Workbench MCP Server

Provides remote project access via MCP, enabling file operations, code search, git commands, and background Claude CLI execution.

→ jazz-max/workbench-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool descriptions don’t match what handlers do

3 tools describe read intent but their handlers mutate — git_status (line 6: execFile('git', args, { cwd, timeout: EXEC_TIMEOUT, encoding: 'utf-8' }, (err, stdout) => {); project_info (line 37: execFileSync('git', ['branch', '--show-current'], {); search_code (line 36: execFile('grep', args, {)

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: MCP_AUTH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretMCP_AUTH_TOKEN— отредактируй .env: задай и MCP_PROJECT_ROOT

configMCP_PORT— 3100 Порт сервера

configMCP_PROJECT_ROOT— Изначально написан для [Workbench](https://github.com/jazz-max/workbench), но работает с любым проектом — путь задаётся через .

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/jazz-max-workbench-mcp-z1alt1)](https://m8ven.ai/mcp/jazz-max-workbench-mcp-z1alt1)

commit: 856eff1bbe1f06669e76adcafc31a3e425014a53

code hash: 0b0776aa582b1a590d4cc8e97f8fb1ee29bc3077ab5ab7f7886a692660937a79

verified: 6/27/2026, 8:51:03 AM

view raw JSON →