securedact-mcp (GigantesHJI/securedact-mcp) is an MCP server listed on the M8ven Trust Index. M8ven has not graded it: we have no way to read this server ourselves. The publisher has proved control of what we score (Verified Publisher). It is connected through the M8ven GitHub App, so the listing is re-checked on every push.

Emerging

89/100

1 day ago

securedact-mcp

Item: securedact-mcp
Rating: 89
Author: M8ven

Securedact MCP is a local-first privacy layer for MCP-compatible AI workflows. It detects, reviews, redacts, and audits sensitive information before approved sanitized content is used downstream.

→ GigantesHJI/securedact-mcp · listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored

Monitored 7 days · every push re-verified

Who stands behind it

hotmail.com (@GigantesHJI) · Verified Publisher

Source: Glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

6 tools verified — handlers match their declared behaviour

4 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: SECUREDACT_GOOGLE_CLIENT_SECRET, MICROSOFT_ENTRA_CLIENT_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

Are you the publisher? Confirm or correct these findings.

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

configHF_HUB_OFFLINE

configTRANSFORMERS_OFFLINE

configHF_HUB_DISABLE_TELEMETRY

configSECUREDACT_REQUIRE_FLAIRdeterministic development requires =0; applications may

configSECUREDACT_MODEL_ID

configSECUREDACT_MODEL_PATH

configSECUREDACT_FLAIR_MODEL

configHF_HUB_CACHE

configSECUREDACT_MAX_TEXT_CHARS

configSECUREDACT_ENABLE_DEBUG_RESPONSES1; an MCP request cannot enable it. In-memory

configSECUREDACT_SAFE_COPY_DIR

configSECUREDACT_RUN_REAL_FLAIR

configGITHUB_WORKFLOW_REF

configGITHUB_REF_NAME

configHF_HOME

configSECUREDACT_APP_DATA_DIR

configXDG_DATA_HOME

configSECUREDACT_MAX_TOOL_RESULT_CHARS

configSECUREDACT_POLICY_DIR

configSECUREDACT_ARTICLE9_ML_ENABLED

configSECUREDACT_READ_MAX_BYTES

configCLAUDE_PLUGIN_DATA

configXDG_STATE_HOME

configImageOS

configImageVersion

configSECUREDACT_EVAL_FLAIR_MODEL

configSECUREDACT_EVAL_FLAIR_MODEL_EN

configSECUREDACT_EVAL_FLAIR_MODEL_NL

configSECUREDACT_EVAL_MODEL_ID

configSECUREDACT_MODEL_DIR

configPYTHONNOUSERSITE

configSECUREDACT_MODEL_DIAGNOSTICS

configCOMSPEC

configSECUREDACT_DEBUG_DIAGNOSTICS

configProgramData

configSystemRoot

configSECUREDACT_AGENT_SERVICE_ACCOUNT

configSECUREDACT_GOOGLE_ENABLED

configSECUREDACT_GOOGLE_CLIENT_ID

🔐 secretSECUREDACT_GOOGLE_CLIENT_SECRET

configSECUREDACT_GOOGLE_REDIRECT_URI

configSECUREDACT_GOOGLE_SCOPES

configSECUREDACT_GOOGLE_TOKEN_PATH

configSECUREDACT_MICROSOFT_ENABLED

configMICROSOFT_ENTRA_CLIENT_ID

🔐 secretMICROSOFT_ENTRA_CLIENT_SECRET

configMICROSOFT_ENTRA_TENANT_ID

configSECUREDACT_MICROSOFT_SCOPES

configSECUREDACT_MICROSOFT_TOKEN_PATH

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/giganteshji-securedact-mcp-1y8xrj)](https://m8ven.ai/mcp/giganteshji-securedact-mcp-1y8xrj)

Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.

commit: 779a72522637a4de8cacb1417090389b803d6b70

code hash: 0ff2dc6b2740a2defe99d40ea1fdd4f9752d428d0d95f2ab7a9f4acc2246d28f

verified: 9/6/2026, 6:46:10 PM

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client