Flaim Fantasy

Item: Flaim Fantasy
Rating: 39
Author: M8ven

Read-only fantasy analysis for ESPN, Yahoo, and Sleeper leagues via MCP

→ jdguggs10/flaim · listed on official

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Official Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

31 flows detected: NEXT_PUBLIC_AUTH_WORKER_URL, AUTH_WORKER_URL. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 6 credentials: CLERK_SECRET_KEY, INTERNAL_SERVICE_TOKEN, RESEND_API_KEY, RESEND_CONTACTS_API_KEY, RESEND_EVENTS_API_KEY, SUPABASE_SERVICE_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAUTH_WORKER_URL

🔐 secretCLERK_SECRET_KEY

configFLAIM_EMAILS_ENABLED

🔐 secretINTERNAL_SERVICE_TOKEN

configNEXT_PUBLIC_AUTH_WORKER_URL

configNEXT_PUBLIC_EXTENSION_IDS

configNEXT_PUBLIC_SITE_URL

🔐 secretRESEND_API_KEY

🔐 secretRESEND_CONTACTS_API_KEY

configRESEND_CONTACT_SEGMENT_ID

configRESEND_CONTACT_SYNC_ENABLED

🔐 secretRESEND_EVENTS_API_KEY

configRESEND_WELCOME_AUTOMATION_ENABLED

🔐 secretSUPABASE_SERVICE_KEY

configSUPABASE_URL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/jdguggs10-flaim-1ft75v)](https://m8ven.ai/mcp/jdguggs10-flaim-1ft75v)

commit: 34123dad992593e782390dec65c8e936dce6c1e4

code hash: 92471b13108d1c95229c0bd696873d60f2b7326ab08c1f53fd38a3d92071c35a

verified: 6/10/2026, 10:42:21 AM

view raw JSON →