55
/ 100
1 month ago
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 1 credential: IMANDRA_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies3 high
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
IMANDRA_API_KEY— your Imandra API key, available from [Imandra Universe](https://universe.imandra.ai/user/api-keys).config
IMANDRA_MCP_SERVER— name/ID of the Imandra Universe MCP server to use (e.g. reasoner_gateway). Find available MCP servers in the [Imandra Universe gallery](https://universe.imandra.ai/gallery?tag=MCP%20server).config
REMOTE_URL— the URL of your remote MCP server (e.g. for a dev or local deployment). If not specified, defaults to https://api.imandra.ai/v1beta1/tools/mcp/${IMANDRA_MCP_SERVER}.// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/imandra-ai-mcp-proxy-12e95d)commit: 32eff3c10ff71b8ed604c6c8805dde596fb963a2
code hash: f7b27b90db32e8a2654f21710a3a415bc3515badc48a386641f1c5d4b7c064de
verified: 6/30/2026, 9:56:03 AM