/ 100

6 days ago

glama

xmcp-core

Item: xmcp-core
Rating: 69
Author: M8ven

A generic X/bookmark intelligence MCP core for ingesting, enriching, and retrieving bookmarks with semantic search, brief generation, and academic paper scanning, exposed as MCP tools.

→ irinityhq/xmcp-core · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 9 credentials: X_BEARER_TOKEN, XAI_API_KEY, GEMINI_API_KEY, X_OAUTH_CONSUMER_KEY, X_OAUTH_CONSUMER_SECRET, X_OAUTH_ACCESS_TOKEN, X_OAUTH_ACCESS_SECRET, X_CLIENT_SECRET, XMCP_WEBHOOK_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretX_BEARER_TOKEN

🔐 secretXAI_API_KEY

configXMCP_TOPICS_FILE— JSON list or { "topics": [...] } file.

configXMCP_RERANK_MODEL

configXMCP_HYDE_MODEL

configXMCP_HYDE_EXPANSION

configXMCP_RERANK_TIMEOUT_S

configXMCP_HYDE_TIMEOUT_S

configXMCP_RERANK_TOP_K

configXMCP_RERANK_SKIP_LIMIT

configXMCP_RERANK_DECISIVE_MARGIN

configXMCP_RERANK_CACHE_TTL_S

configXMCP_RERANK_CACHE_MAX

configXMCP_DIVERSITY_AUTHOR_CAP

configXMCP_DIVERSITY_TOPIC_CAP

configXMCP_BUDGET_ENABLED

configXMCP_BUDGET_CALLS_ENRICH

configXMCP_BUDGET_CALLS_CATEGORIZE

configXMCP_BUDGET_CALLS_RERANK

configXMCP_BUDGET_CALLS_RADAR

configXMCP_BUDGET_CALLS_PAPERS

configXMCP_BUDGET_CALLS_INGEST

configXMCP_BUDGET_CALLS_X_API

configXMCP_BUDGET_TOKENS_ENRICH

configXMCP_BUDGET_TOKENS_CATEGORIZE

configXMCP_BUDGET_TOKENS_RERANK

configXMCP_BUDGET_TOKENS_RADAR

configXMCP_BUDGET_TOKENS_PAPERS

configXMCP_BUDGET_TOKENS_INGEST

configXMCP_BUDGET_TOKENS_X_API

configXMCP_BUDGET_QPS_ENRICH

configXMCP_BUDGET_QPS_CATEGORIZE

configXMCP_BUDGET_QPS_RERANK

configXMCP_BUDGET_QPS_RADAR

configXMCP_BUDGET_QPS_PAPERS

configXMCP_BUDGET_QPS_INGEST

configXMCP_BUDGET_QPS_X_API

configVERTEX_EMBEDDING_MODEL

🔐 secretGEMINI_API_KEY

configVERTEX_PROJECT

configVERTEX_EMBEDDING_LOCATION

configXMCP_OAUTH_TOKEN_PATH— explicit OAuth2 token file path.

configX_CLIENT_ID

🔐 secretX_OAUTH_CONSUMER_KEY

🔐 secretX_OAUTH_CONSUMER_SECRET

🔐 secretX_OAUTH_ACCESS_TOKEN

🔐 secretX_OAUTH_ACCESS_SECRET

configXMCP_WATCHLIST_PATH— watchdog keyword file. Defaults to

configXMCP_SECRETS_FILE

configREDIRECT_URI

🔐 secretX_CLIENT_SECRET

configX_OAUTH_CALLBACK_HOST

configX_OAUTH_CALLBACK_PATH

configX_API_DEBUG

configXMCP_INCLUDE_X_API— 0: build the MCP server with only local intel/model tools.

configFASTMCP_EXPERIMENTAL_ENABLE_NEW_OPENAPI_PARSER

configX_API_BASE_URL

configX_API_TIMEOUT

configX_OAUTH_PRINT_AUTH_HEADER

configX_B3_FLAGS

🔐 secretXMCP_WEBHOOK_SECRET

configMCP_HOST

configMCP_PORT

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/irinityhq-xmcp-core-zgwvwy)](https://m8ven.ai/mcp/irinityhq-xmcp-core-zgwvwy)

commit: 72141d06bd7181c9488ebb3a7c217acf800dec4c

code hash: fd3125741757bbc40231943023d76aaa331c5831fbaeda8e6bd1ff9ebae25835

verified: 7/25/2026, 8:35:11 AM

view raw JSON →