/ 100

1 month ago

mcp_so

Derisk

Item: Derisk
Rating: 10
Author: M8ven

AI-Native Risk Intelligence Systems, DeRisk——Your application system risk intelligent manager provides 7* 24-hour comprehensive and in-depth protection.

→ derisk-ai/derisk · listed on mcp_so

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

mcp.so

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Code appears obfuscated

109 files are unreadable to a human reviewer. Cannot audit what they do.

🚨

Hardcoded credentials detected

1 live-looking API key in source: 1 Google API key

🔐

You'll be asked for 15 credentials: OAUTH2_SESSION_SECRET, DERISK_API_KEY, PROXY_API_KEY, BARD_PROXY_API_KEY, bard_proxyllm_proxy_api_key, ELEVENLABS_API_KEY, AUTHORISE_COMMAND_KEY, EXIT_KEY, HUGGINGFACE_API_TOKEN, LOCAL_DB_PASSWORD, MILVUS_PASSWORD, ELASTICSEARCH_PASSWORD, OB_PASSWORD, KNOWLEDGE_SEARCH_MAX_TOKEN, ENCRYPT_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configOPENDERISK_INSTALL_DIR

configDERISK_CONFIG_FILE

configDERISK_WEB_PORT

configDERISK_WEB_HOST

🔐 secretOAUTH2_SESSION_SECRET

configAPI_ADDRESS

configDERISK_RUNTIME_LLM_MODEL

configLLM_MODEL

🔐 secretDERISK_API_KEY

configDERISK_WEBSERVER_PORT

configNUM_GPUS

configEXECUTE_LOCAL_COMMANDS

🔐 secretPROXY_API_KEY

🔐 secretBARD_PROXY_API_KEY

🔐 secretbard_proxyllm_proxy_api_key

configPROXY_SERVER_URL

🔐 secretELEVENLABS_API_KEY

configELEVENLABS_VOICE_1_ID

configELEVENLABS_VOICE_2_ID

configUSE_MAC_OS_TTS

🔐 secretAUTHORISE_COMMAND_KEY

🔐 secretEXIT_KEY

configIMAGE_SIZE

🔐 secretHUGGINGFACE_API_TOKEN

configIMAGE_PROVIDER

configMESSAGE_HISTORY_DIR

configNATIVE_SQL_CAN_RUN_DDL

configNATIVE_SQL_CAN_RUN_WRITE

configLOCAL_DB_HOST

configLOCAL_DB_PATH

configLOCAL_DB_TYPE

configLOCAL_DB_NAME

configLOCAL_DB_PORT

configLOCAL_DB_USER

🔐 secretLOCAL_DB_PASSWORD

configLOCAL_DB_POOL_SIZE

configLOCAL_DB_POOL_OVERFLOW

configLOCAL_DB_SSL_VERIFY

configCHAT_HISTORY_STORE_TYPE

configLLM_MODEL_PATH

configPROXYLLM_BACKEND

configLIMIT_MODEL_CONCURRENCY

configMAX_POSITION_EMBEDDINGS

configMODEL_PORT

configVECTOR_STORE_TYPE

configGRAPH_COMMUNITY_SUMMARY_ENABLED

configMILVUS_URL

configMILVUS_PORT

configMILVUS_USERNAME

🔐 secretMILVUS_PASSWORD

configELASTICSEARCH_URL

configELASTICSEARCH_PORT

configELASTICSEARCH_USERNAME

🔐 secretELASTICSEARCH_PASSWORD

configOB_HOST

configOB_PORT

configOB_USER

🔐 secretOB_PASSWORD

configOB_DATABASE

configOB_ENABLE_NORMALIZE_VECTOR

configQUANTIZE_QLORA

configQUANTIZE_8bit

configQUANTIZE_4bit

configload_8bit

configload_4bit

configEMBEDDING_MODEL

configMEMBEDDING_MODEL_MAX_SEQ_LEN

configRERANK_MODEL

configRERANK_MODEL_PATH

configRERANK_TOP_K

configKNOWLEDGE_CHUNK_SIZE

configKNOWLEDGE_CHUNK_OVERLAP

configKNOWLEDGE_SEARCH_TOP_SIZE

configKNOWLEDGE_GRAPH_SEARCH_TOP_SIZE

configKNOWLEDGE_MAX_CHUNKS_ONCE_LOAD

configKNOWLEDGE_MAX_THREADS

configKNOWLEDGE_SEARCH_RECALL_SCORE

🔐 secretKNOWLEDGE_SEARCH_MAX_TOKEN

configKNOWLEDGE_SEARCH_REWRITE

configKNOWLEDGE_CHAT_SHOW_RELATIONS

configSUMMARY_CONFIG

configMAX_GPU_MEMORY

configDERISK_LOG_LEVEL

configUSE_FASTCHAT

configMODEL_CACHE_ENABLE

configMODEL_CACHE_MAX_MEMORY_MB

configAPI_KEYS

🔐 secretENCRYPT_KEY

configDERISK_APP_SCENE_NON_STREAMING_RETRIES_BASE

configDERISK_APP_SCENE_NON_STREAMING_PARALLELISM_BASE

configFIN_REPORT_MODEL

configUSE_NEW_WEB_UI

configFILE_SERVER_HOST

configMULTI_INSTANCE

configSCHEDULER_ENABLED

configNOTE_BOOK_ENABLE

configNOTE_BOOK_ROOT

configMESSAGES_KEEP_START_ROUNDS

configMESSAGES_KEEP_END_ROUNDS

configSERVER_ENV

configapp_name

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/derisk-ai-derisk-fjb6gy)](https://m8ven.ai/mcp/derisk-ai-derisk-fjb6gy)

commit: 3194987c1f42c9227d21d4578ee3c98408908dfe

code hash: 1690dabe3bd4346edc208374a8a81991e66bab021dc92c0961540d22ea141a3a

verified: 6/16/2026, 1:16:19 PM

view raw JSON →