64
/ 100
1 month ago
glama
Rive MCP Server
Orchestrates Rive animations by enabling discovery, integration, and composition across frameworks like React and Vue, with code generation and multi-backend storage.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
⚠️
Tests do not pass
Either the test suite is broken or the code regressed. Either way the published behaviour can’t be verified by the publisher’s own tests.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: S3_SECRET_ACCESS_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 high
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
ASSETS_PATHconfig
AUTO_INDEXconfig
CACHE_TTLconfig
ENABLE_CACHEconfig
INDEX_INTERVALconfig
LOCAL_ASSETS_PATHconfig
LOCAL_BASE_PATHconfig
LOCAL_CACHE_PATHconfig
LOCAL_MANIFEST_PATHconfig
LOG_FILEconfig
LOG_FORMATconfig
LOG_LEVELconfig
MANIFESTS_PATHconfig
REMOTE_ASSET_BASE_URLconfig
REMOTE_MANIFEST_URLconfig
REMOTE_TIMEOUTconfig
RIVE_RUNTIME_VERSIONconfig
S3_ACCESS_KEY_IDconfig
S3_ASSETS_PREFIXconfig
S3_BUCKETconfig
S3_ENDPOINTconfig
S3_MANIFEST_PREFIXconfig
S3_REGION🔐 secret
S3_SECRET_ACCESS_KEYconfig
SCENES_PATHconfig
SERVER_NAMEconfig
SERVER_PORTconfig
SERVER_VERSIONconfig
STORAGE_BACKEND// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/astralisone-rive-mcp-server-core-cnblms)commit: db1d0cc4cd52589116360428b7504fd0ca748b3e
code hash: d106775c09a7e225d4ce40557f1e299fcd420ae062c7f13b6c83573c97085614
verified: 6/15/2026, 2:07:50 PM