innovation-lab-examples (fetchai/innovation-lab-examples) is an MCP server listed on the M8ven Trust Index. It scores 75 out of 100, grade B. It declares 46 tools. No publisher has claimed this listing.
80+ production-ready AI agent examples in Python — build autonomous agents, multi-agent systems and agentic AI with uAgents, ASI:One, MCP, A2A, LangChain, CrewAI, Gemini, Claude and OpenAI.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
fetchai
Source: github_topic
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
CAL_CREDENTIALS_FILECAL_TOKENS_FILECALENDAR_MCP_PORTTICKETMASTER_API_KEYGMAIL_LOGGMAIL_MCP_PORTLOG_LEVELCONNECTOR_KEY_DIRCONNECTOR_AGENT_SEEDAGENT_NETWORKCONNECTOR_PORTCONNECTOR_HOSTCONNECTOR_USER_IDCONNECTOR_DEVICE_IDORCHESTRATOR_AGENT_ADDRESSAGENTVERSE_API_KEYOPENAI_API_KEYSERPER_API_KEYASI1_API_KEYMODELBASE_URLUAGENT_MESSAGE_TIMEOUTGOOGLE_GENAI_USE_VERTEXAIMCP_SERVER_URLAGENTVERSE_URLANTHROPIC_API_KEYPERPLEXITY_API_KEYAGENT_SEEDAGENT_PORTCAL_CHAT_AGENT_PORTCAL_CHAT_AGENT_NAMECAL_CHAT_AGENT_SEEDCAL_TOKENS_DIROPENAI_MODELCALENDAR_MCP_URLMAX_CAL_CHAT_HISTORYGROQ_API_KEYGMAIL_CHAT_AGENT_PORTGMAIL_CHAT_AGENT_NAMEGMAIL_CHAT_AGENT_SEEDGMAIL_TOKENS_DIRGMAIL_CHAT_IO_LOGGMAIL_MCP_URLMAX_GMAIL_CHAT_HISTORYGMAIL_CHAT_LOGASI1_MODELCOMPOSIO_API_KEYGMAIL_AUTH_CONFIG_IDDUFFEL_TOKENFREECURRENCYAPI_KEYFET_USD_PRICEFET_LCD_URLFET_DENOMFET_VERIFY_ATTEMPTSFET_VERIFY_DELAY_SECFET_DENOM_SCALESKYFIRE_ENVJWKS_URLJWT_ISSUERSKYFIRE_TOKENS_API_URLSELLER_ACCOUNT_IDJWT_AUDIENCESELLER_SERVICE_IDSELLER_SKYFIRE_API_KEYSKYFIRE_API_KEYEXA_API_KEYBROWSERLESS_API_KEYOPENWEATHER_API_KEYTAVILY_API_KEYSTORE_A2A_PORTSTORE_UAGENT_PORTSKYFIRE_TOKENS_CHARGE_API_URLASICLOUD_API_KEYAGENT_SEED_PHRASEAGENTVERSE_KEYHOSTING_ENDPOINTGEMINI_API_KEYAGENT_NAMESESSION_DB_PATHFET_USE_TESTNETFIXED_FET_AMOUNTSKYFIRE_SERVICE_IDSKYFIRE_ACCOUNT_IDAGENTVERSE_AGENT_URIHOSTPUBLIC_BASE_URLANALYSIS_PORTANALYSIS_AGENT_URLGEMINI_MODELORCHESTRATOR_PORTRESEARCH_AGENT_URLSUMMARY_AGENT_URLRESEARCH_PORTSUMMARY_PORTQDRANT_URLQDRANT_API_KEYCHUNK_SIZECHUNK_OVERLAPSIMILARITY_TOP_KCHAT_MEMORY_TOKEN_LIMITEMBED_MODELLLM_MODELSTRIPE_SECRET_KEYSTRIPE_PUBLISHABLE_KEYSTRIPE_AMOUNT_CENTSSTRIPE_CURRENCYSTRIPE_PRODUCT_NAMESTRIPE_SUCCESS_URLSTRIPE_CHECKOUT_EXPIRES_SECONDSAGGREGATOR_SEEDAGGREGATOR_ENDPOINTGOOGLE_MAPS_API_KEYEXCEL_SEEDEXCEL_GENERATOR_ENDPOINTGEOCODER_SEEDGEOCODER_MAPPER_ENDPOINTLOCATION_SEEDLOCATION_EXTRACTOR_ENDPOINTTRANSCRIPT_AGENT_ADDRLOCATION_AGENT_ADDRAGGREGATOR_AGENT_ADDRTRIP_PLANNER_AGENT_ADDRWEATHER_AGENT_ADDRPDF_AGENT_ADDREXCEL_AGENT_ADDRORCHESTRATOR_ENDPOINTASSET_LIFETIME_HOURSOUTPUT_DIRFILES_SERVER_PORTFILES_SERVER_HOSTFILES_PUBLIC_BASESTATIC_MAP_SIZESTATIC_MAP_SCALEORCHESTRATOR_SEEDSTRIPE_PRICE_CENTSPDF_SEEDPDF_GENERATOR_ENDPOINTTRANSCRIPT_SEEDTRANSCRIPT_ENDPOINTYOUTUBE_API_KEYTRIP_PLANNER_SEEDTRIP_PLANNER_ENDPOINTWEATHER_SEEDWEATHER_MONITOR_ENDPOINTAGENT_MAILBOX_KEYAGENT_ENDPOINTGOOGLE_SHEET_USER_IDGOOGLE_OAUTH_TOKEN_STORE_FILEGOOGLE_OAUTH_DEVICE_STORE_FILEGOOGLE_OAUTH_CLIENT_JSONGOOGLE_OAUTH_CLIENT_FILEGOOGLE_SHEET_SHARE_EMAILSTRIPE_RETURN_URLLINKEDIN_AUTH_CONFIG_IDAV_API_KEYOPENAI_BASE_URLA2A_PORTASI_LLM_KEYNEWS_API_KEYSMTP_HOSTSMTP_USERSMTP_PASSSMTP_PORTSMTP_FROMSMTP_FROM_NAMEPORTTool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
46/46 tools missing one or more hints — setup_oauth (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); complete_oauth (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); check_auth_status (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +43 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Destructive tools are labelled
1 tool perform destructive updates without destructiveHint — reset_oauth_tokens deletes at line 236 (os.remove(TOKENS_PATH))
Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.
Tool inputs are validated
40/43 tool handlers declare input schemas (93%)
Declare an inputSchema with zod/joi/yup on every tool definition.
Tool test coverage
Only 2/46 tools referenced in tests (4%)
Write tests that reference each tool by name so every tool has at least one test.
Secrets stay with their owner
1 secret/sensitive value flow into network calls (ASI_ONE_API_KEY → https://api.asi1.ai/v1/chat/completions) (9 other flows matched canonical API hosts)
Audit where credentials are sent. A NOTION_TOKEN should only reach api.notion.com — never a third-party host.
Secrets not written to files
3 secret values written to files
Avoid persisting secrets to disk. Keep them in memory or your secret manager.
Secrets not logged
11 secret values sent to logger.info/print
Redact or omit secret values from log output.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/fetchai/innovation-lab-examples)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check