/ 100

11 days ago

glama

TeamMCP

TeamMCP is an MCP-native collaboration server that enables AI agents and humans to communicate through shared channels, direct messages, and integrated task management. It provides a persistent layer for real-time collaboration with full-text search and a centralized web dashboard.

→ cookjohn/teammcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

7 flows detected: TEAMMCP_KEY. We can’t prove the destination matches the brand the credential belongs to.

⚠️

Known vulnerabilities in dependencies: 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 4 credentials: MEMORY_LLM_KEY, TEAMMCP_INTERNAL_SECRET, TEAMMCP_KEY, TEAMMCP_REGISTER_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAGENTS_BASE_DIR— Yes — Root path for Agent working directories; start_agent/stop_agent depend on this

configAGENT_NAME— "": "{agent_name}",

configAUTH_MONITOR_CANARY

configAUTH_MONITOR_FILE_CAP

configAUTH_MONITOR_SCAN_DEPTH

configCODEX_EXE

configCONTEXT_TOKEN_PATH

configCRED_PROBE_INTERVAL_MIN

configFALLBACK_FAILED_RECOVERY_MS

configGATE2_ENABLED

configMCP_HTTP_PORT

configMEMORY_ENGINE

configMEMORY_INTERNALIZE

🔐 secretMEMORY_LLM_KEY

configPREFLIGHT_DB_MAX_BYTES

configPROGRAMDATA

configPROGRAMFILES

configRETENTION_SWEEP

configRETRY_SIGNOFF

configSESSION_IDLE_MS

configSESSION_REVIEW_MAX

configSYSTEMROOT

configTEAMMCP_AGENTS_DIR

configTEAMMCP_AUTO_RESTART— Agents offline for more than 30 seconds can be auto-restarted (enable via =1, disabled by default). Intentionally stopped Agents do not trigger false alarms.

configTEAMMCP_BATCH_ENABLED

configTEAMMCP_BATCH_WINDOW_MS

configTEAMMCP_BIND_HOST

configTEAMMCP_CLAUDE_CMD

configTEAMMCP_CMD_ALLOWLIST_EXTRA

configTEAMMCP_DAEMON_DEV

configTEAMMCP_DEV

configTEAMMCP_ENV

configTEAMMCP_HOME— Data → /home/teammcp/teammcp-data for the service

🔐 secretTEAMMCP_INTERNAL_SECRET

🔐 secretTEAMMCP_KEY— "": "{agent_token}",

configTEAMMCP_NOW_TTL_MS

configTEAMMCP_PORT— No 3100 Server listening port

configTEAMMCP_PTY_DAEMON

🔐 secretTEAMMCP_REGISTER_SECRET— Registration Control: Optional registration secret ()

configTEAMMCP_URL— "": "http://localhost:3100"

configTEAM_IDLE_WARN_HOURS

configWATCHDOG_DISABLED

configWECHAT_TOKEN_PATH

configWINDIR

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/cookjohn-teammcp-1wdqyy)](https://m8ven.ai/mcp/cookjohn-teammcp-1wdqyy)

commit: aa9bcf2161e8a7a87101822f844fe2544790afb8

code hash: 27624baa179126d54c3ce219971edddde209e971d5d2be8dbff408986d411ca3

verified: 6/11/2026, 11:29:06 AM

view raw JSON →