A sandboxed MCP server for agents that provides file read/edit, code intelligence, search, allowlisted command execution, package lookups, persistent memory, and VPS channel clients, all confined to C:\Work.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
process.env. You'll be asked to provide them before it can run.MCP_CF_CONFIGMCP_CF_PROTECTED— Override the protected-CF-host denylist (delete/remove of these needs force=true).MCP_WORKSPACE_ROOT— Where clone_repo/indexes live (default workspaces/).MCP_EXEC_ALLOWLIST— Comma/space-separated exec allowlist override (e.g. "git" drops interpreters). Default: git/node/npm/python/pytest/...MCP_MEMORY_DB— SQLite memory path (default data/memory.db).MCP_PUBLIC_HOST— Public host for the DNS-rebinding allowlist (default tiny-py-mcp.romionologic.dev).MCP_OAUTH_DB— OAuth store path (default data/oauth.db).MCP_OVH_CONFIGMCP_AUTH_MODE— bearer (default) or oauth. Selects HTTP auth.MCP_OAUTH_OPERATOR_SECRET— OAuth mode: the secret you type on the authorization page (the human gate). Required for oauth mode.MCP_OAUTH_ISSUER— OAuth mode: public issuer URL (default https://<MCP_PUBLIC_HOST>).MCP_AUTH_TOKEN— The HTTP transport refuses to start without (fail-closed),MCP_PROFILESMCP_AUTH_DISABLE— dev you may set =1 — never on port 8765 while the tunnel runs.MCP_ALLOW_QUERY_TOKENMCP_RATE_LIMIT_PER_MIN— Per-IP request cap (0 = off, default). Anti-runaway; set generous to not break connector bursts.MCP_AUDIT_LOG— Audit JSONL path (default logs/.tinypymcp-audit.jsonl).MCP_ALLOWED_ROOTMCP_VPS_CONFIG— VPS-channel creds JSON (default ~/.romion/vps-channel.json, kept OUTSIDE C:\Work).[](https://m8ven.ai/mcp/blackstar1979-tinypymcp-ezhtf5)