/ 100

18 days ago

glama

portuni

An MCP server that provides a shared graph of an organization's projects, processes, areas, and principles, enabling consistent context for tools and AI agents.

→ honzapav/portuni · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: PORTUNI_AUTH_TOKEN, PORTUNI_JWT_SECRET, TURSO_AUTH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configHOST

configPORT

configPORTUNI_ALLOWED_HOSTS

configPORTUNI_ALLOWED_ORIGINS

configPORTUNI_AUTH_MODE

🔐 secretPORTUNI_AUTH_TOKEN

configPORTUNI_DATA_DIR

configPORTUNI_GUARD_SCRIPT

🔐 secretPORTUNI_JWT_SECRET

configPORTUNI_LOG_REQUESTS

configPORTUNI_MAX_BODY_BYTES

configPORTUNI_MAX_SESSIONS

configPORTUNI_PORT

configPORTUNI_RATE_LIMIT_PER_MIN

configPORTUNI_ROOT

configPORTUNI_SCOPE_MODE

configPORTUNI_SESSION_GC_INTERVAL_MS

configPORTUNI_SESSION_TTL_MS

configPORTUNI_STATUS_SCAN_CONCURRENCY

configPORTUNI_TOKEN_STORE

configPORTUNI_URL

configPORTUNI_USER_EMAIL

configPORTUNI_USER_NAME

configPORTUNI_VARLOCK_DELETE_ARGS

configPORTUNI_VARLOCK_DELETE_PROGRAM

configPORTUNI_VARLOCK_WRITE_ARGS

configPORTUNI_VARLOCK_WRITE_PROGRAM

configPORTUNI_WORKSPACE_ROOT

🔐 secretTURSO_AUTH_TOKEN

configTURSO_URL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/honzapav-portuni-1l1cyw)](https://m8ven.ai/mcp/honzapav-portuni-1l1cyw)

commit: ea2f0921195ec89e21b9a6606a07258180b885e6

code hash: e03518378a8fd1180ecf570040e0761b2b5dc375a93a3c9c192ef2f5cf45cde1

verified: 6/22/2026, 12:45:26 PM

view raw JSON →