Back to MCP Trust Indexm8ven
0
/ 100
1 month ago
glama

Loki Mode

Autonomous spec-to-product coding-agent CLI. Its MCP server exposes 34 tools over stdio: project state and task-queue ops, memory retrieve/store, code search, quality and verification reports, repo hotspots/co-changes, and structured findings/learnings.

→ asklokesh/loki-mode· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Code appears obfuscated
1 file are unreadable to a human reviewer. Cannot audit what they do.
🔐
You'll be asked for 1 credential: LOKI_LICENSE_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configBUDGET_LIMIT
configBUN_FROM_SOURCE
configCAVEMAN_DEFAULT_MODE
configDO_NOT_TRACK
configITERATION_COUNT
configLOKI_ALLOW_HAIKU
configLOKI_API_MAX_BODY
configLOKI_AUTONOMY_OVERRIDE
configLOKI_AUTO_LEARNINGS
configLOKI_BMAD_STORY_ID
configLOKI_BUDGET_LIMIT— Max USD spend before auto-pause (e.g. 50.00) unset
configLOKI_CAVEMAN
configLOKI_CAVEMAN_LEVEL
configLOKI_CAVEMAN_USER_MODE
configLOKI_CAVEMAN_VERSION
configLOKI_COMPLEXITY
configLOKI_CURRENT_TIER
configLOKI_DASHBOARD_PORT— Dashboard/API port 57374
configLOKI_DIR
configLOKI_DYNAMIC_PROMPT_SECTIONS
configLOKI_HOOK_EVENTS
configLOKI_HOSTED_ENDPOINT
configLOKI_INJECT_FINDINGS
configLOKI_LEGACY_BASH
configLOKI_LEGACY_COMPLETION_MATCH
🔐 secretLOKI_LICENSE_KEY
configLOKI_MIROFISH_URL
configLOKI_NO_SESSION_PERSIST
configLOKI_OTEL_ENDPOINT
configLOKI_OVERRIDE_COUNCIL
configLOKI_PROJECT_DIR
configLOKI_PROJECT_GRAPH_APP_ID
configLOKI_PROJECT_GRAPH_MEMBERS
configLOKI_PROJECT_GRAPH_ROOT
configLOKI_PROJECT_GRAPH_SHARED_MEMORY_DIR
configLOKI_PROMPT_INJECTION
configLOKI_PROVIDER— e =codex \
configLOKI_RESUME_SESSION
configLOKI_REVIEW_ALLOWLIST
configLOKI_REVIEW_TOOL_GUARD
configLOKI_SESSION_FORK
configLOKI_SESSION_STAMP
configLOKI_STRICT_MCP
configLOKI_SUPPRESS_BUN_DIRECT_WARN
configLOKI_TELEMETRY
configLOKI_TELEMETRY_DISABLED
configLOKI_TRUST_RUN_ID
configLOKI_TS_ENTRY
configLOKI_USE_CLAUDE_WORKFLOWS
configPROVIDER_NAME
configTARGET_DIR
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/asklokesh-loki-mode-1o6iy0)](https://m8ven.ai/mcp/asklokesh-loki-mode-1o6iy0)
commit: bbfdcc86e50649a768ae2850eaf824275d544221
code hash: 37cbb582711749f3113eff07810ac89e20cd42b805f38c8ea74f020487d4bd95
verified: 6/15/2026, 12:47:20 PM
view raw JSON →