73
/ 100
12 days ago
glama
HestAI-MCP
Governance and session management layer for AI-assisted software development; enables agent binding, session tracking, and structured code review within the HestAI ecosystem.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: GITHUB_TOKEN, GH_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
GITHUB_BASE_REFconfig
PR_NUMBERconfig
PR_BASE_REFconfig
CACHED_GATE_DATAconfig
HESTAI_PROJECT_ROOT— Optional override: Control location via env var:config
HESTAI_AI_PROVIDERconfig
HESTAI_AI_MODELconfig
HESTAI_AI_MODEL_ANALYSISconfig
HESTAI_AI_MODEL_CRITICALconfig
CLAUDE_TRANSCRIPT_DIR🔐 secret
GITHUB_TOKEN🔐 secret
GH_TOKEN// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/elevanaltd-hestai-mcp-jkos0a)commit: fd67ef2988e7675f1dfa7b5c83bb43775aba377f
code hash: 75af3abb045a6344a4074e9d320356d4465894bb12f461ec960dd17373eeef8f
verified: 6/24/2026, 9:53:18 AM