grade C

4 days ago

pulsemcp

BearingBrain

Bearing lookup, fitment analysis, and quote review for industrial parts sourcing.

→ bagwatcher/bearingbrain-mcp · listed on pulsemcp

Install from

PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

10 tools verified — handlers match their declared behaviour

10 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 4 credentials: GOOGLE_GEMINI_API_KEY, JWT_SECRET, SKF_API_KEY, STRIPE_SECRET_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAMAZON_ASSOCIATE_TAG

configAPP_URL

configCJ_DEEP_LINK_BASE

configCJ_PUBLISHER_ID

configDATABASE_URL

configFAILURE_DIAG_MODEL

configGEMINI_MODEL

🔐 secretGOOGLE_GEMINI_API_KEY

🔐 secretJWT_SECRET

configNEXT_PUBLIC_BASE_URL

configPARTS_AGENT_PLANNER_THINKING

configPARTS_CHAT_MODEL

configPARTS_CHAT_THINKING

configPARTS_CHAT_TIMEOUT_MS

configPARTS_EXTRACT_THINKING

configPARTS_HELPER_MODEL

configPARTS_PARAMS_MODEL

configPARTS_PLANNER_MODEL

configPARTS_REWRITE_MODEL

configPARTS_REWRITE_THINKING

configPI_AGENT_BIN

configPI_AGENT_CWD

configPI_AGENT_MODEL

configPI_AGENT_THINKING

configPI_AGENT_TIMEOUT_MS

configPI_PARSE_MODEL

configSITE_AGENT_PROVIDER

configSKF_API_BASE

🔐 secretSKF_API_KEY

🔐 secretSTRIPE_SECRET_KEY

configZORO_CJ_ADVERTISER_ID

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/bagwatcher-bearingbrain-mcp-16es9x)](https://m8ven.ai/mcp/bagwatcher-bearingbrain-mcp-16es9x)

commit: 68c607b7db2619fb7057c44103a8b015e420c3dd

code hash: e05a1e79d36d408a3804a98e3efaedb66f25761b422ce083891b6a2b0906699b

verified: 4/18/2026, 3:45:26 PM

view raw JSON →