Back to MCP Trust Indexm8ven
0
/ 100
11 hours ago
glama

Baton MCP Server

Enables bounded agent authority over a macOS workstation via 63 MCP tools with policy, approval, and audit.

→ euuuuuuan/baton-public· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Reads files from sensitive locations
Touches: ~/.config/baton/menubar-runners, ~/.config/baton/menubar-runners
⚠️
Tool descriptions don’t match what handlers do
1 tool describes read intent but its handler mutates — web_fetch (line 115: /^&#(\d+);$/.exec(m))
🔐
You'll be asked for 2 credentials: BATON_LITELLM_API_KEY, BATON_DAEMON_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configBATON_APPROVE_PAUSED
configBATON_APPROVE_PAUSE_FILE
configBATON_COMPANION_SOCK
configBATON_COMPANION_TOPICS
🔐 secretBATON_LITELLM_API_KEY
configBATON_LITELLM_BASE_URL
configBATON_OBSERVE_AGENTS_USAGE_DISABLE
configBATON_ORG_CHART
configBATON_PROTECTED_PATHS
configBATON_RERANK_BASE_URL
configBATON_REVIEW_MODEL
configBATON_SEARCH_PROXY_PORT
configBATON_SEARCH_REGION
configBATON_TOOL_UNION_LIVE_EVAL
configBATON_VAULT_PATH
configBENCH_LADDER_MODEL
configBENCH_MODELS
configEVAL_MODEL
configEVAL_TIMEOUT_MS
configHERMES_HOME
configOLLAMA_HOST
configXDG_CONFIG_HOME
configBATON_SHEET
🔐 secretBATON_DAEMON_TOKEN
configLITELLM_URL
configMODEL_GATEWAY_URL
configVAULT_QUERY_URL
configBATON_MCP_CMD
configBATON_LANG
configBATON_OLLAMA_URL
configBATON_RAG_EMBED_MODEL
configBATON_BRIEF_MODEL
configBATON_RAG_DB
configBATON_VLM_MODEL
configBATON_VLM_TIMEOUT
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 10 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/euuuuuuan-baton-public-ot3wek)](https://m8ven.ai/mcp/euuuuuuan-baton-public-ot3wek)
commit: f78bccdcf56c9acd8cdafd36c4af3472e5195afa
code hash: d84992d356bf3465004b478ae1cb526006d4874a0a8406564eef267d42b93fbc
verified: 7/31/2026, 8:59:10 AM
view raw JSON →