@playti/mcp-infiniti-v2
MCP server para a API Infiniti V2 da Play: consulta a documentação (openapi.yaml público) e executa rotas reais autenticando com X-API-Key.
No outside reports on file
@playti/mcp-infiniti-v2 requires API keys or tokens; restrict its folder reach, network access, and credentials before installing.
Based on public adoption and transparency signals as of Oct 27, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachLocal or standard API callsLOW
- CredentialsRequires API key or tokenREVIEW
- Package sourcenpm (@playti/mcp-infiniti-v2)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
npx -y @playti/mcp-infiniti-v2Everything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: F (from public signals such as stars and downloads, not a code review). Graded 2026-10-27.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About @playti/mcp-infiniti-v2
@playti/mcp-infiniti-v2 is an MCP server focused on Files & documents and Cloud & infrastructure: MCP server para a API Infiniti V2 da Play: consulta a documentação (openapi.yaml público) e executa rotas reais autenticando com X-API-Key.
It is published on npm as @playti/mcp-infiniti-v2. Based on its public metadata, its operational scope includes: requires api key or token.
Setup
These use the package this listing points to. Check the project’s own instructions before running anything.
npm command
npx -y @playti/mcp-infiniti-v2MCP client config
For Claude Desktop (claude_desktop_config.json) or Cursor (.cursor/mcp.json).
{
"mcpServers": {
"mcp-infiniti-v2": {
"command": "npx",
"args": [
"-y",
"@playti/mcp-infiniti-v2"
]
}
}
}Why this grade
Signal-based grade (0/7 points): no public source code found. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- Listing last refreshed
- 2026-10-28
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- Credential & token exposure: Requires API keys or secrets in configuration. Store credentials in environment variables with read-only or minimum required scopes and rotate them regularly.
- Dependency & version pinning: Distributed via npm (@playti/mcp-infiniti-v2). Pin an exact release version or commit SHA rather than floating tags so upstream updates are reviewed first.
How to lower the risk
Least-privilege permissions
- Give it access only to the specific folders, accounts or projects it needs, never your whole drive or admin account.
- Use a separate, limited API key or login just for this tool so you can switch it off without affecting anything else.
Network isolation
- Run it on a work computer or sandbox account, not one holding personal or company-sensitive data.
- If your IT team can, limit which websites and services it is allowed to contact.
Monitoring
- Check its activity history or logs weekly at first, and look at what it changed or sent.
- Turn on alerts for new logins or unusual usage on any account it connects to.
Red flags to watch for
- It asks for more access than its job requires, or prompts you to paste passwords.
- It suddenly updates with new owners, or starts contacting unfamiliar websites.
Questions
How do I install @playti/mcp-infiniti-v2?
Run npx -y @playti/mcp-infiniti-v2 in your terminal, or add the server entry to your claude_desktop_config.json or .cursor/mcp.json as shown in the Setup section on this page.
Are there security reports about @playti/mcp-infiniti-v2?
No reports found for this package in our research (last checked 2026-10-30). @playti/mcp-infiniti-v2 currently holds Grade F (Many risk signals) based on public adoption and transparency signals. Review the permissions and source repository before granting access to local files, shell commands, or API keys.
Is @playti/mcp-infiniti-v2 actively maintained?
We do not have star or download counts on file for @playti/mcp-infiniti-v2 yet (listing refreshed 2026-10-28). Check the commit history and open issues before relying on it.
What are alternatives to @playti/mcp-infiniti-v2?
Compare @playti/mcp-infiniti-v2 side by side with similar MCP servers in the Related tools section on this page, or browse all MCP servers on AgentArmorHQ.
README badge and team notes
Maintain or use @playti/mcp-infiniti-v2? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/playti-mcp-infiniti-v2)HTML embed:
<a href="https://agentarmorhq.com/skills/playti-mcp-infiniti-v2"><img src="https://agentarmorhq.com/api/badge/playti-mcp-infiniti-v2" alt="AgentArmorHQ Risk Grade for @playti/mcp-infiniti-v2" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "playti-mcp-infiniti-v2"- Compare @playti/mcp-infiniti-v2 →
- Add to a team allowlist
- Claude and terminal guide →
- Download the PDF guide
Share with your security lead
Need sign-off to use @playti/mcp-infiniti-v2? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: @playti/mcp-infiniti-v2
- **Listing URL:** https://agentarmorhq.com/skills/playti-mcp-infiniti-v2
- **Type:** App connector
- **Risk Grade:** Grade F (Many risk signals)
- **Outside Security Advisories on File:** 0
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Local or standard API calls
- **Credentials:** Requires API key or token
- **Package source:** npm (@playti/mcp-infiniti-v2)
#### Recommended Hardened Setup
- **Command:** `npx -y --ignore-scripts @playti/mcp-infiniti-v2`
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 27, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Install command
- npm install @playti/mcp-infiniti-v2
- Est. context load
- ~850 tokens / turn (~5 tool schemas, 0.43% of 200k context)
- Last updated
- 2026-10-28
- Last graded
- 2026-10-27
Community
Discussions for @playti/mcp-infiniti-v2
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude