github.popapidev/pop-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.