local-runtime-mcp (hicancan/local-runtime-mcp) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. The publisher has proved control of what we score (Verified Publisher). It is connected through the M8ven GitHub App, so the listing is re-checked on every push.

Back to MCP Trust Index

C

Limited view

74/100

local-runtime-mcp

Portable MCP runtime with 20 process, filesystem, image, Windows computer-use, and Chromium tools over stdio, HTTP, OpenAI Tunnel, and Cloudflare Tunnel.

→ hicancan/local-runtime-mcp· listed on github_repo_search

Limited view. Automated analysis covers part of this stack. Findings reflect what we verified. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

Limited view: static analysis for Go is partially covered.

How we verified

⚡ Live Monitored

every push re-verified

Who stands behind it

qq.com (@hicancan) · Verified Publisher

Source: github_repo_search

Install from

GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

Something look wrong? Dispute a finding

Are you the publisher? Confirm or correct these findings.

// quality suggestions

Domain consistency

npm scope @local-runtime-mcp doesn't match GitHub owner hicancan

Use the same org name across GitHub, npm, and your homepage so users can verify the publisher.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/hicancan/local-runtime-mcp)](https://m8ven.ai/mcp/hicancan/local-runtime-mcp)copy

Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.

commit: 6d9edf1e2fbb16c1331bceacc56d9cf31ea3be25

code hash: 9c86db8720ec7884c0ec34492ccf9ed4026361d153b9082e068af312e529c2e1

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-checkcopy

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client