mall-ai-after-sales-platform (Eleven617/mall-ai-after-sales-platform) is an MCP server listed on the M8ven Trust Index. It scores 60 out of 100, grade C. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
C
Caution
60/100

mall-ai-after-sales-platform

Trusted e-commerce AI after-sales platform — RAG, controlled tools, human confirmation, Java-authoritative writes, and observable workflows.

→ Eleven617/mall-ai-after-sales-platform· listed on github_repo_search

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

Eleven617

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: MALL_SERVICE_CASE_LIVE_PASSWORD. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 6 credentials: MALL_LIVE_DEMO_PASSWORD, DEEPSEEK_API_KEY, MALL_FIELD_FIXTURE_PASSWORD, AI_AFTER_SALES_SERVICE_KEY, MALL_SERVICE_CASE_LIVE_PASSWORD, MALL_SERVICE_CASE_PROCESSOR_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configMALL_DEMO_WEB_BASE_URL
configMALL_MCP_BOOTSTRAP_LOCAL_DEMO
🔐 secretMALL_LIVE_DEMO_PASSWORD
configMALL_JAVA_BASE_URL
configMALL_LIVE_DEMO_PRODUCT_ID
🔐 secretDEEPSEEK_API_KEY
configDEEPSEEK_MODEL
configDEEPSEEK_TIMEOUT_SECONDS
configLOCAL_EMBEDDING_DIMENSION
configLOCAL_EMBEDDING_THREADS
configMALL_API_BASE_URL
configMALL_API_TIMEOUT_SECONDS
configMALL_ADMIN_API_TIMEOUT_SECONDS
configCONVERSATION_STORE_BACKEND
configREDIS_KEY_PREFIX
configCONVERSATION_TTL_SECONDS
configCONVERSATION_RECENT_MESSAGE_LIMIT
configCONVERSATION_CONTEXT_TOKEN_BUDGET
configCONVERSATION_SUMMARY_MAX_CHARS
configDIAGNOSIS_CHECKPOINT_TTL_SECONDS
configDIAGNOSIS_CHECKPOINT_LOCK_SECONDS
configDIAGNOSIS_CHECKPOINT_MAX_BYTES
configRAG_TOP_K
configRAG_MAX_DISTANCE
configRAG_RETRIEVAL_MODE
configRAG_HYBRID_CANDIDATE_K
configRAG_BM25_MIN_SCORE
configRAG_RRF_K
configRAG_RERANKER_TOP_N
configRAG_RERANKER_THREADS
configRAG_ACTIVE_POLICY_VERSION
configRAG_POLICY_LANGUAGE
configRAG_POLICY_DOCUMENT_TYPE
configQUALITY_CHECKPOINT_MAX_CASES
configQUALITY_CHECKPOINT_MAX_TOTAL_SECONDS
configQUALITY_CHECKPOINT_LLM_TIMEOUT_SECONDS
configQUALITY_CHECKPOINT_LLM_MAX_ATTEMPTS
configRELIABILITY_BACKEND
configRELIABILITY_KEY_PREFIX
configRELIABILITY_CIRCUIT_FAILURE_THRESHOLD
configRELIABILITY_CIRCUIT_COOLDOWN_SECONDS
configAGENT_TASK_STORE_BACKEND
configAGENT_TASK_MONGO_DATABASE
configAGENT_TASK_TTL_SECONDS
configAGENT_TASK_EVENT_LIMIT
configEXECUTOR_MODEL
configCONTEXT_MODEL
configCRITIC_MODEL
configEXECUTOR_TIMEOUT_SECONDS
configCONTEXT_TIMEOUT_SECONDS
configCRITIC_TIMEOUT_SECONDS
configMALL_LIVE_DEMO_USER_A
configMALL_LIVE_DEMO_PHONE_A
configMALL_LIVE_DEMO_USER_B
configMALL_LIVE_DEMO_PHONE_B
configMALL_LIVE_DEMO_RESULT_FILE
configMALL_AI_BASE_URL
configMALL_TEST_USER_A
configMALL_TEST_PASSWORD_A
configMALL_TEST_ORDER_A
configMALL_TEST_USER_B
configMALL_TEST_PASSWORD_B
configMALL_TEST_ORDER_B
configMALL_FIELD_FIXTURE_FILE
🔐 secretMALL_FIELD_FIXTURE_PASSWORD
configMALL_ADMIN_BASE_URL
🔐 secretAI_AFTER_SALES_SERVICE_KEY
configMALL_BUILD21_BOOTSTRAP_LOCAL_DEMO
configMALL_FIELD_FAULT_COMPOSE_PROJECT
🔐 secretMALL_SERVICE_CASE_LIVE_PASSWORD
configMALL_SERVICE_CASE_LIVE_USER_A
configMALL_SERVICE_CASE_LIVE_USER_B
configMALL_SERVICE_CASE_PROCESSOR_USERNAME
🔐 secretMALL_SERVICE_CASE_PROCESSOR_PASSWORD
configMALL_SERVICE_CASE_LIVE_ORDER_A
configMALL_UNIFIED_BOOTSTRAP_LOCAL_DEMO
Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deployREDIS_URL
// quality suggestions

Tools detected

No tools extracted — insufficient content to verify at Tier 2

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 0 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/eleven617/mall-ai-after-sales-platform?variant=verified)](https://m8ven.ai/mcp/eleven617/mall-ai-after-sales-platform)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 49ef2e15e7affe8ad8d8024f31870878dd11c9e2
code hash: edd1c0ad58d65b88a21c8c57c64ffabe358b6e247c57865796bb679d697276f0
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client