GoCertius MCP Server

Item: GoCertius MCP Server
Rating: 0
Author: M8ven

MCP server for GoCertius: certified evidence, dossiers, notifications and chats via AI agents.

→ g-digital-by-Garrigues/GoCertius_MCP · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

2 flows detected: MCP_AUTH_USER_KEY, MCP_AUTH_EMAIL. We can’t prove the destination matches the brand the credential belongs to.

🚨

Code appears obfuscated

1 file are unreadable to a human reviewer. Cannot audit what they do.

🔐

You'll be asked for 3 credentials: MCP_ALLOW_UNVERIFIED_BEARER, MCP_AUTH_PASSWORD, MCP_AUTH_USER_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configHTTP_PORT

configLOG_LEVEL

configMCP_ALLOW_INSECURE_FILE_URL

🔐 secretMCP_ALLOW_UNVERIFIED_BEARER

configMCP_API_BASE_URL— No No Overrides the default upstream API host for every tool

configMCP_AUTH_EMAIL— "": "your-email@example.com",

configMCP_AUTH_JWT— Optional Pre-seeded JWT (skips interactive login)

🔐 secretMCP_AUTH_PASSWORD— "": "your-password"

🔐 secretMCP_AUTH_USER_KEY— One of the two flows Long-lived user key (exchanged for a session token)

configMCP_BRIDGE_STATE_FILE

configMCP_HTTP_HOST— No No Interface the HTTP transport binds to. Default 127.0.0.1 (localhost only). Set 0.0.0.0 to expose on all interfaces (containers do this automatically).

configMCP_HTTP_MAX_BODY_BYTES

configMCP_HTTP_PUBLIC— MCP_SVC_INTROSPECT_URL No No RFC 7662 token introspection URL for inbound Bearer verification in HTTP mode. Opt-in, and required when =true. Leave empty for stdio (local) use.

configMCP_OTEL_ENABLED— Optional Set to true to enable OpenTelemetry tracing

configMCP_TRANSPORT

configOPENAPI_SNAPSHOT_VERSION

configOTEL_EXPORTER_OTLP_ENDPOINT

configPORT— No No HTTP port when running in hosted (HTTP) mode; ignored in stdio mode

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/g-digital-by-garrigues-gocertius-mcp-uabe6q)](https://m8ven.ai/mcp/g-digital-by-garrigues-gocertius-mcp-uabe6q)

commit: 2b879a0f84785b80da011ab02a76effbe8167be0

code hash: d35f7081d7035df0990eae9af71ac57e891acad9e90fd95fcc4dfcf51f709217

verified: 7/29/2026, 9:06:19 AM

view raw JSON →