grade C

3 days ago

pulsemcp

AGENTS.md

Provide agents with a virtualized AGENTS.md and Kanban system. Can also spawn subagents for solving focused tasks.

→ benhaotang/mcp-http-agent-md · listed on pulsemcp

Install from

PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 8 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 5 credentials: AI_API_KEY, LOCAL_OCR_API_KEY, MAIN_API_KEY, MCP_TEST_API_KEY, MISTRAL_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretAI_API_KEY— ... # required when enabled

configAI_API_TYPE— google # google openai groq compat mcp

configAI_ATTACHMENT_TEXT_LIMIT— 120000 # optional; -1 keeps full extracted text

configAI_BASE_ENDPOINT— mcp (OpenAI‑compatible + MCP tools): use and AI_MODEL; configure MCP servers in subagent_config.json. Requires the endpoint and model combo to support function calling

configAI_MODEL— "gemini-2.5-pro" # optional; default depends on provider

configAI_TIMEOUT— 120 # optional

configBASE_PATH— Server defaults: HOST=localhost, PORT=3000, =/mcp.

configDATABASE_PATH

configHOST— Server defaults: =localhost, PORT=3000, BASE_PATH=/mcp.

🔐 secretLOCAL_OCR_API_KEY

configLOCAL_OCR_MODEL

configLOCAL_OCR_MODEL_ENDPOINT

🔐 secretMAIN_API_KEY— e =change-me \

configMCP_HOST

configMCP_PORT

configMCP_SKIP_SERVERS

🔐 secretMCP_TEST_API_KEY

configMCP_TEST_BASE_URL

configMCP_TEST_MODEL

configMCP_TEST_TIMEOUT

configMISTRAL_AI_API

🔐 secretMISTRAL_API_KEY

configPORT— Server defaults: HOST=localhost, =3000, BASE_PATH=/mcp.

configTEST_PORT

configTEST_SUBAGENT_PORT

configUSE_EXTERNAL_AI— Add -e AI_API_KEY=xxx -e =true for using subagents.

configUSE_LOCAL_AI_FOR_DOC_UNDERSTANDING— PDF uploads enqueue OCR automatically when either Mistral (MISTRAL_AI_API/MISTRAL_API_KEY) or the local model (=true) is configured. Upload responses are immediate; processing runs in the background.

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/benhaotang-mcp-http-agent-md-jggz47)](https://m8ven.ai/mcp/benhaotang-mcp-http-agent-md-jggz47)

commit: 3ddea04150ab14f45045909f3be5cf68190fa3bb

code hash: d394af619ccaddad955cff06f697517a815b21dab295d31002fea956904cbbe8

verified: 4/18/2026, 3:46:14 PM

view raw JSON →