/ 100

2 days ago

glama

Agent Broker

Item: Agent Broker
Rating: 41
Author: M8ven

An agent-callable MCP server that lets autonomous AI agents find, verify, message, schedule with, and transact with small and mid-sized businesses through a single compliance-enforced tool surface.

→ basilalshukaili/agentbroker · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 19 credentials: TWILIO_AUTH_TOKEN, CALCOM_API_KEY, VAPI_API_KEY, RESEND_API_KEY, PADDLE_API_KEY, JWT_SIGNING_SECRET, POLAR_API_KEY, LEMONSQUEEZY_API_KEY, COINBASE_COMMERCE_API_KEY, BILLING_SIGNING_KEY, TELEGRAM_BOT_TOKEN, SENDGRID_API_KEY, ADMIN_SECRET, PADDLE_WEBHOOK_SECRET, POLAR_WEBHOOK_SECRET, GMAIL_APP_PASSWORD, SMITHERY_API_KEY, SUPABASE_SERVICE_KEY, SUPABASE_ANON_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configTWILIO_ACCOUNT_SID

🔐 secretTWILIO_AUTH_TOKEN

🔐 secretCALCOM_API_KEY

🔐 secretVAPI_API_KEY

🔐 secretRESEND_API_KEY

🔐 secretPADDLE_API_KEY

configPADDLE_ENVIRONMENT

🔐 secretJWT_SIGNING_SECRET

configENVIRONMENT

configPUBLIC_BASE_URL

🔐 secretPOLAR_API_KEY

configPOLAR_ORG_ID

configPOLAR_PRODUCT_ID

🔐 secretLEMONSQUEEZY_API_KEY

configLEMONSQUEEZY_STORE_ID

🔐 secretCOINBASE_COMMERCE_API_KEY

configWISE_PAYMENT_LINK

configPAYPAL_PAYMENT_LINK

configBILLING_PROVIDER

🔐 secretBILLING_SIGNING_KEY

🔐 secretTELEGRAM_BOT_TOKEN

configTELEGRAM_CHAT_ID

configMCP_PUBLIC_URL

configRESEND_FROM_EMAIL

configCALCOM_USERNAME

🔐 secretSENDGRID_API_KEY

configSENDGRID_FROM_EMAIL

configTWILIO_MESSAGING_SERVICE_SID

configVAPI_PHONE_NUMBER_ID

configCOMPLIANCE_DEFAULT_JURISDICTION

🔐 secretADMIN_SECRET

🔐 secretPADDLE_WEBHOOK_SECRET

🔐 secretPOLAR_WEBHOOK_SECRET

configCELERY_BROKER_URL

configCELERY_RESULT_BACKEND

configGITHUB_PAT

configGMAIL_USER

🔐 secretGMAIL_APP_PASSWORD

configGMAIL_SENDER_NAME

configGITHUB_REPO

🔐 secretSMITHERY_API_KEY

configSMITHERY_NAMESPACE

configSMITHERY_SERVER_SLUG

configSUPABASE_URL

🔐 secretSUPABASE_SERVICE_KEY

🔐 secretSUPABASE_ANON_KEY

configSUPPLY_SEED_MODE

configSUPPORT_EMAIL

configPRIVACY_EMAIL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/basilalshukaili-agentbroker-1n2e95)](https://m8ven.ai/mcp/basilalshukaili-agentbroker-1n2e95)

commit: ab3f7a9b3ec2896334f23bd3a3c73d45407c0f99

code hash: c5bab8d293c3a5fa074c6a440a80611c0828bfd4d9544c7fa78cd332c7ec0a1c

verified: 7/29/2026, 8:59:27 AM

view raw JSON →