0
grade F
2 days ago
glama

codesafer

CodeSafer is an MCP server that scans AI-generated code for 9 categories of hidden security threats — including invisible Unicode, Trojan Source, homoglyphs, and rules file backdoors — using static analysis plus CodeBERT deep learning. Runs locally, free tier available.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Code appears obfuscated
1 file are unreadable to a human reviewer. Cannot audit what they do.
🔐
You'll be asked for 1 credential: PADDLE_WEBHOOK_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAPI_VALIDATE_URL
🔐 secretPADDLE_WEBHOOK_SECRET
configPORT
configUSAGE_URL
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/goldmembrane-cleaner-code-88shb2)](https://m8ven.ai/mcp/goldmembrane-cleaner-code-88shb2)
commit: 3b17bfc56f48c7a9244f7504442c6229f951e24b
code hash: f9787bfd482f1b03ce407a978cc1adab8369110f5d34e9da784e9c070efe981b
verified: 4/18/2026, 6:18:05 PM
view raw JSON →