seiche (beepboop2025/seiche) is an MCP server listed on the M8ven Trust Index. It scores 45 out of 100, grade D. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
D
Warning
45/100

seiche

Open-source money-market and capital-transmission terminal for US dollar funding stress, with public world-market and China macro context, API and MCP.

→ beepboop2025/seiche· listed on github_repo_search

Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

beepboop2025

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
🚨
Secret credentials may flow to a network call
12 flows detected: SEICHE_BOT_TOKEN, SEICHE_LLM_API_KEY, SEICHE_TELEGRAM_BOT_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
🚨
Reads files from sensitive locations
Touches: /etc/seiche/palimpsest-china.env, /etc/seiche/storage-volume.env, /etc/seiche/storage-volume.env
🔐
You'll be asked for 10 credentials: SEICHE_BOT_TOKEN, SEICHE_AUTH_SECRET, SEICHE_LLM_API_KEY, SEICHE_TELEGRAM_BOT_TOKEN, SEICHE_RAILWAY_EDGE_TOKEN, EDITORIAL_LLM_API_KEY, SEICHE_EDITORIAL_LLM_API_KEY, SEICHE_SMTP_PASS, GH_TOKEN, GITHUB_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configSEICHE_MCP_PUBLIC
configSEICHE_ENV
configSEICHE_RAILWAY_STATEFUL_MODE
configSEICHE_AGENT_ROOM_EXPECTED_KEY_ID
configSEICHE_AGENT_ROOM_DB_PATH
🔐 secretSEICHE_BOT_TOKEN
configRISSAGA_OWNER_CHAT
configRISSAGA_CHANNEL_MODE
configRISSAGA_NEWS_CHANNEL_ID
configRISSAGA_OUTBOX_TTL_H
configRISSAGA_STATE
configSEICHE_API
configLIQUILENS_API
configUNDERTOW_BASE
configRISSAGA_UA
configRISSAGA_MARK_BAR
configRISSAGA_CHANNEL_BAR
configRISSAGA_ROUTE_BAR
configRISSAGA_LATEST
configUNDERTOW_API
configSEICHE_BOT_STATE
configLAB_CHANNEL_ID
🔐 secretSEICHE_AUTH_SECRET
configSEICHE_ASOF_AUTH
configSEICHE_LLM_BASE_URL; with neither configured it returns the context pack itself.
🔐 secretSEICHE_LLM_API_KEY
configSEICHE_LLM_MODEL
🔐 secretSEICHE_TELEGRAM_BOT_TOKEN
configSEICHE_TELEGRAM_CHAT_ID
configSEICHE_BG_REFRESH
configSEICHE_RAILWAY_CONTROL_ENABLED
🔐 secretSEICHE_RAILWAY_EDGE_TOKEN
configSEICHE_RELEASE_SHA
configSEICHE_BOARD_AUTH
configSEICHE_RAILWAY_APPLICATION_REQUEST_ID
🔐 secretEDITORIAL_LLM_API_KEY
🔐 secretSEICHE_EDITORIAL_LLM_API_KEY
configEDITORIAL_LLM_BASE_URL
configSEICHE_EDITORIAL_LLM_BASE_URL
configEDITORIAL_LLM_MODEL
configSEICHE_EDITORIAL_LLM_MODEL
configEDITORIAL_REVIEW_MODEL
configSEICHE_EDITORIAL_REVIEW_MODEL
configEDITORIAL_REASONING_EFFORT
configSEICHE_ATTEST
configSEICHE_PREBUILT_HANDOFF_ID
configSEICHE_PIT_LEDGER_DIR
configSEICHE_ATTEST_DIR
configSEICHE_ATTEST_TRUSTED_PUBLIC_KEYS
configSEICHE_ATTEST_OTS
configSEICHE_BITCOIN_RPC_URL
configSEICHE_NBS_ROOT
configSEICHE_NBS_PUBLIC_DIR
configSEICHE_VALIDATION_DIR
configSEICHE_RUNTIME_DATA_DIR
configSEICHE_DISPATCH_TELEGRAM
configSEICHE_EVENT_FLEET_CACHE_TTL_S
configNOTIFY_SOCKET
configSEICHE_SMTP_HOST
configSEICHE_SMTP_USER
🔐 secretSEICHE_SMTP_PASS
configSEICHE_SMTP_PORT
configSEICHE_SMTP_FROM
configSEICHE_BACKFILL_STATE_DIR
🔐 secretGH_TOKEN
🔐 secretGITHUB_TOKEN
configSEICHE_PUBLISHER
configSEICHE_DATABASE_URL
configSEICHE_RAILWAY_AUTHORITY_FENCE_SHA256
configSEICHE_RAILWAY_MIGRATION_MAX_BYTES
configSEICHE_LIST_ENDPOINT
configSEICHE_LIST_ID
configWAKE_PACK_PATH
configFLEET_OWNER_CHAT
configFLEET_WATCHDOG_CONFIG
configGDELT_GATE_UPSTREAM
configGDELT_GATE_PORT
configGDELT_GATE_SPACING_S
configGDELT_GATE_MAX_WAIT_S
configGDELT_GATE_TTL_TIMELINE_S
configGDELT_GATE_TTL_ARTLIST_S
configGDELT_GATE_COOLDOWN_S
configGDELT_GATE_CACHE_MAX
configGITHUB_EVENT_NAME
configCONFIRMATION
configSEICHE_GATE_REQUEST
configSEICHE_GATE_ARCHIVE
configSEICHE_SNAPSHOT_REQUEST
configSEICHE_SNAPSHOT_ARCHIVE
configSEICHE_SNAPSHOT_SOURCE_ROOT
configSEICHE_SNAPSHOT_RESULT
configUPLOAD_ROOT
configRESUME_REQUEST
configFENCE_PATH
configRESUME_RUN_ID
configGITHUB_WORKSPACE
configGITHUB_SHA
configSOURCE_SHA
configRESUME_DEPLOYMENT_ID
configGITHUB_OUTPUT
Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deployDATABASE_URL
deployPORT
// quality suggestions

No access to sensitive paths

Reads sensitive paths: /etc/seiche/palimpsest-china.env, /etc/seiche/storage-volume.env, /etc/seiche/storage-volume.env

Remove reads of sensitive system paths. If you genuinely need them, document why in the README.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/beepboop2025/seiche?variant=verified)](https://m8ven.ai/mcp/beepboop2025/seiche)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: dbeb5589740f34a6951a1849c11566c6e8035f60
code hash: a3277cb08190675da09a2301a38fbf3c56fc518ea330909749a6027b93c26d73
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client