/ 100

1 month ago

glama

scout-mcp

Search 21 sources in one call — GitHub, npm, PyPI, arXiv, HN, X, Reddit, and more. No API keys to juggle, structured JSON back.

→ bartonguestier1725-collab/scout-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool descriptions don’t match what handlers do

1 tool describes read intent but its handler mutates — arxiv_search (line 33: regex.exec(xml))

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 11 credentials: CDP_API_KEY_SECRET, GEMINI_API_KEY, GITHUB_TOKEN, PH_CLIENT_SECRET, QIITA_TOKEN, RAPIDAPI_PROXY_SECRET, REDDIT_CLIENT_SECRET, S2_API_KEY, SE_API_KEY, XAI_API_KEY, YOUTUBE_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAPIFY_CONTAINER_PORT

configAPIFY_IS_AT_HOME

configAPIFY_META_ORIGIN

configCDP_API_KEY_ID

🔐 secretCDP_API_KEY_SECRET

configEVM_ADDRESS

configFACILITATOR_URL

🔐 secretGEMINI_API_KEY

configGEMINI_MODEL

🔐 secretGITHUB_TOKEN— Recommended Raises GitHub rate limit

configNETWORK

configPH_CLIENT_ID— / PH_CLIENT_SECRET For producthunt_search Product Hunt API credentials

🔐 secretPH_CLIENT_SECRET— PH_CLIENT_ID / For producthunt_search Product Hunt API credentials

configPRICE_LOW

configPRICE_RESEARCH

configPRICE_RESEARCH_DEEP

configPRICE_X

configPRICE_XFULL

🔐 secretQIITA_TOKEN— Optional Raises Qiita rate limit

🔐 secretRAPIDAPI_PROXY_SECRET

configREDDIT_CLIENT_ID— / REDDIT_CLIENT_SECRET For reddit_search Reddit API credentials

🔐 secretREDDIT_CLIENT_SECRET— REDDIT_CLIENT_ID / For reddit_search Reddit API credentials

🔐 secretS2_API_KEY— Optional Semantic Scholar dedicated rate limit

🔐 secretSE_API_KEY— Optional StackExchange dedicated rate limit

configSOLANA_PAY_TO

configX402_PAYMENTS_DB

configX402_PORT

🔐 secretXAI_API_KEY— x_search X / Twitter AI-powered via xAI Grok (requires )

configXAI_COST_PER_CALL

🔐 secretYOUTUBE_API_KEY— youtube_search YouTube Videos (requires )

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/bartonguestier1725-collab-scout-mcp-bzitwe)](https://m8ven.ai/mcp/bartonguestier1725-collab-scout-mcp-bzitwe)

commit: f8a6ea8385bc23e008dcd92db819e10a67422d23

code hash: 51c785b8280f30e93c2239fd59d094c4ff48b9712696fa5aec13119264863c0f

verified: 6/10/2026, 10:53:06 AM

view raw JSON →