Gemini Agent MCP Server

Provides tools for managing todo lists, checking weather, and accessing user information through the Model Context Protocol. It supports local execution and remote deployment as a web-based MCP gateway integrated with Gemini.

→ bmn789/mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

// known CVEs in dependencies4 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

low@astrojs/vercel@9.0.4GHSA-mr6q-rp88-fx84

Astro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path`

lowastro@5.17.1GHSA-g735-7g2w-hh3f

Astro: Remote allowlist bypass via unanchored matchPathname wildcard

lowastro@5.17.1GHSA-j687-52p2-xcff

Astro: XSS in define:vars via incomplete </script> tag sanitization

lowastro@5.17.1GHSA-xr5h-phrj-8vxv

Astro: Server island encrypted parameters vulnerable to cross-component replay

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/bmn789-mcp-1v1nyz)](https://m8ven.ai/mcp/bmn789-mcp-1v1nyz)

commit: fdd4072df6afa5c344d6f04e80a4c0dc8c9d0eb5

code hash: 51c7491f081bd776039d7c2399bdf2522a6f9cf405feb37009ca017bbde1fdf1

verified: 6/14/2026, 10:12:37 AM

view raw JSON →