grade F

10 days ago

glama

ASG Card

Virtual MasterCards for AI agents. Issue and manage cards via MCP.

→ ASGCompute/asgcard-public · listed on glama

Install from

Glama npm npm

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

1 flow detected: OPS_API_KEY. We can’t prove the destination matches the brand the credential belongs to.

🚨

Reads files from sensitive locations

Touches: .env.prod.verify, .env.prod

🔐

You'll be asked for 11 credentials: CARD_DETAILS_KEY, CRON_SECRET, FACILITATOR_API_KEY, FOURPAYMENTS_API_TOKEN, FOURPAYMENTS_V2_API_TOKEN, MPP_SECRET_KEY, OPS_API_KEY, STELLAR_PRIVATE_KEY, STELLAR_SECRET, STRIPE_SESSIONS_KEY, WEBHOOK_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAGENT_DETAILS_ENABLED

configAPI_BASE

configAPI_BASE_URL

configASGCARD_API_URL

🔐 secretCARD_DETAILS_KEY

🔐 secretCRON_SECRET

configDATABASE_URL

🔐 secretFACILITATOR_API_KEY

configFACILITATOR_URL

🔐 secretFOURPAYMENTS_API_TOKEN

configFOURPAYMENTS_BASE_URL

configFOURPAYMENTS_CARDHOLDER_ID

configFOURPAYMENTS_CARD_TYPE_ID

🔐 secretFOURPAYMENTS_V2_API_TOKEN

configFOURPAYMENTS_V2_CARDHOLDER_ID

configFOURPAYMENTS_V2_CARD_TYPE_ID

configLOG_LEVEL

configMINIAPP_TEST_MODE

configMINIAPP_UNLOCK_CODES

🔐 secretMPP_SECRET_KEY

🔐 secretOPS_API_KEY

configPORT

configREPO_MODE

configSERVER_URL

configSTELLAR_HORIZON_URL

🔐 secretSTELLAR_PRIVATE_KEY

configSTELLAR_RECIPIENT

configSTELLAR_RPC_URL

🔐 secretSTELLAR_SECRET

configSTELLAR_TREASURY_ADDRESS

🔐 secretSTRIPE_SESSIONS_KEY

configTG_BOT_USERNAME

configVERCEL

🔐 secretWEBHOOK_SECRET

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/asgcompute-asgcard-public-11xrz2)](https://m8ven.ai/mcp/asgcompute-asgcard-public-11xrz2)

commit: 332af896eb32fccce72cabad9f625f958bf19bfa

code hash: b467ad67fd0ed982c991cd3e1dcfab42d8215f4ce516e6cab666dbcd0ad65e1c

verified: 4/11/2026, 2:34:15 PM

view raw JSON →