Back to MCP Trust Indexm8ven
39
/ 100
23 hours ago
npm

claudemesh-cli

Peer mesh for Claude Code sessions — CLI + MCP server.

→ alezmad/claudemesh· npm: claudemesh-cli· listed on npm
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

npmGlama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 4 credentials: BROKER_ENCRYPTION_KEY, POSTMARK_API_KEY, RESEND_API_KEY, TELEGRAM_BOT_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 medium1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

mediumturbo@2.6.3GHSA-hcf7-66rw-9f5r

Turbo: Login callback CSRF/session fixation

lowturbo@2.6.3GHSA-3qcw-2rhx-2726

Turbo: Unexpected local code execution during Yarn Berry detection

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAPP_URL
🔐 secretBROKER_ENCRYPTION_KEY
configBROKER_INVITE_V2_ENABLED
configBROKER_LEGACY_AUTH
configBROKER_PID
configBROKER_PUBLIC_URL
configBROKER_SKIP_MIGRATE
configBROKER_URL
configBROKER_WS_URL
configBUILDKITE
configCLAUDEMESH_API_URL
configCLAUDEMESH_APPROVAL_MODE
configCLAUDEMESH_APP_URL
configCLAUDEMESH_BROKER_URL
configCLAUDEMESH_CONFIG_DIR
configCLAUDEMESH_DAEMON_DIR
configCLAUDEMESH_DEBUG
configCLAUDEMESH_HOOK_DEBUG
configCLAUDEMESH_SERVICES_DIR
configCLAUDE_PROJECT_DIR
configCONTAINER
configDATABASE_URL
configDRAIN_MS
configEMAIL_FROM
configEXPECTED_MIGRATION
configGITHUB_ACTIONS
configGITLAB_CI
configGIT_SHA
configJENKINS_URL
configKUBERNETES_SERVICE_HOST
configMAX_MCP_OUTPUT_TOKENS
configMCP_TIMEOUT
configNO_COLOR
🔐 secretPOSTMARK_API_KEY
🔐 secretRESEND_API_KEY
configSHELL
🔐 secretTELEGRAM_BOT_TOKEN
configTELEGRAM_BOT_USERNAME
configTERM
configVITEST
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/claudemesh-cli-ddfxcw)](https://m8ven.ai/mcp/claudemesh-cli-ddfxcw)
commit: 213a6b37cc1739776d71887d67e60ee0fcf2652a
code hash: fe9dcefcf92f1a2481360757988fc9b3d646e52ad9f196724d425e90bf32d0d6
verified: 7/30/2026, 8:28:08 PM
view raw JSON →