oss (hummbl-io/oss) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 238 tools. No publisher has claimed this listing.

C
Emerging
74/100

oss

HUMMBL open-source monorepo — governance primitives for AI agent fleets: kill switches, circuit breakers, cost governors, coordination bus, 120 mental models (Base120). 46 Python packages, stdlib-only, 9 live on PyPI.

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

hummbl-io

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: SUPADATA_API_KEY. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 13 credentials: OPEN_BRAIN_TOKEN, BUS_BRIDGE_TOKEN, APPROVAL_EMAIL_PASSWORD, DCT_SECRET, DISCORD_BOT_TOKEN, PROTON_PASS, VAPI_PRIVATE_API_KEY, HUMMBL_MCP_DISCORD_TOKEN, GOVERNANCE_API_TOKEN, HRSI_BRIDGE_TOKEN, ANTHROPIC_API_KEY, CLOUDFLARE_API_TOKEN, SUPADATA_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// tools this server exposes173 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

base120_get

Return one Base120 model by code.

base120_list

List Base120 models, optionally filtered by transformation code.

base120_search

Search Base120 model codes, names, and definitions.

base120_prompt

Format a deterministic local prompt for a Base120 model and question.

bif_start_session

Initialize a new BIF ingestion session. Returns session_id, Phase 1 prompt template, and pre-ingestion checklist.

bif_get_template

Get the prompt template for a specific BIF phase and batch. Returns structured prompt with execution steps, quality checks, and file naming conventions.

bif_validate_batch

Validate a completed batch against BIF quality criteria. Checks metadata header, structure, code examples, tables, token budget, and more.

bif_session_status

Check progress of a BIF session. Without session_id, lists all sessions. With session_id, shows detailed progress including phase coverage and next batch.

bif_list_templates

List available BIF domain templates (AI/ML Platform, Cloud Platform, Programming Framework, SaaS Evaluation, and the generic template).

governance_status

Get a one-call overview of all governance primitives: kill switch mode, circuit breaker state, cost budget status.

kill_switch_status

Get detailed kill switch state: current mode, engagement history, critical tasks list.

kill_switch_engage

Engage the kill switch. Modes: HALT_NONCRITICAL, HALT_ALL, EMERGENCY. Requires confirm=true.

kill_switch_disengage

Disengage the kill switch and return to normal operations.

circuit_breaker_status

Get circuit breaker state: CLOSED (healthy), OPEN (tripped), or HALF_OPEN (testing recovery).

cost_budget_check

Check current daily spend against budget caps. Returns ALLOW, WARN, or DENY decision with rationale.

cost_record_usage

Record an API usage event for cost tracking.

audit_query

Query the governance audit log by intent_id or task_id.

compliance_report

Generate compliance evidence mapped to SOC2, GDPR, and OWASP controls from governance audit trail.

health_check

Run governance health probes and return overall status.

pre_push_check

Run CI contract locally before push. Scopes checks to the diff.

pre_pr_gate

Check branch readiness before PR creation. Verifies branch freshness, conflict risk, scope, and PR metadata.

claim_review

Claim a review aspect on a PR to prevent duplicate work. Aspects: security, logic, tests, docs, style, ci, performance, breaking.

review_coverage

Query the review coverage matrix for a PR. Shows which aspects have been reviewed.

watch_ci

Watch CI status for a PR. Polls at the given interval and returns

check_main_moved

Check if origin/main advanced relative to local. Reports stale branches.

sync_receipts
auto_rebase

Detect stale branches and optionally rebase. Without --execute, reports which branches can be cleanly rebased. With --execute, performs the rebase.

bus_read

Read recent coordination bus messages. Optionally filter by agent or message type.

bus_post

Post a message to the coordination bus. Uses bus_writer for flock-safe append.

bus_search

Search bus messages by text content across all fields.

bus_stats

Get bus statistics: total messages, date range, top agents, message type breakdown.

bus_agents

List all agents that have posted to the bus with message counts, first/last seen, and top message types.

ledger_search

Full-text BM25 search across all cognitive ledger entries. Returns ranked results with relevance scores.

ledger_query

Query ledger entries by structured filters: agent, type, scope, tags, or time range.

ledger_post

Append a new entry to the cognitive ledger. Returns the entry ID.

ledger_stats

Get ledger statistics: entry count, agent breakdown, type breakdown, index health.

boot_context

Get session boot context — high-value recent entries for agent initialization. Returns the most relevant entries for starting a new work session.

reindex

Rebuild the BM25 full-text index from the ledger. Run after bulk imports or if search quality degrades.

