67
/ 100
17 days ago
glama

IFRC GO MCP Server

Read-only MCP server for IFRC GO data, secured with Microsoft Entra ID OAuth/JWT, exposing datasets as MCP tools with rate limiting and PII filtering.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 3 credentials: STATE_SIGNING_SECRET, IFRCGO_API_TOKEN, IFRCGO_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configENTRA_TENANT_ID
configENTRA_AUDIENCE
configENTRA_CLIENT_ID
configENTRA_REQUIRED_SCOPE(default: mcp.access)
configMCP_SERVER_URL
🔐 secretSTATE_SIGNING_SECRET
configREQUIRED_GROUP_IDS(comma-separated)
configREQUIRED_APP_ROLES(comma-separated)
configSCOPE_NAME(default: ifrcgo)
configIFRCGO_API_BASE_URL(default: https://goadmin.ifrc.org/api/v2)
🔐 secretIFRCGO_API_TOKEN
configIFRCGO_USERNAME
🔐 secretIFRCGO_PASSWORD
configMCP_RATE_LIMIT_REQUESTS(default: 60)
configMCP_RATE_LIMIT_WINDOW_SECONDS(default: 60)
configHOST(default: 0.0.0.0)
configPORT(default: 8000)
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/jmargutt-go-mcp-demo-1ltnsj)](https://m8ven.ai/mcp/jmargutt-go-mcp-demo-1ltnsj)
commit: e28d606102adf15e4c8321543e18d6366e3e4893
code hash: 4cfecb5a2028c2a4ae45a46ebd365874f279292671bd3bd36d0b6780469b4d62
verified: 7/14/2026, 8:27:05 AM
view raw JSON →