Back to MCP Trust Indexm8ven
0
/ 100
23 hours ago
glama

mcp-remote-agent

Enables AI agents to remotely read/write files and execute commands on Linux servers via MCP protocol.

→ knownothing20/mcp-remote-agent· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Reads files from sensitive locations
Touches: ~/.agentport/daemon/.env
⚠️
Known vulnerabilities in dependencies: 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 5 credentials: AUTH_TOKEN, MCP_REMOTE_AUTH_TOKEN, MCP_REMOTE_INSTANCE_KEY, NIUMA_SSH_AUTH_TOKEN, NIUMA_SSH_INSTANCE_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 high9 medium

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highaxios@1.16.0GHSA-gcfj-64vw-6mp9

Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning

mediumaxios@1.16.0GHSA-42h9-826w-cgv3

Axios: Excessive recursion in formDataToJSON can cause denial of service

mediumaxios@1.16.0GHSA-7q8q-rj6j-mhjq

Axios: Nested axios option objects can consume polluted prototype values

mediumaxios@1.16.0GHSA-f4gw-2p7v-4548

Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios

mediumaxios@1.16.0GHSA-hcpx-6fm6-wx23

Axios form serializer maxDepth bypass via {} metatoken

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configADMIN_TOKENS
configAGENTPORT_CLIENT_MODE
configAGENTPORT_CLIENT_STATE_PATH
configAGENTPORT_CONNECTIONS_PATH
configAGENTPORT_DISABLE_PARENT_WATCHDOG
configAGENTPORT_ENV_PATH
configAGENTPORT_LEGACY_CONNECTIONS_PATH
configAGENTPORT_LEGACY_ENTRY
configAGENTPORT_LEGACY_ORIGIN
configAGENTPORT_LEGACY_PORT
configAGENTPORT_PARENT_WATCHDOG_MS
configAGENTPORT_PROJECTS_PATH
configAGENTPORT_PUBLIC_HOST
configAGENTPORT_PUBLIC_PORT
configAGENTPORT_SAFE_JOB_TIMEOUT_MS
configAGENTPORT_SESSION_ID
configALLOWED_COMMANDS— Command Execution Limits: Configurable ALLOW_BASH_EXEC and
configALLOW_BASH_EXEC— Command Execution Limits: Configurable and ALLOWED_COMMANDS
configAUDIT_LOG_PATH
configAUDIT_MAX_BYTES
configAUDIT_MAX_FILES
🔐 secretAUTH_TOKEN
configAUTH_TOKENS— manually copy raw values.
configAUTH_TOKENS_JSON
configBIND_HOST
configCODEX_SESSION_ID
configENABLE_DASHBOARD
configEXEC_MAX_CONCURRENCY— 4 Maximum commands running at the same time
configEXEC_QUEUE_TIMEOUT_MS— 15000 Maximum time a request waits for an execution slot
configEXEC_TIMEOUT_MS— 120000 Timeout for a running command
configJOBS_DIR
configJOB_LOG_TAIL_BYTES
configJOB_WORKER_READY_TIMEOUT_MS
configMAX_JOB_TIMEOUT_MS
🔐 secretMCP_REMOTE_AUTH_TOKEN
configMCP_REMOTE_CLIENT_ID
configMCP_REMOTE_CONNECTION
configMCP_REMOTE_CONNECTIONS_PATH
🔐 secretMCP_REMOTE_INSTANCE_KEY
configMCP_REMOTE_LOG_DATA_MAX_BYTES
configMCP_REMOTE_LOG_MAX_BYTES
configMCP_REMOTE_LOG_MAX_SEGMENTS_PER_DAY
configMCP_REMOTE_LOG_SEGMENT_MAX_BYTES
configMCP_REMOTE_LOG_TOOL_START
configMCP_REMOTE_LOG_TOOL_SUCCESS
configMCP_REMOTE_PRESERVE_CRLF
configMCP_REMOTE_RUNTIME_MODE
configMCP_REMOTE_SHARED_CONNECTIONS_PATH
configMCP_REMOTE_SLOW_CALL_MS
configMCP_REMOTE_TIMEOUT_MS
configMCP_REMOTE_URL
configMCP_REMOTE_V3_CONNECTIONS_PATH
🔐 secretNIUMA_SSH_AUTH_TOKEN
configNIUMA_SSH_CLIENT_ID
configNIUMA_SSH_CONNECTION
🔐 secretNIUMA_SSH_INSTANCE_KEY
configNIUMA_SSH_PRESERVE_CRLF
configNIUMA_SSH_REMOTE_URL
configNIUMA_SSH_RUNTIME_MODE
configNIUMA_SSH_SHARED_CONNECTIONS_PATH
configNIUMA_SSH_TIMEOUT_MS
configPORT
configWORKSPACE_ROOT— Workspace Isolation: File operations restricted within
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/knownothing20-mcp-remote-agent-42120k)](https://m8ven.ai/mcp/knownothing20-mcp-remote-agent-42120k)
commit: e01c42d840e94372f75308ddfde468d835ff9967
code hash: 0624383d974b80f70d0a11761154861e93946fb8d1ec00c36132701cb305af6a
verified: 7/30/2026, 8:23:34 PM
view raw JSON →