securedact-mcp (GigantesHJI/securedact-mcp) is an MCP server listed on the M8ven Trust Index. It scores 89 out of 100, grade B. It declares 6 tools. The publisher has proved control of what we score (Verified Publisher). It is connected through the M8ven GitHub App, so the listing is re-checked on every push.

Back to MCP Trust Index

B

Emerging

89/100

21 hours ago

securedact-mcp

Securedact MCP is a local-first privacy layer for MCP-compatible AI workflows. It detects, reviews, redacts, and audits sensitive information before approved sanitized content is used downstream.

→ GigantesHJI/securedact-mcp· listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored

Monitored 9 days · every push re-verified

Who stands behind it

hotmail.com (@GigantesHJI) · Verified Publisher

Source: Glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

6 tools verified — handlers match their declared behaviour

4 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: SECUREDACT_GOOGLE_CLIENT_SECRET, MICROSOFT_ENTRA_CLIENT_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

Something look wrong? Dispute a finding

Are you the publisher? Confirm or correct these findings.

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

configHF_HUB_OFFLINE

configTRANSFORMERS_OFFLINE

configHF_HUB_DISABLE_TELEMETRY

configSECUREDACT_REQUIRE_FLAIRdeterministic development requires =0; applications may

configSECUREDACT_MODEL_ID

configSECUREDACT_MODEL_PATH

configSECUREDACT_FLAIR_MODEL

configHF_HUB_CACHE

configSECUREDACT_MAX_TEXT_CHARS

configSECUREDACT_ENABLE_DEBUG_RESPONSES1; an MCP request cannot enable it. In-memory

configSECUREDACT_SAFE_COPY_DIR

configSECUREDACT_RUN_REAL_FLAIR

configSECUREDACT_BOOTSTRAP_CONFIG

configGITHUB_WORKFLOW_REF

configGITHUB_REF_NAME

configHF_HOME

configSECUREDACT_APP_DATA_DIR

configXDG_DATA_HOME

configSECUREDACT_MAX_TOOL_RESULT_CHARS

configSECUREDACT_POLICY_DIR

configSECUREDACT_ARTICLE9_ML_ENABLED

configSECUREDACT_READ_MAX_BYTES

configCLAUDE_PLUGIN_DATA

configXDG_STATE_HOME

configImageOS

configImageVersion

configSECUREDACT_EVAL_FLAIR_MODEL

configSECUREDACT_EVAL_FLAIR_MODEL_EN

configSECUREDACT_EVAL_FLAIR_MODEL_NL

configSECUREDACT_EVAL_MODEL_ID

configSECUREDACT_MODEL_DIR

configPYTHONNOUSERSITE

configSECUREDACT_MODEL_DIAGNOSTICS

configCOMSPEC

configSECUREDACT_DEBUG_DIAGNOSTICS

configProgramData

configSystemRoot

config_MEIPASS

configSECUREDACT_AGENT_SERVICE_ACCOUNT

configSECUREDACT_GOOGLE_ENABLED

configSECUREDACT_GOOGLE_CLIENT_ID

🔐 secretSECUREDACT_GOOGLE_CLIENT_SECRET

configSECUREDACT_GOOGLE_REDIRECT_URI

configSECUREDACT_GOOGLE_SCOPES

configSECUREDACT_GOOGLE_TOKEN_PATH

configSECUREDACT_MICROSOFT_ENABLED

configMICROSOFT_ENTRA_CLIENT_ID

🔐 secretMICROSOFT_ENTRA_CLIENT_SECRET

configMICROSOFT_ENTRA_TENANT_ID

configSECUREDACT_MICROSOFT_SCOPES

configSECUREDACT_MICROSOFT_TOKEN_PATH

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/giganteshji/securedact-mcp)](https://m8ven.ai/mcp/giganteshji/securedact-mcp)copy

Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.

commit: 4c8866c4b6c4793d5ecadd29075e77fdc846900e

code hash: bd022c24e48d1e620dc6ed3d5d170b57179350c4de000759d49c305c29cbf8b2

verified: 9/9/2026, 8:01:33 PM

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-checkcopy

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client