Back to MCP Trust Indexm8ven
39
/ 100
1 month ago
github_topic

open-multi-agent-kit

Evidence-gated runner for Codex, Claude Code, OpenCode, and local coding agents. Routes tasks into scoped DAG lanes with replayable artifacts.

→ dmae97/open-multi-agent-kit· listed on github_topic
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

GitHub

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// known CVEs in dependencies1 high2 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highyaml@2.0.0GHSA-f9xv-q969-pqx4

Uncaught Exception in yaml

lowyaml@2.0.0GHSA-48c2-rrv3-qjmp

yaml is vulnerable to Stack Overflow via deeply nested YAML collections

lowzod@3.0.0GHSA-m95q-7qp3-xv42

Zod denial of service vulnerability

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAPPVEYOR
configBUILD_ID
configBUILD_NUMBER
configCOLORTERM
configCOMMANDCODE_BIN
configCONTINUOUS_INTEGRATION
configFORCE_COLOR
configGITHUB_ACTIONS
configGITHUB_STEP_SUMMARY
configGITLAB_CI
configJENKINS_URL
configKIMI_CODE_BASE_URL
configKIMI_SESSION_ID
configNO_COLOR
configOMK_ALLOW_HOME_PROJECT_ROOT
configOMK_ANIMATION
configOMK_AUTHORITY_PROVIDER
configOMK_CHAT_NO_BANNER
configOMK_CHAT_RESPECT_PROJECT_ROOT_ENV
configOMK_CHAT_UI
configOMK_CLI_SUDO_REQUEST
configOMK_CLI_V2
configOMK_DEBUG
configOMK_DEFAULT_PROJECT_ROOT
configOMK_DEFAULT_PROVIDER
configOMK_ENTRY_SURFACE
configOMK_EXECUTION_SMOKE_KEEP
configOMK_EXECUTION_SMOKE_SOURCE
configOMK_FILE_SIZE_BASE
configOMK_HOOKS_SCOPE
configOMK_IMAGE_PASTE_MODE
configOMK_KIMI_MAX_AUTO_ENTER
configOMK_KIMI_STATUS_GAUGES
configOMK_KIMI_STATUS_USAGE
configOMK_MAX_NEW_FILE_LOC
configOMK_MAX_STDOUT_LINES
configOMK_MCP_SCOPE
configOMK_MESSAGES
configOMK_MODE
configOMK_MODEL
configOMK_NESTED_LEVEL
configOMK_OUTPUT
configOMK_PACKAGE_AUDIT_TIMEOUT_MS
configOMK_PACK_DRY_TIMEOUT_MS
configOMK_PACK_SMOKE_TIMEOUT_MS
configOMK_PLAYWRIGHT_MODULE
configOMK_PRETTY
configOMK_PROJECT_ROOT
configOMK_PROVIDER
configOMK_REASONING_NLP
configOMK_REASONING_SUMMARY
configOMK_RELEASE_CI
configOMK_RELEASE_DOCS
configOMK_RELEASE_INSTALL
configOMK_RELEASE_PROOF
configOMK_RELEASE_PROVIDER
configOMK_RELEASE_REGRESSION
configOMK_RELEASE_SCHEMA
configOMK_RELEASE_SEMVER
configOMK_RUN_ID
configOMK_SHOW_THINK
configOMK_SIGIL
configOMK_SKILLS_SCOPE
configOMK_SKIP_DIST_FRESHNESS
configOMK_SMOKE_CMD_TIMEOUT_MS
configOMK_SMOKE_TMPDIR
configOMK_STREAM
configOMK_SUDO
configOMK_THEME
configOMK_THEME_MODE
configOMK_TRACE
configOMK_UI
configOMK_UNICODE
configOMK_WIRE_TIMEOUT_MS
configOMK_WORKERS
configOPENCODE_BIN
configTERM
configTERMINAL_EMULATOR
configTRAVIS
configWT_SESSION
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/dmae97-open-multi-agent-kit-hre69q)](https://m8ven.ai/mcp/dmae97-open-multi-agent-kit-hre69q)
commit: b29c2df3272d6d3f045468416d7122c9c275d7bb
code hash: 876ca21d09b93932f28281cba77d9f42aee59f1241e8ea5b6daae3169261480d
verified: 6/14/2026, 11:02:53 AM
view raw JSON →