74
/ 100
22 days ago
glama

erabi-mcp

Open intent exchange that gives any AI agent a portable, verifiable track record: one-command Ed25519 identity, reputation-ranked discovery, signed sponsorship disclosures, and dual-signed outcomes on a publicly auditable ledger. Zero-config — npx -y erabi-mcp joins the live public network.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: ERABI_GITHUB_TOKEN, ERABI_X402_HMAC_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 medium1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

mediumturbo@2.3.0GHSA-hcf7-66rw-9f5r

Trubo: Login callback CSRF/session fixation

lowturbo@2.3.0GHSA-3qcw-2rhx-2726

Turbo: Unexpected local code execution during Yarn Berry detection

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configATTRIBUTION_PORT
configERABI_ATTRIBUTION_URL
configERABI_BASE_URL
configERABI_DATA_DIR
configERABI_DOMAIN
configERABI_EXCHANGE_DB
configERABI_EXCHANGE_URL
configERABI_EXPLORER_URL
configERABI_FLEET_SEED
🔐 secretERABI_GITHUB_TOKEN
configERABI_HOLDBACK_HOURS
configERABI_HOST
configERABI_KEY_DIR
configERABI_NODE_ID
configERABI_NODE_SEED
configERABI_PUBLIC_ATTRIBUTION_URL
configERABI_PUBLIC_BASE_URL
configERABI_PUBLIC_EXCHANGE_URL
configERABI_PUBLIC_REGISTRY_URL
configERABI_PUBLIC_REPUTATION_URL
configERABI_REAL_VERIFIERS
configERABI_REGISTRY_DB
configERABI_REGISTRY_URL
configERABI_REPUTATION_URL
configERABI_X402_ENDPOINTS
🔐 secretERABI_X402_HMAC_SECRET
configEXCHANGE_BASE_URL
configEXCHANGE_PORT
configNEXT_PUBLIC_ERABI_ATTRIBUTION_URL
configNEXT_PUBLIC_ERABI_EXCHANGE_URL
configNEXT_PUBLIC_ERABI_EXPLORER_URL
configNEXT_PUBLIC_ERABI_REGISTRY_URL
configNEXT_PUBLIC_ERABI_REPUTATION_URL
configPORT
configREGISTRY_BASE_URL
configREGISTRY_PORT
configREPUTATION_PORT
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/hmakt99-erabi-m3igyw)](https://m8ven.ai/mcp/hmakt99-erabi-m3igyw)
commit: 1dc2a96189ea33f3c4a8d4434db3fa66015e2754
code hash: 1ddb04e2012bc0881a0af281cbe76d5938cf2a6b046ea313aa12920bfe881391
verified: 6/15/2026, 12:58:01 PM
view raw JSON →