/ 100

2 days ago

pulsemcp

AgentCrush

Market intelligence for the AI agent economy with rankings, search, comparison, and methodology data.

→ kristof-sudo/agentcrush-app · listed on pulsemcp

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

15 flows detected: GITHUB_TOKEN, TELEGRAM_BOT_TOKEN, ANTHROPIC_API_KEY. We can’t prove the destination matches the brand the credential belongs to.

⚠️

Tool descriptions don’t match what handlers do

1 tool describes read intent but its handler mutates — append_log (line 138: fs.appendFile(path.join(BRAIN_PATH, 'Log.md'), block))

⚠️

Known vulnerabilities in dependencies: 8 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 18 credentials: ADMIN_REVIEW_KEY, AGENTCRUSH_GITHUB_TOKEN, AGENTVERSE_API_KEY, ANTHROPIC_API_KEY, GITHUB_TOKEN, HF_TOKEN, NEXT_PUBLIC_SUPABASE_ANON_KEY, NEYNAR_API_KEY, PH_TOKEN, PRODUCTHUNT_ACCESS_TOKEN, PRODUCTHUNT_TOKEN, PRODUCT_HUNT_ACCESS_TOKEN, REDDIT_CLIENT_SECRET, SEMANTIC_SCHOLAR_API_KEY, SUPABASE_SERVICE_KEY, SUPABASE_SERVICE_ROLE_KEY, TELEGRAM_BOT_TOKEN, X_BEARER_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretADMIN_REVIEW_KEY

configAGENTCRUSH_FID

🔐 secretAGENTCRUSH_GITHUB_TOKEN

🔐 secretAGENTVERSE_API_KEY

🔐 secretANTHROPIC_API_KEY

configBRAIN_PATH

configCDP_TEST_DESTINATION

configCOMPETITOR_FORCE_PUSH

configCOST_CRIT_PCT

configCOST_FORCE_REPORT

configCOST_LOG_PATH

configCOST_MONITOR_HISTORY

configCOST_MONTHLY_CAP_USD

configCOST_WARN_PCT

configGITHUB_REPOSITORY

🔐 secretGITHUB_TOKEN

🔐 secretHF_TOKEN

configMOBILE_QA_BASE_URL

configMOBILE_QA_FORCE_PUSH

configMOBILE_QA_ROUTES

🔐 secretNEXT_PUBLIC_SUPABASE_ANON_KEY

configNEXT_PUBLIC_SUPABASE_URL

configNEXT_SHIP_BASE_URL

🔐 secretNEYNAR_API_KEY

🔐 secretPH_TOKEN

🔐 secretPRODUCTHUNT_ACCESS_TOKEN

🔐 secretPRODUCTHUNT_TOKEN

🔐 secretPRODUCT_HUNT_ACCESS_TOKEN

configREDDIT_CLIENT_ID

🔐 secretREDDIT_CLIENT_SECRET

configRUN_DATE

🔐 secretSEMANTIC_SCHOLAR_API_KEY

configSTALE_BASE_URL

configSTALE_FORCE_PUSH

configSTALE_ROUTES

🔐 secretSUPABASE_SERVICE_KEY

🔐 secretSUPABASE_SERVICE_ROLE_KEY

configSUPABASE_URL

🔐 secretTELEGRAM_BOT_TOKEN

configTELEGRAM_CHAT_ID

configTELEGRAM_SENDER_PATH

🔐 secretX_BEARER_TOKEN

configX_HANDLE

configX_USER_ID

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 10 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/kristof-sudo-agentcrush-app-18744q)](https://m8ven.ai/mcp/kristof-sudo-agentcrush-app-18744q)

commit: 424cece7beb4207bae95c898082ba71bcd062ec5

code hash: fcf849931da279d6f1417c5e5560766273f6df7ad6a49cbcd6cbae0c86bf8bee

verified: 6/1/2026, 1:36:00 PM

view raw JSON →