/ 100

25 days ago

glama

Cernion Grid Intelligence

87+ specialized tools for German and European energy data. Direct AI access to Marktstammdatenregister (MaStR), ENTSO-E, Redispatch 2.0, and Grid Operations for utilities and datacenters.

→ energychain/cernion-energy-tools · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: CERNION_TOKEN, GEMINI_API_KEY, LLM_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies2 high3 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highxlsx@0.18.5GHSA-4r6h-8v6p-xvw6

Prototype Pollution in sheetJS

highxlsx@0.18.5GHSA-5pgg-2g8v-p4x9

SheetJS Regular Expression Denial of Service (ReDoS)

lownodemailer@8.0.7GHSA-268h-hp4c-crq3

Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection

lownodemailer@8.0.7GHSA-r7g4-qg5f-qqm2

Nodemailer: Improper TLS Certificate Validation in OAuth2 Token Fetch Enables Credential Interception

lownodemailer@8.0.7GHSA-wqvq-jvpq-h66f

Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess during message normalization

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAGENT_PERSONA_AUDIT_DB_PATH

configAGENT_PERSONA_AUDIT_RETENTION_DAYS

configAGENT_PERSONA_DB_PATH

configAGENT_RECEIPTS_DB_PATH

configAGNES_BOTTLENECK_DB_PATH

configALLOCATION_ENGINE_DB_PATH

configALTDATEN_ASSESSMENT_DB_PATH

configAPI_CORS_ORIGINS

configAPI_URL

configASYNC_POLLER_DEBUG

configASYNC_POLLER_LOG_MAX_CHARS

configAUTH_CLEANUP_INTERVAL_MS

configAUTH_DB_PATH

configAUTH_OIDC_AUTHORIZATION_ENDPOINT

configAUTH_OIDC_CLIENT_ID

configAUTH_OIDC_ISSUER

configAUTH_OIDC_REDIRECT_URI

configAUTH_OIDC_SCOPE

configAUTH_SAML_CALLBACK_URL

configAUTH_SAML_CERT

configAUTH_SAML_ENTRY_POINT

configAUTH_SAML_ISSUER

configAUTH_SESSION_TTL_SECONDS

configAUTOMATISIERUNGSRADAR_DB_PATH

configBACKUP_DIR

configBESS_SCREENING_DB_PATH

configBLINDFLUG_RADAR_DB_PATH

configBLUEPRINT_MGMT_ALLOW_WARN_PROMOTE

configBLUEPRINT_MGMT_DB_PATH

configCACHER

configCAPEX_PRIORITIZATION_DB_PATH

🔐 secretCERNION_TOKEN— cp .env.example .env # + LLM_PROVIDER/LLM_MODEL konfigurieren

configCLARIFICATION_POLICY_DB_PATH

configCLASSIFIER_LLM_FALLBACK_ENABLED

configCOMPANY_DB_PATH

configCONNECTION_REJECTION_EVIDENCE_DB_PATH

configCOOKBOOK_RELATED_LIMIT

configCOOKBOOK_RELATED_MIN_SCORE

configCOOKBOOK_VALIDATION_INTERVAL_MS

configDATAPOINTS_DB_PATH

configDATAPOINT_DB_PATH

configDATAPOINT_MAX_CONCURRENT_REFRESHES

configDATAPOINT_SCHEDULER_ENABLED

configDATASOURCE_CONNECTOR_PLUGINS_DIR

configDATASOURCE_CUSTOM_PLUGINS_DIR

configDATASOURCE_DEFAULT_PRIVACY_CONTEXT

configDATASOURCE_MAX_INFER_SAMPLE_ROWS

configDATASOURCE_REGISTRY_FILE

configDATASOURCE_REGISTRY_PERSISTENCE_ENABLED

configDECISION_FRAME_DB_PATH

configDOMAIN_ROUTES_DB_PATH

configDOMAIN_ROUTES_RUNTIME_CAPABILITIES

configE2E_CONNECTION_CHECK_DB_PATH

configEDM_DB_PATH

configEDM_RETENTION_DAYS

configEDM_RETENTION_POLICY

configENERGY_SHARING_DB_PATH

configEOG_CALCULATOR_DB_PATH

configEOG_CALIBRATION_TOLERANCE_ABS

configEOG_CALIBRATION_TOLERANCE_REL

configEVIDENCE_REQUIREMENT_DB_PATH

configEVIDENCE_REVALIDATION_DB_PATH

configFILE_INGEST_MONITOR_DB_PATH

configFINANCE_AGENT_DB_PATH

configFINANCE_AGENT_DEFAULT_COLLECTION

configFINANCE_AGENT_MEMORY_NAMESPACE

configFLEXIBILITAETSKOSTEN_RASTER_DB_PATH

configFNAV_COMMERCIAL_HEDGING_DB_PATH

configGASNETZ_WAERMEPLANUNG_DB_PATH

🔐 secretGEMINI_API_KEY— Gemini-Key (Backwards Compatibility, wenn LLM_PROVIDER=gemini) Nein

