32
grade F
9 days ago
glama
omnivox-mcp
MCP server for the Omnivox platform used by Quebec CEGEPs. Enables AI agents to access course schedules, grades, MIO messages, evaluations, and documents from Omnivox-based institutions.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Tool annotations don’t match behaviour
3 read-only tools perform write/delete/exec — get-assignment-file-link (line 69: fs.mkdirSync(downloadsDir, { recursive: true })); get-document-link (line 54: fs.mkdirSync(downloadsDir, { recursive: true })); get-mio-attachment-link (line 49: fs.mkdirSync(downloadsDir, { recursive: true }))
⚠️
Tool descriptions don’t match what handlers do
3 tools describe read intent but their handlers mutate — get-assignment-file-link (line 69: fs.mkdirSync(downloadsDir, { recursive: true })); get-document-link (line 54: fs.mkdirSync(downloadsDir, { recursive: true })); get-mio-attachment-link (line 49: fs.mkdirSync(downloadsDir, { recursive: true }))
⚠️
Known vulnerabilities in dependencies: 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
MCP_SERVER_URL— (none) Optional. Public base URL that enables download link generation (get-document-link / get-assignment-file-link). Set to your public domain (e.g. https://omnivox.example.com).config
OMNIVOX_DATA_DIR— ~/.omnivox Data directory for config, cookies, browser profile, and access keyconfig
PORT— 3000 Server port// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/beat-yt-omnivox-mcp-dz55xq)commit: e6d4e6f068666624cdf55b2f3cccb1fcb0fb3555
code hash: 56b4abf565fd30acabcb6b72f6d4853dab04ae10c0268c6c41dd2ab4af17ef49
verified: 4/11/2026, 2:34:45 PM