Coffer MCP

Item: Coffer MCP
Rating: 0
Author: M8ven

Credential vault for LLM agents that stores credentials encrypted and exposes MCP tools for authenticated HTTP requests, web scraping, and credential management, preventing AI assistants from seeing secrets.

→ annawhooo/coffer-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Hardcoded credentials detected

2 live-looking API keys in source: 1 GitHub PAT (classic), 1 Slack token

🔐

You'll be asked for 1 credential: COFFER_MASTER_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretCOFFER_MASTER_KEY

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/annawhooo-coffer-mcp-lzde0o)](https://m8ven.ai/mcp/annawhooo-coffer-mcp-lzde0o)

commit: b669571b34b586227e23fbebf9f7e5247e4ba1a6

code hash: 17a98f7ef7f6fdbe2e5dce0b444ce04cdde9f40b225c6fe7a5fa7337324d4ec6

verified: 6/21/2026, 10:23:24 AM

view raw JSON →