monitor_record

Record an agent action for drift analysis

monitor_snapshot

Snapshot current action distribution as the baseline for drift comparison

monitor_detect_drift

Run Jensen-Shannon drift + entropy gaming detection for an agent

convergence_record

Record an agent action and classify it against convergent goal patterns

convergence_check

Check an agent for instrumental convergence (Bostrom 2014)

convergence_scores

Get per-convergent-goal scores for an agent

lifecycle_authorize

Run full NIST AI RMF governance check (kill switch + identity + circuit breaker + cost)

lifecycle_status

Get full governance lifecycle status snapshot (all NIST functions)

lineage_record_variant

Register a new AI variant in the lineage graph

lineage_get

Get variant details, children, and optionally full ancestry

lineage_drift

Detect parent-to-child fitness drift across all variants

approval_request

Request human approval for an agent action. Creates a PENDING request

approval_check_status

Check the status of an approval request. Auto-expires stale requests.

approval_approve

Approve a pending approval request. Requires reviewer identity.

approval_deny

Deny a pending approval request. Requires reviewer identity.

approval_cancel

Cancel a pending approval request (typically called by the requesting agent).

approval_list_pending

List all pending approval requests awaiting human decision.

approval_list_all

List all approval requests (newest first).

approval_stats

Get aggregate approval statistics: counts by status and risk level.

approval_gate

One-call gate: if risk_level is below threshold, auto-approves. Otherwise creates a request and blocks until a decision is reached or timeout expires. Returns {allowed, status, request_id, reason}.

approval_expire_stale

Manually trigger expiration of all stale (timed-out) pending requests.

nist_map_controls

Map governance evidence to NIST CSF 2.0 and AI RMF categories. Reads governance JSONL audit logs and maps each tuple type to the relevant NIST subcategories, returning coverage percentages and gaps.

soc2_assess

SOC 2 Type II readiness assessment. Scores governance evidence against all five trust service criteria: Security, Availability, Processing Integrity, Confidentiality, and Privacy. Returns per-criteria readiness.

iso_crosswalk

Cross-reference controls across ISO 27001, ISO 42001, NIST CSF 2.0, NIST AI RMF, and SOC 2. Returns a mapping table showing which controls have governance evidence and coverage percentages per framework.

stride_analysis

Run STRIDE threat analysis on a set of agent interactions. Evaluates each interaction for Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege threats.

compliance_evidence_export

Export a complete compliance evidence package as structured JSON for auditors. Combines evidence from all governance primitives mapped to

identity_register

Register an agent with a trust tier

identity_lookup

Look up agent status and trust tier

identity_list

List all registered agents

identity_validate

Check if an agent is a valid sender

delegation_create

Create a signed delegation token binding issuer to subject for ops

delegation_validate

Validate a delegation token by token_id

delegation_check_op

Check least-privilege: is requested_op in token's ops_allowed?

lamport_tick

Advance the Lamport clock for a local event

lamport_receive

Advance the clock on receipt of a remote timestamp

lamport_compare

Compare two Lamport timestamps for causal ordering

kinematic_check_motion

Check if proposed velocity/force/jerk values are within kinematic limits

kinematic_get_limits

Retrieve configured kinematic limits and caution/emergency thresholds

kinematic_scaled_vel

Get effective velocity limit for a given safety mode

phri_check_safety

Evaluate pHRI safety mode from distance/collision sensor data

phri_get_config

Get configured pHRI proximity thresholds and mode boundaries

phri_batch_check

Check multiple sensor readings at once, returns per-reading safety mode

reasoning_list_models

List all available Base120 mental models

reasoning_get_model

Get details of a specific Base120 mental model by code

reasoning_system_prompt

Generate a specialized system prompt for a Base120 mental model

schema_validate

Validate a JSON value against a JSON Schema (Draft 2020-12 subset)

schema_validate_dict

Validate a dict against a schema, returns (valid, errors)

contract_announce

Announce a task for bidding via Contract Net Protocol

contract_bid

Submit a bid on an announced task

contract_evaluate

Evaluate bids and select a winner

contract_status

Get phase, bid count, and winner for an announcement

contract_summary

Count all contract announcements by phase

sandbox_create

Create an isolated sandbox for an agent with policy constraints

sandbox_check

Check if an action is allowed within a sandbox.

sandbox_validate_output

Validate agent output against sandbox rules (no secrets, no blocked content).

sandbox_status

Get full sandbox state: kill switch, circuit breaker, cost, actions.

sandbox_destroy

Tear down a sandbox and emit an audit receipt.

state_read

Read the current shared cognitive state. Returns version, active agents, claimed files, decisions, sprint, and flags as JSON.

state_update_agent

Update a specific agent's status in the shared state. Creates the agent entry if it doesn't exist.

state_claim_file

Claim exclusive access to a file. Prevents other agents from modifying it concurrently. Fails if already claimed by a different agent.

state_release_file

Release exclusive file access. Only the claiming agent can release (or use agent_id='*' to force).

state_flags

Read or set flags in the shared state. If value is omitted, returns the current value of the flag. If value is provided, sets the flag.

