runs anywhere. uses anything
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@grpc/grpc-js: A malformed request can cause a server crash
@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash
Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning
sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591
shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)
process.env. You'll be asked to provide them before it can run.ANTHROPIC_API_KEYANTHROPIC_DEFAULT_SONNET_MODELBRAVE_API_KEYCLAUDE_BRIDGE_BASE_URLCLAUDE_BRIDGE_OAUTH_TOKENCLAUDE_BRIDGE_SESSION_INGRESS_URLCLAUDE_BRIDGE_USE_CCR_V2CLAUDE_CODE_CCR_MIRRORCLAUDE_CODE_EAGER_FLUSHCLAUDE_CODE_ENABLE_PROMPT_SUGGESTIONCLAUDE_CODE_ENVIRONMENT_KINDCLAUDE_CODE_ENVIRONMENT_RUNNER_VERSIONCLAUDE_CODE_EXIT_AFTER_FIRST_RENDERCLAUDE_CODE_IS_COWORKCLAUDE_CODE_OAUTH_REFRESH_TOKENCLAUDE_CODE_OAUTH_SCOPESCLAUDE_CODE_POST_FOR_SESSION_INGRESS_V2CLAUDE_CODE_PROACTIVECLAUDE_CODE_REMOTECLAUDE_CODE_RESUME_INTERRUPTED_TURNCLAUDE_CODE_SESSION_ACCESS_TOKENCLAUDE_CODE_SIMPLECLAUDE_CODE_STREAMLINED_OUTPUTCLAUDE_CODE_SYNC_PLUGIN_INSTALLCLAUDE_CODE_SYNC_PLUGIN_INSTALL_TIMEOUT_MSCLAUDE_CODE_USE_CCR_V2CLAUDE_CODE_USE_GEMINICLAUDE_CODE_USE_GITHUBCLAUDE_CODE_USE_MISTRALCLAUDE_CODE_USE_OPENAICLAUDE_CODE_USE_VERTEXCLAUDE_CODE_WORKER_EPOCHCLAUDE_CONFIG_DIR— ~/.claude, project .claude/ directories, or . Fresh installsCLAUDE_FEATURE_FLAGS_FILECLAUDE_TRUSTED_DEVICE_TOKENCODEX_API_KEYENABLE_SESSION_PERSISTENCEEXA_API_KEYFIRECRAWL_API_KEY— Web WebSearch via DuckDuckGo free by default; drop in for JS-rendered pagesFIRECRAWL_API_URLGEMINI_API_KEYGEMINI_BASE_URLGEMINI_MODELGH_TOKENGITHUB_TOKENGOOGLE_API_KEYGOOGLE_CSE_IDGRPC_HOSTGRPC_PORTMAX_STRUCTURED_OUTPUT_RETRIESMISTRAL_API_KEYMISTRAL_BASE_URLMISTRAL_MODELOPENAI_API_KEY— $env:="sk-..."OPENAI_API_KEYSOPENAI_BASE_URL— $env:="http://localhost:11434/v1"OPENAI_MODEL— $env:="gpt-4o"OPENCLAUDE_CONFIG_DIR— relocates everything.OPENCLAUDE_PROFILE_GOALOPENCLAUDE_SKILLS_REGISTRY_URLOPENGATEWAY_API_KEYWEB_KEYWEB_PROVIDERWEB_SEARCH_APIWEB_SEARCH_PROVIDERWEB_SEARCH_TIMEOUT_SECWEB_URL_TEMPLATE[](https://m8ven.ai/mcp/0xwilliamortiz-openclaude-improved-zs93yy)