74
/ 100
12 days ago
glama

SoupNet-oss

SoupNet gives your AI agents one shared memory of how you think — across Claude, Cursor, and ChatGPT. Each checks your past decisions as searchable “recipes” and acts on your real judgment. Share it, and your team’s agents inherit that judgment too.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
3 flows detected: GEMINI_API_KEY. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 6 credentials: DEV_PASSWORD, EMBEDDINGS_API_KEY, GEMINI_API_KEY, JWT_SECRET, SMTP_PASS, TEST_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configALLOW_AUTO_SETUP
configBACKEND_URL
configDATABASE_URL
🔐 secretDEV_PASSWORDEdit .env: set JWT_SECRET (openssl rand -hex 32), DEV_USERNAME, .
configDEV_USERNAMEEdit .env: set JWT_SECRET (openssl rand -hex 32), , DEV_PASSWORD.
configDISABLE_RATE_LIMIT
configEMAIL_FROM
🔐 secretEMBEDDINGS_API_KEY=... # optional bearer, if your server requires one
configEMBEDDINGS_BASE_URL
configEMBEDDINGS_MODELthe id the server reports>
configEMBEDDINGS_PROVIDERGEMINI_API_KEY is optional locally — leave =stub for tests.
configEMBEDDING_WORKER_ENABLED
configFEEDBACK_RATE_LIMIT_DAILY
configFEEDBACK_RATE_LIMIT_HOURLY
configFRONTEND_URL
🔐 secretGEMINI_API_KEYis optional locally — leave EMBEDDINGS_PROVIDER=stub for tests.
configIMPORT_MAX_BYTES
configIMPORT_SCALE_TEST
🔐 secretJWT_SECRETEdit .env: set (openssl rand -hex 32), DEV_USERNAME, DEV_PASSWORD.
configMCP_ALLOWED_ORIGINS
configMCP_TOOL_PROFILE
configMIGRATIONS_PATH
configOMP_NUM_THREADS
configORT_NUM_THREADS
configPER_KEY_RATE_LIMIT_DAILY
configPER_KEY_RATE_LIMIT_HOURLY
configPGDATABASE
configPGHOST
configPGPASSWORD
configPGPORT
configPGSSLMODE
configPGSSLROOTCERT
configPGUSER
configPORT
configRANKEVAL_ALLOW_STUB
configSES_CONFIGURATION_SET
configSMTP_HOST
🔐 secretSMTP_PASS
configSMTP_PORT
configSMTP_SECURE
configSMTP_USER
configSYNTHESIS_MODEL
configSYNTHESIS_PROVIDER
🔐 secretTEST_PASSWORD
configTEST_USERNAME
configTRUSTED_PROXY_HOPS
configWORKER_CONCURRENCY
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/andyforest-soupnet-1obxv1)](https://m8ven.ai/mcp/andyforest-soupnet-1obxv1)
commit: cb6ac62451083c72460ba96aa29b647c00a7775b
code hash: e9e1a2182df6389c089e5214c563a1db914d443e457b61521797191e0fdc216c
verified: 7/19/2026, 8:47:26 AM
view raw JSON →