Back to MCP Trust Indexm8ven
74
/ 100
18 days ago
glama

lotero-mcp

Provably fair on-chain slot machine: x402 spins in USDC on Base, Chainlink VRF results, winnings claimed to the human's wallet. Ships an enforced session spin limit as a responsible-gambling guardrail.

→ csacanam/lotero-core· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 12 credentials: ACP_BUYER_WHITELISTED_WALLET_PRIVATE_KEY, ACP_SELLER_WHITELISTED_WALLET_PRIVATE_KEY, ACP_WHITELISTED_WALLET_PRIVATE_KEY, ALCHEMY_API_KEY, CDP_API_KEY_SECRET, DEPLOYER_PRIVATE_KEY, ETHERSCAN_API_KEY, EXECUTOR_PRIVATE_KEY, LOTERO_WALLET_PRIVATE_KEY, NEXT_PUBLIC_ALCHEMY_API_KEY, PAYER_PRIVATE_KEY, TELEGRAM_BOT_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configACP_BUYER_AGENT_WALLET_ADDRESS
configACP_BUYER_DEBUG
configACP_BUYER_ENTITY_ID
🔐 secretACP_BUYER_WHITELISTED_WALLET_PRIVATE_KEY
configACP_SELLER_AGENT_WALLET_ADDRESS
configACP_SELLER_ENTITY_ID
🔐 secretACP_SELLER_WHITELISTED_WALLET_PRIVATE_KEY
configACP_TARGET_AGENT_KEYWORD
🔐 secretACP_WHITELISTED_WALLET_PRIVATE_KEY
🔐 secretALCHEMY_API_KEY
configBASE_RPC
configBASE_RPC_COOLDOWN_MS
configBASE_RPC_MAX_CONCURRENT
configBASE_RPC_MIN_GAP_MS
configCDP_API_KEY_ID
🔐 secretCDP_API_KEY_SECRET
configCRON_STATUS_AGENT_WALLET
configCRON_STATUS_REPORT
🔐 secretDEPLOYER_PRIVATE_KEY
🔐 secretETHERSCAN_API_KEY
🔐 secretEXECUTOR_PRIVATE_KEY
configFACILITATOR_URL
configGAS_MAX_FEE_GWEI
configGAS_MAX_PRIORITY_FEE_GWEI
configLOTERO_API_BASE
configLOTERO_MAX_SPINS_PER_SESSION
configLOTERO_PLAYER_ADDRESS
🔐 secretLOTERO_WALLET_PRIVATE_KEY
configMAINNET_FORKING_ENABLED
configMIN_SUBSCRIPTION_LINK_JUELS
configNEXT_PUBLIC_AGENT_URL
🔐 secretNEXT_PUBLIC_ALCHEMY_API_KEY
configNEXT_PUBLIC_APP_URL
configNEXT_PUBLIC_IGNORE_BUILD_ERROR
configNEXT_PUBLIC_WALLET_CONNECT_PROJECT_ID
🔐 secretPAYER_PRIVATE_KEY
configPAY_TO
configPORT
configRATE_LIMIT_MAX
configRATE_LIMIT_NO_PAYMENT_MAX
configRATE_LIMIT_WINDOW_MS
configSLOT_MACHINE_ADDRESS
🔐 secretTELEGRAM_BOT_TOKEN
configTELEGRAM_CHAT_ID
configVRF_COORDINATOR
configVRF_MIN_NATIVE_ETH
configVRF_SUBSCRIPTION_ID
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/csacanam-lotero-core-67b33p)](https://m8ven.ai/mcp/csacanam-lotero-core-67b33p)
commit: 4a55d7aec3871e45f40bd7431556b0ccbbfdfa10
code hash: 8dbd09826800868e33c81f156d84cd2b3fa3601ff59b0c162a9e40f8d44284e5
verified: 7/13/2026, 9:45:52 AM
view raw JSON →