Back to MCP Trust Indexm8ven
C
Limited view
71/100
5 days ago
github_code

entigram✓ Verified Publisher

Published by entigram.ai

→ Entigram-AI/entigram· listed on github_code

Limited view. We could not verify deeper (language, hosted, or no source access) — the grade is capped by our view, not by findings. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

⚡ Upgrade to Live Verified

Connect your repo and M8ven re-verifies it automatically on every change — read-only, one click, revoke anytime. What we access →

⚡ Connect GitHub for Live Verified

Install from

GitHub

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: ENTIGRAM_TOKEN, CLOUDFLARE_API_TOKEN, CLOUDFLARE_AUTH_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run. Since this is a local server, you set these in your own MCP client configuration and they stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configENTIGRAM_ISSUE_REPO
configENTIGRAM_INIT_FETCH_REGISTRY
configENTIGRAM_CONFIG_DIR
configENTIGRAM_REGISTRY_CACHE_DIR
🔐 secretENTIGRAM_TOKEN— require an Entigram Cloud key. The Worker can still use for
configENTIGRAM_REGISTRY_OFFLINE
configCLOUDFLARE_ACCOUNT_ID
🔐 secretCLOUDFLARE_API_TOKEN
🔐 secretCLOUDFLARE_AUTH_TOKEN
configCLOUDFLARE_AI_MODEL
configCLOUDFLARE_WORKERS_AI_MODEL
configCLOUDFLARE_OLLAMA_MODEL_ALIAS
configCLOUDFLARE_MODEL_PROFILE
configCLOUDFLARE_AI_MODEL_PROFILE
configENTIGRAM_PROXY_DEBUG
configOLLAMA_HOST
configEDITOR
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

8/8 tools missing one or more hints — etg_get_schemas (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); etg_get_impact (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); etg_get_workspace_context (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +5 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool inputs are validated

4/8 tool handlers declare input schemas (50%)

Declare an inputSchema with zod/joi/yup on every tool definition.

Tests exist

No test files found

Add tests that exercise each declared tool.

// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/entigram-ai-entigram-2fzem6)](https://m8ven.ai/mcp/entigram-ai-entigram-2fzem6)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: cb9142040b8cc4980608ef0d06cfd1114916774a
code hash: c0731d3a36d6a83642ce7e85267f5aad21738ac500d7c20bfa97b710affecb44
verified: 8/8/2026, 8:12:03 AM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client