/ 100

17 days ago

glama

sabba

Item: sabba
Rating: 0
Author: M8ven

MCP server for security bug-finding that proves every finding by running exploits, enabling agents to verify changes and find bugs with execution-based evidence.

→ 8NobleTruths/sabba · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Reads files from sensitive locations

Touches: ~/.config/anthropic/credentials

🔐

You'll be asked for 6 credentials: OPENROUTER_API_KEY, VOYAGE_API_KEY, ANTHROPIC_API_KEY, ANTHROPIC_AUTH_TOKEN, SABBA_LLM_API_KEY, SABBA_LOCAL_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configSABBA_AUDIT_LOG

configSABBA_ETH_RPC

configSABBA_JAZZER_HOME

configSABBA_JAZZERJS_HOME

configSABBA_HOME

configSABBA_BIN

configSABBA_LLM_BACKEND— local, and train a small CPU risk ranker so retrieval looks at the risky

configOPENROUTER_MODEL

configSABBA_MODEL

configSABBA_LOCAL_MODEL

configSABBA_LOCAL_BASE_URL

🔐 secretOPENROUTER_API_KEY— export =... # from openrouter.ai/keys

🔐 secretVOYAGE_API_KEY

configSABBA_CC

configSABBA_SCOPE

configSABBA_GCP_PROJECT

configSABBA_GCP_REGION

🔐 secretANTHROPIC_API_KEY

🔐 secretANTHROPIC_AUTH_TOKEN

configSABBA_LLM_BASE_URL

🔐 secretSABBA_LLM_API_KEY

configSABBA_DISABLE_THINKING

🔐 secretSABBA_LOCAL_API_KEY

configOPENROUTER_REFERER

configOPENROUTER_TITLE

configSABBA_RANKER_PATH

configTERM

configSABBA_TRACES

configSABBA_TRACE_DIR

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/8nobletruths-sabba-wae4z5)](https://m8ven.ai/mcp/8nobletruths-sabba-wae4z5)

commit: 6bcb8bb1369bf2048ff0ed1e4fb7d26faca9c40f

code hash: 41fb8b05aa5ef2961555b64f3a8bdaecf1c7174ae05332426043d574b380db56

verified: 7/14/2026, 8:29:44 AM

view raw JSON →