/ 100

17 days ago

glama

Horizon

An MCP server that connects AI assistants to university D2L Brightspace and Piazza, enabling query of courses, grades, assignments, deadlines, files, and Piazza posts.

→ hamzakammar/mcp-workspace · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

1 flow detected: SUPABASE_SERVICE_ROLE_KEY. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 11 credentials: D2L_PASSWORD, D2L_TOKEN, EXPO_PUBLIC_SUPABASE_ANON_KEY, NOTION_CLIENT_SECRET, OPENAI_API_KEY, PIAZZA_PASSWORD, STUDY_MCP_TOKEN, SUPABASE_ANON_KEY, SUPABASE_JWT_SECRET, SUPABASE_KEY, SUPABASE_SERVICE_ROLE_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAPI_HOST

configAWS_EXECUTION_ENV

configAWS_REGION

configCOGNITO_CLIENT_ID

configCOGNITO_USER_POOL_ID

configD2L_COURSE_ID

configD2L_HOST

🔐 secretD2L_PASSWORD

🔐 secretD2L_TOKEN

configD2L_USERNAME

configDATABASE_URL

configDISPLAY

configEXPO_PUBLIC_API_BASE_URL

configEXPO_PUBLIC_PROJECT_ID

🔐 secretEXPO_PUBLIC_SUPABASE_ANON_KEY

configEXPO_PUBLIC_SUPABASE_URL

configKMS_KEY_ARN

configMCP_PORT

configMCP_TRANSPORT

configMCP_USER_ID— SKIP_JWT_AUTH=1 =dev npm start

configNOTES_REPO_PATH

configNOTES_REPO_WEB_BASE

configNOTION_CLIENT_ID

🔐 secretNOTION_CLIENT_SECRET

configNOTION_REDIRECT_URI

🔐 secretOPENAI_API_KEY— Fill in SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY, , S3_BUCKET, etc.

🔐 secretPIAZZA_PASSWORD

configPIAZZA_USERNAME

configPLAYWRIGHT_CHROMIUM_EXECUTABLE_PATH

configPUBLIC_BASE_HOST

configREMOTE_DEBUG

configS3_BUCKET— Fill in SUPABASE_URL, SUPABASE_SERVICE_ROLE_KEY, OPENAI_API_KEY, , etc.

configS3_REGION

configSESSIONS_PATH

configSKIP_JWT_AUTH— 1 MCP_USER_ID=dev npm start

🔐 secretSTUDY_MCP_TOKEN

🔐 secretSUPABASE_ANON_KEY

🔐 secretSUPABASE_JWT_SECRET

🔐 secretSUPABASE_KEY

🔐 secretSUPABASE_SERVICE_ROLE_KEY— Fill in SUPABASE_URL, , OPENAI_API_KEY, S3_BUCKET, etc.

configSUPABASE_URL— Fill in , SUPABASE_SERVICE_ROLE_KEY, OPENAI_API_KEY, S3_BUCKET, etc.

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/hamzakammar-mcp-workspace-knylay)](https://m8ven.ai/mcp/hamzakammar-mcp-workspace-knylay)

commit: 7966d79e9c9af9a5c2b2f9ea9ded0dd4a052ed73

code hash: bd0ecba95cb64b9e30477dfe274211ef6566bf24ad8c00ce9b5475c755ee5f0d

verified: 6/22/2026, 12:23:58 PM

view raw JSON →