73 further tools are not listed here. The complete surface is in the source.

// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configENABLE_ARBITER
🔐 secretOPEN_BRAIN_TOKEN
configBIF_SESSIONS_DIR
configGOVERNANCE_STATE_DIR
configGOVERNANCE_DB_PATH
configGOVERNANCE_AUDIT_DIR
configBASEN_MCP_AGENT
configBASEN_PERSIST_TUPLES
configBASEN_EMBED_MODEL
configBASEN_EMBED_TIMEOUT
configBASEN_CHAT_MODEL
configBASEN_CHAT_TIMEOUT
configBUS_ORIGIN_MACHINE
configBUS_ORIGIN_SURFACE
configBUS_BRIDGE_TOKEN_PATH
🔐 secretBUS_BRIDGE_TOKEN
configBUS_FILE
configCOGNITION_VENDOR
configCOGNITION_MODEL
configAGENT_VENDOR
configAGENT_MODEL
configAGENT_AGENT
configMONITOR_STATE_DIR
configAPPROVAL_EMAIL_HOST
configAPPROVAL_EMAIL_PORT
configAPPROVAL_EMAIL_FROM
configAPPROVAL_EMAIL_TO
configAPPROVAL_EMAIL_USERNAME
🔐 secretAPPROVAL_EMAIL_PASSWORD
configAPPROVAL_EMAIL_USE_TLS
configAPPROVAL_WEBHOOK_URL
configAPPROVAL_SLACK_WEBHOOK_URL
configSANDBOX_STATE_DIR
configENABLE_MCP_GATEWAY
configMCP_GATEWAY_STRICT
configMCP_BLOCKED_TOOLS
configMCP_KILL_SWITCH_STATE
configMCP_KNOWN_HOSTNAMES
🔐 secretDCT_SECRET
configLOG_LEVEL
configSKILLS_DIR
configSKILLS_ROUTING_FILE
🔐 secretDISCORD_BOT_TOKEN
configPROTON_IMAP_HOST
configPROTON_IMAP_PORT
configPROTON_USER
🔐 secretPROTON_PASS
configPROTON_SMTP_HOST
configPROTON_SMTP_PORT
configSIGNAL_CONFIG_DIR
configSIGNAL_ACCOUNT
🔐 secretVAPI_PRIVATE_API_KEY
configENABLE_IDP
configDISCORD_API_BASE
configDISCORD_REQUEST_TIMEOUT
🔐 secretHUMMBL_MCP_DISCORD_TOKEN
configGCP_PROJECT
configGCP_MAX_READ_BYTES
configHUMMBL_GRAPHS_DIR
🔐 secretGOVERNANCE_API_TOKEN
configGOVERNANCE_API_TOKEN_FILE
configGOVERNANCE_API_ALLOW_NO_AUTH
configGOVERNANCE_API_CORS_ORIGIN
configBUS_BRIDGE_TOKEN_FILE
configBUS_SENDER_TOKENS_FILE
configBUS_AUTH_EVENT_LOG
configBUS_BLOCKED_DEDUP_WINDOW_SECONDS
🔐 secretHRSI_BRIDGE_TOKEN
configHRSI_BRIDGE_TOKEN_FILE
🔐 secretANTHROPIC_API_KEY
🔐 secretCLOUDFLARE_API_TOKEN
🔐 secretSUPADATA_API_KEY
// quality suggestions

Tool annotations

4/238 tools have annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

234/238 tools missing one or more hints — bif_start_session (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); bif_get_template (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); bif_validate_batch (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +231 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

99/238 tools referenced in tests (42%)

Write tests that reference each tool by name so every tool has at least one test.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/hummbl-io/oss)](https://m8ven.ai/mcp/hummbl-io/oss)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: 6fd16088a175a7741c9d726216c63ec161d25cb9
code hash: 4880c08514e79f05cebcfb451f667e02cbcb202de4040003a31eb00418ad6df3
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client