Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configOE_MCP_ARTIFACT_DIROS temp dir + openevidence-mcp Artifact output directory
configOE_MCP_AUTH_STATE_PATHunset Legacy alias for OE_MCP_COOKIES_PATH
configOE_MCP_BASE_URL
configOE_MCP_COOKIES_PATH/ABSOLUTE/PATH/openevidence-mcp/cookies.json
configOE_MCP_CROSSREF_MAILTOunset Optional Crossref polite-pool email
configOE_MCP_CROSSREF_VALIDATE1 Set 0 to skip Crossref validation
configOE_MCP_POLL_INTERVAL_MS1200 Poll interval for oe_ask
configOE_MCP_POLL_TIMEOUT_MS180000 Default poll timeout
configOE_MCP_ROOT_DIR~/.openevidence-mcp Root for default auth paths
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/htlin222-openevidence-mcp-19n9os)](https://m8ven.ai/mcp/htlin222-openevidence-mcp-19n9os)
commit: dee0807be8c3512d61b3fb582316012862e73099
code hash: 3ec845d4f13904fe67312c3cab993aea837b44cfaf9c9e5f6276d97ad6143d5f
verified: 4/11/2026, 2:15:10 PM
view raw JSON →