/ 100

26 days ago

pulsemcp

Vibe HN Index

Index source code into a local knowledge base with keyword, semantic, and hybrid search modes.

→ andyanh174/vibe-hnindex · listed on pulsemcp

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tests do not pass

Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: QDRANT_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies1 medium

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

mediumajv@8.17.1GHSA-2g4f-4pwh-qvx6

ajv has ReDoS when using `$data` option

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configBENCH_FIXTURE_PATH

configBENCH_KEYWORD_QUERY

configBENCH_MD

configBENCH_MODEL_SLUG

configBENCH_OUT

configBENCH_PROJECT

configBENCH_PROJECT_NAME

configBENCH_QUERY

configBENCH_ROUNDS

configBENCH_SEARCH_QUERY

configBENCH_STORAGE_BASE

configBENCH_SYMBOL_QUERY

configCHAT_MEMORY_ENABLED— "": "true"

configCHAT_MEMORY_LOAD_LIMIT

configCHAT_MEMORY_MAX_AGE_HOURS

configCHAT_MEMORY_THREAD_TTL_MS

configCHAT_MEMORY_VECTOR_ENABLED

configCHUNK_OVERLAP

configCHUNK_SIZE

configCODE_AGENT_ENABLED— "": "true",

configCODE_AGENT_SCOPE— "": "moderate",

configEMBEDDING_DIMENSIONS

configINDEX_PARALLEL_BATCH

configINDEX_WORKERS

configMAX_FILE_SIZE

configOLLAMA_MODEL— "": "bge-m3:567m",

configOLLAMA_TIMEOUT_MS— 30000 (30s) Max wait for Ollama /api/embed and /api/tags calls

configOLLAMA_URL— 2. Ollama — install from [ollama.com](https://ollama.com/), then: ollama pull bge-m3:567m and keep ollama serve running (or set to a remote server).

🔐 secretQDRANT_API_KEY— For Qdrant Cloud, add and set QDRANT_URL to your HTTPS cluster URL — details in [Getting started](docs/getting-started.md).

configQDRANT_COLLECTION_PREFIX

configQDRANT_TIMEOUT_MS— 15000 (15s) Max wait for Qdrant API calls (search, upsert, etc.)

configQDRANT_URL— "": "http://localhost:6333",

configRERANK_TIMEOUT_MS— Timeout for that POST (default 15000).

configRERANK_URL— ## Optional rerank ()

configSEARCH_AUTO_ROUTE

configSEARCH_CACHE_SIZE

configSEARCH_CACHE_TTL_MS

configSEARCH_FUZZY_ENABLED

configSEARCH_KEYWORD_FALLBACK_SEMANTIC

configSEARCH_RERANK— false disables post-retrieval reorder entirely (default: enabled).

configSEARCH_RERANK_POOL— Max candidates considered before trim (default 50).

configSEARCH_STREAM_ENABLED— "": "true",

configSEARCH_TIMEOUT_MS— 60000 (60s) Overall timeout for the entire search operation

configSMART_CONTEXT_MAX_FILE_CHARS

configSTORAGE_PATH

configWATCH_AUTO_RESUME

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/andyanh174-vibe-hnindex-1hk6fz)](https://m8ven.ai/mcp/andyanh174-vibe-hnindex-1hk6fz)

commit: a83efa906904943d4060dc774672f7db6d63d9ff

code hash: 25849d959c3ca20ea6196f39952a741421ac1527e9f8bfcb900d706e8e12cde7

verified: 6/16/2026, 1:01:26 PM

view raw JSON →