grade D

4 days ago

npm

contextstream/mcp-server

ContextStream MCP server - v0.4.x with consolidated domain tools (~11 tools, ~75% token reduction). Code context, memory, search, and AI tools.

→ contextstream/mcp-server· npm: @contextstream/mcp-server· listed on npm

Install from

npm Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: CONTEXTSTREAM_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configCODEX_CLI

configCODEX_HOME

configCONTEXTSTREAM_ALLOW_HEADER_AUTH

🔐 secretCONTEXTSTREAM_API_KEY— claude mcp update contextstream -e CONTEXTSTREAM_API_URL=https://api.contextstream.io -e =your_key

configCONTEXTSTREAM_API_URL— claude mcp update contextstream -e =https://api.contextstream.io -e CONTEXTSTREAM_API_KEY=your_key

configCONTEXTSTREAM_AUTO_RULES

configCONTEXTSTREAM_AUTO_UPDATE

configCONTEXTSTREAM_BASH_HOOK_ENABLED

configCONTEXTSTREAM_CHECKPOINT_ENABLED

configCONTEXTSTREAM_CONTEXT_PACK

configCONTEXTSTREAM_CONTEXT_PACK_ENABLED

configCONTEXTSTREAM_ENABLE_PROMPTS

configCONTEXTSTREAM_FAILURE_AUTO_LESSON

configCONTEXTSTREAM_HOOK_ENABLED

configCONTEXTSTREAM_JWT

configCONTEXTSTREAM_LOG_LEVEL

configCONTEXTSTREAM_MCP_HTTP_URL

configCONTEXTSTREAM_MEDIA_HOOK_ENABLED

configCONTEXTSTREAM_POSTCOMPACT_ENABLED

configCONTEXTSTREAM_POSTWRITE_ENABLED

configCONTEXTSTREAM_PRECOMPACT_AUTO_SAVE

configCONTEXTSTREAM_PRECOMPACT_ENABLED

configCONTEXTSTREAM_PROJECT_ID

configCONTEXTSTREAM_READ_HOOK_ENABLED

configCONTEXTSTREAM_REMINDER_ENABLED

configCONTEXTSTREAM_SAVE_INTENT_ENABLED

configCONTEXTSTREAM_SESSION_END_ENABLED

configCONTEXTSTREAM_SESSION_END_SAVE_TRANSCRIPT

configCONTEXTSTREAM_SESSION_INIT_ENABLED

configCONTEXTSTREAM_SHOW_TIMING

configCONTEXTSTREAM_STOP_ENABLED

configCONTEXTSTREAM_SUBAGENT_CONTEXT_ENABLED

configCONTEXTSTREAM_TASK_COMPLETED_REQUIRE_SUBJECT

configCONTEXTSTREAM_TASK_HOOK_ENABLED

configCONTEXTSTREAM_TEAMMATE_IDLE_REDIRECT

configCONTEXTSTREAM_TOOL_SURFACE_PROFILE

configCONTEXTSTREAM_UPGRADE_URL

configCONTEXTSTREAM_USER_AGENT

configCONTEXTSTREAM_VSCODE_MCP_MODE— Force local VS Code/Copilot setup with =local.

configCONTEXTSTREAM_WEB_HOOK_ENABLED

configCONTEXTSTREAM_WORKSPACE_ID

configHOOK_EVENT_NAME

configMCP_CONTEXT_SMART_TIMEOUT_SECS

configMCP_HTTP_HOST

configMCP_HTTP_JSON_RESPONSE

configMCP_HTTP_PATH

configMCP_HTTP_PORT

configMCP_HTTP_REQUIRE_AUTH

configMCP_TEST_PORT

configPROJECT_DIR

configProgramFiles

configProgramFiles(x86)

configVSCODE_WORKSPACE_FOLDER

configWORKSPACE_FOLDER

configXDG_CONFIG_HOME

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/contextstream-mcp-server-3yrrye)](https://m8ven.ai/mcp/contextstream-mcp-server-3yrrye)

commit: 7427adc42b33218be544c74c3f0ee7df31ff9f72

code hash: 0eae26d8667cd8dce0a0173e1944d75ea075661c4c3baf1bfda19362614a4ca0

verified: 4/18/2026, 4:19:49 PM

view raw JSON →