configGEMINI_EMBEDDING_MODEL

configGEMINI_MODEL

configGHOST_ASSET_ALERT_DB_PATH

configGRID_CONNECTION_DB_PATH

configHITL_DB_PATH

configHITL_EXPIRY_CHECK_INTERVAL_MS

configINVESTMENT_PLANNING_DB_PATH

configJOB_STORE_DIR

configJOB_STORE_POUCHDB_PATH

configJOB_STORE_WATCHDOG_INTERVAL_SECONDS

🔐 secretLLM_API_KEY— Generischer API-Key (falls Provider ihn benötigt) Nein

configLLM_BASE_URL

configLLM_EMBEDDING_MODEL

configLLM_MODEL— cp .env.example .env # CERNION_TOKEN + LLM_PROVIDER/ konfigurieren

configLLM_TIMEOUT_MS

configLOG_LEVEL

configMASTR_MONITOR_BASE_URL

configMASTR_MONITOR_CHUNKING_ENABLED

configMASTR_QUALITY_DB_PATH

configMQTT_BROKER_CLEANUP_INTERVAL_MS

configMQTT_BROKER_DB_PATH

configMQTT_BROKER_MAX_PAYLOAD_BYTES

configNAMESPACE

configNBP_CACHE_TTL_SECONDS

configNETZKOPPELVERTRAG_DB_PATH

configNKP_REPORTING_DB_PATH

configNOTIFICATION_DB_PATH

configNOVA_DB_PATH

configNOVA_DECISION_TTL_HOURS

configNOVA_EXPIRY_CHECK_INTERVAL_MS

configOBJECT_STORE_DB_PATH

configOBSERVABILITY_DB_PATH

configOEP_API_BASE_URL

configOPENAPI_EXPORT_INCLUDE_TIMESTAMP

configPERSONA_INBOX_DB_PATH

configPORT— API Gateway Port (Standard: 3000) Nein

configRCS_MAX_ASSETS_PER_RUN

configRCS_MAX_FULL_TRACE_INTERVALS

configRCS_SIM_RUN_DB

configRCS_SYNC_THRESHOLD_INTERVALS

configREDISPATCH_ASSET_REGISTER_DB_PATH

configREDISPATCH_DATA_GOVERNANCE_DB_PATH

configREDISPATCH_EXPOST_DB_PATH

configREDISPATCH_SETTLEMENT_SANDBOX_DB_PATH

configREDISPATCH_SPECIAL_CASE_GATE_DB_PATH

configREG_ENTGELTLOGIK_DB_PATH

configREINVEST_SIGNAL_DB_PATH

configREPORTING_GOVERNANCE_DB_PATH

configRUN_PERSONAL_AGENT_TDD_MATRIX_BLACKBOX

configTOKEN_STORAGE_FILE

configTRANSPORTER

configUPLOADS_DIR

configUTILITY_REPORT_CALL_TIMEOUT_MS

configUTILITY_REPORT_ENRICHMENT_TIMEOUT_MS

configUTILITY_REPORT_LLM_MODEL

configVDMI_DB_PATH

configVDMI_GATEKEEPING_DB_PATH

configVDMI_PROMOTION_THRESHOLD

configVDMI_TEMPLATES_DB_PATH

configVNB_100_TAGE_ASSESSMENT_DB_PATH

configVNB_MONITOR_CACHE_TTL_SECONDS

configWEBHOOKS_DB_PATH

configWEBHOOKS_DEAD_DISABLE_THRESHOLD

configWEBHOOKS_DELIVERY_TIMEOUT_MS

configWEBHOOKS_PROCESS_INTERVAL_MS

configZNP_DB_PATH

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/energychain-cernion-energy-tools-1cl6qy)](https://m8ven.ai/mcp/energychain-cernion-energy-tools-1cl6qy)

commit: d4aa23b7326bab312775a1b7b03ce57abac9f61d

code hash: 927419c79850846333208c8a74ffe2e9eb908f5802f2bd551a0dca2548c0a90a

verified: 6/17/2026, 12:06:28 PM

view raw JSON →