SEIS (emirhankudun-ux/SEIS) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 26 tools. No publisher has claimed this listing.

C
Emerging
74/100

SEIS

AI-native Apple-first full-stack design and engineering ecosystem for agents, MCP, LLM workflows, governance, and open source platform development.

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

emirhankudun-ux

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// tools this server exposes26 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

i18n_status

Key-parity report for the 5-locale translations.json: per-locale key counts, keys missing from any locale, referenced-but-undefined keys, and empty values. Call this before and after any translation edit.

copy_dictionary_status

Key-parity report for the COPY and PROOF dictionaries inside script.js — the i18n layer index.html actually renders from via data-copy-key. Reports per-locale key counts, keys missing from a locale, empty values, and data-copy-key attributes with no dictionary entry. Distinct from i18n_status, which

i18n_get

Look up one translation key and return its value in every locale (tr/en/fr/it/de). Null marks a locale where the key is missing.

i18n_search

Search translation keys and values (case-insensitive substring) across all locales. Use to find the right key before editing copy.

i18n_add_key

Add a new translation key with a value for every locale. Writes translations.json. Fails if the key exists unless overwrite is true.

i18n_rename_key

Rename a translation key across ALL locales and rewrite every reference: data-i18n* attributes in index.html and getT() calls in script.js. Fails if the old key is missing anywhere or the new key already exists. Run web_contract_check + i18n_status afterwards.

seo_audit

Audit index.html for SEO/PWA requirements: title, meta description, canonical, Open Graph, Twitter card, hreflang alternates, JSON-LD, manifest, robots.txt, sitemap.xml.

web_contract_check

Verify every #id/.class selector referenced from script.js exists in index.html (or is created by the script). Catches markup rewrites that silently break site behaviour — run after ANY edit to index.html or script.js.

drawings_catalog

List drawing images under public/media/drawings with sizes, and cross-check that every image referenced from index.html exists on disk.

style_audit

Static CSS audit of style.css: FAILS when a var(--x) custom property is used but never defined (in CSS, inline HTML style, or JS setProperty). Also reports statically-unused CSS classes and unstyled HTML classes as informational.

site_config_get

Read site-config.json (contact endpoint + contact email used by the contact form).

i18n_unreferenced

List translation keys that exist in translations.json but are never referenced by a data-i18n attribute in index.html or a getT() call in script.js. Useful for cleaning up dead translation copy.

workspace_status

Summary of the monorepo workspace: lists all packages under packages/ with their name, version, and whether a package.json exists. Also reports the apps/ directory contents.

seis_plugin_integration

Read the single-public-plugin SEIS-Agent suite and canonical integration manifest for the embedded SEIS source-module inventory, non-destructive legacy personal aliases, embedded lanes, helper plugin universe, quality gates, and runtime/app integration surfaces.

seis_public_plugin_family

Read the one-public-SEIS-Agent distribution and lifecycle status for unified-suite availability, embedded module discovery, canonical alias resolution, SEIS AI connection, install/MCP smoke gates, release channel, support tiers, and approval boundaries.

seis_ai_core_provider_status

Read the SEIS AI Core provider registry for zero-key Local Demo, supervised Codex, optional server-only cloud providers, local-provider candidates, public provider states, and security invariants. Read-only; performs no live provider calls, credential validation, network checks, SSH, deployment, or

seis_ai_core_model_scaling_status

Read the SEIS AI Core model scaling hardware profile, parameter ladder, and model-scaling sub-agent council for the planned 20B target on 16GB+ RAM, compatibility profiles, benchmark manifest contract, memory budget contract, quantization lanes, local runtime candidates, future 70B ladder, 150B fron

seis_ai_core_version_status

Read the SEIS AI Core version registry for SEIS AI Core v0.1, SEIS Language v0.1, model-router, prompt-engine, agent-runtime, sub-agent lane bindings, truth boundaries, and five-year promotion gates. Read-only; never claims trained model ownership or live autonomous execution.

seis_ai_core_version_promotion_dry_run

Dry-run a SEIS AI Core version promotion gate against repository-local evidence for the embedded SEIS plugin lanes. Read-only; never approves a release, mutates files, calls providers, accesses credentials, deploys, or runs autonomous execution.

seis_ai_core_subagent_model

Read the SEIS AI Core bounded sub-agent operating model, five-year plan linkage, permission levels, lane quality gates, cadence, and current approval boundaries. Read-only; does not execute sub-agents or claim autonomous runtime.

seis_ai_core_subagent_dry_run

Evaluate one SEIS AI Core sub-agent dry-run fixture task against role, permission, approval, cancellation, tool, and path-scope rules. Read-only; returns a decision and never mutates files, queues, GitHub, cloud, SSH, providers, or credentials.

seis_ai_core_subagent_review_ledger

Read the SEIS AI Core five-year sub-agent quarterly review ledger. Read-only; shows current/planned quarters, evidence, approval boundaries, and next safe actions without mutating queues, files, GitHub, cloud, SSH, providers, or credentials.

a11y_check

Static accessibility audit of index.html: FAILS when an <img> is missing alt=, an interactive input/select/textarea has no associated label, or a <button> has no accessible name (text, aria-label, data-i18n, etc.). Advisory: positive tabindex values.

web_perf_audit

Static performance budget for apps/web: file sizes (HTML ≤ 100 KB, CSS ≤ 100 KB, JS ≤ 150 KB, total ≤ 300 KB), render-blocking <script src> in <head>, and images missing loading=lazy or width/height. Budget violations and blocking scripts FAIL the check; missing lazy/dimensions are advisory.

security_audit

Static security audit of index.html: FAILS on target="_blank" without rel="noopener noreferrer" (tab-napping), javascript: hrefs (XSS), and http:// src/href attributes (mixed content). Advisory: missing CSP meta tag and external resources without integrity=.

run_all_checks

Run the full audit suite (i18n, SEO, HTML/JS contract, drawings, CSS style, performance, accessibility, security) and return one aggregate report with a top-level ok flag.

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configSEIS_REPO_ROOT
configSEIS_WEB_ROOT
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

26/26 tools missing one or more hints — i18n_status (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); copy_dictionary_status (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); i18n_get (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +23 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Domain consistency

npm scope @seis doesn't match GitHub owner emirhankudun-ux

Use the same org name across GitHub, npm, and your homepage so users can verify the publisher.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/emirhankudun-ux/seis)](https://m8ven.ai/mcp/emirhankudun-ux/seis)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: a1e89b4e2fb828687d25f778a2d2e70b39003a54
code hash: f0f48fb6131c475b8b6d994e0dea7cc2ee7a207a6371c4f940827c50a40fbd08
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client