/ 100

1 day ago

glama

helm-personal-os

Item: helm-personal-os
Rating: 74
Author: M8ven

Provides MCP tools to read and update a local-first personal OS for goals, tasks, habits, food, workouts, and check-ins. Enables assistants to manage daily life data and interact with an evidence-grounded AI coach.

→ joelpfrank/helm-personal-os · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

2 flows detected: ANTHROPIC_API_KEY. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 5 credentials: ANTHROPIC_API_KEY, DASHBOARD_TOKEN, HELM_COACH_BOT_TOKEN, MCP_HTTP_TOKEN, TELEGRAM_BOT_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretANTHROPIC_API_KEY

configANTHROPIC_MAX_TOKENS

configANTHROPIC_MODEL

configCALENDAR_SYNC_MS

configDASHBOARD_DB_PATH

configDASHBOARD_FLAVOR

🔐 secretDASHBOARD_TOKEN

configDASHBOARD_URL

configFFMPEG_BIN

configHELM_AUTH_RATE_MAX

configHELM_AUTH_RATE_WINDOW_MS

configHELM_AUTH_STATUS_TTL_MS

configHELM_CLAUDE_BIN

configHELM_CLI_REF

configHELM_COACH_ALLOWED_USER_ID

🔐 secretHELM_COACH_BOT_TOKEN

configHELM_DEMO_NOW

configHELM_DEMO_TEST_CORRUPT_READBACK

configHELM_DEMO_TEST_FAIL_AFTER_WRITE

configHELM_DISABLE_TELEGRAM_NOTIFICATIONS

configHELM_MIGRATE_TEST_CORRUPT

configHELM_RATE_MAX

configHELM_RATE_WINDOW_MS

configHELM_URL

configHOST

configLLM_BACKEND

configMCP_HTTP_HOST

configMCP_HTTP_PORT

configMCP_HTTP_RATE_MAX

configMCP_HTTP_RATE_WINDOW_MS

🔐 secretMCP_HTTP_TOKEN

configMCP_PUBLIC_URL

configPORT

configTELEGRAM_ALLOWED_USER_ID

🔐 secretTELEGRAM_BOT_TOKEN

configVITE_API_TARGET

configWHISPER_CLI

configWHISPER_MODEL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/joelpfrank-helm-personal-os-dwj768)](https://m8ven.ai/mcp/joelpfrank-helm-personal-os-dwj768)

commit: 3e2c17e0b9d210c57a3a0be181db77b80e1a5bd6

code hash: 7f27f8fb20f9c10822dd9f14d417656d7e0a03000f95c63bda51a0e5fefdf796

verified: 7/31/2026, 9:03:33 AM

view raw JSON →