Back to MCP Trust Indexm8ven
65
/ 100
10 days ago
glama

homelab-mcp

An MCP server exposing 72 tools across 26 homelab services, enabling LLMs to monitor and manage infrastructure, media, storage, and networking with a single endpoint.

→ jo-nike/homelab_mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
74 tools verified — handlers match their declared behaviour
64 read-only tools verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 23 credentials: PROXMOX_TOKEN_SECRET, PORTAINER_API_KEY, PLEX_TOKEN, SONARR_API_KEY, RADARR_API_KEY, OVERSEERR_API_KEY, TRANSMISSION_PASSWORD, SYNOLOGY_PASSWORD, PBS_TOKEN_SECRET, BACKBLAZE_APP_KEY, TECHNITIUM_PASSWORD, GITEA_TOKEN, WIREGUARD_PASSWORD, SCANOPY_API_KEY, VIKUNJA_TOKEN, NPM_PASSWORD, PROWLARR_API_KEY, MYSPEED_PASSWORD, HEALTHCHECKS_API_KEY, TAUTULLI_API_KEY, LITELLM_API_KEY, LLAMA_SERVER_API_KEY, SNYK_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configPROMETHEUS_URL
configLOKI_URL
configPROXMOX_URL
configPROXMOX_TOKEN_ID
🔐 secretPROXMOX_TOKEN_SECRET
configPORTAINER_URL
🔐 secretPORTAINER_API_KEY
configPLEX_URL
🔐 secretPLEX_TOKEN
configSONARR_URL
🔐 secretSONARR_API_KEY
configRADARR_URL
🔐 secretRADARR_API_KEY
configOVERSEERR_URL
🔐 secretOVERSEERR_API_KEY
configTRANSMISSION_URL
configTRANSMISSION_USERNAME
🔐 secretTRANSMISSION_PASSWORD
configSYNOLOGY_URL
configSYNOLOGY_USERNAME
🔐 secretSYNOLOGY_PASSWORD
configPBS_URL
configPBS_TOKEN_ID
🔐 secretPBS_TOKEN_SECRET
configBACKBLAZE_KEY_ID
🔐 secretBACKBLAZE_APP_KEY
configTECHNITIUM_URL
🔐 secretTECHNITIUM_PASSWORD
configGITEA_URL
🔐 secretGITEA_TOKEN
configSTACKS_BRANCH
configDOCS_BRANCH
configWIREGUARD_URL
🔐 secretWIREGUARD_PASSWORD
configWIREGUARD_USERNAME
configSCANOPY_URL
🔐 secretSCANOPY_API_KEY
configVIKUNJA_URL
🔐 secretVIKUNJA_TOKEN
configVIKUNJA_ALERT_PROJECT_ID
configNPM_URL
configNPM_EMAIL
🔐 secretNPM_PASSWORD
configPROWLARR_URL
🔐 secretPROWLARR_API_KEY
configCROWDSEC_URL
configMYSPEED_URL
🔐 secretMYSPEED_PASSWORD
configHEALTHCHECKS_URL
🔐 secretHEALTHCHECKS_API_KEY
configTAUTULLI_URL
🔐 secretTAUTULLI_API_KEY
configLITELLM_URL
🔐 secretLITELLM_API_KEY
configLLAMA_SERVER_URL
🔐 secretLLAMA_SERVER_API_KEY
configSEARXNG_URL
configMCP_TRANSPORT— Dual transport. stdio by default (for local MCP clients), streamable-http via (for network clients). HTTP mode adds an OIDC + trusted-LAN auth chain.
configAPP_VERSION
configMCP_TRUSTED_CIDRS
configMCP_CORS_ORIGINS
configAUTHENTIK_CLIENT_ID
configDOCS_DIR
configSTACKS_DIR
configVAULT_DIR
🔐 secretSNYK_TOKEN
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/jo-nike-homelab-mcp-1bi3hf)](https://m8ven.ai/mcp/jo-nike-homelab-mcp-1bi3hf)
commit: 33b2f68a17d2003c74be259e7efa80a16594f1ed
code hash: a6f2e0ec791832d0092299155063bcea56c6968f2776268779736d4fad3d4513
verified: 7/21/2026, 8:49:59 AM
view raw JSON →