Back to MCP Trust Indexm8ven
74
/ 100
28 days ago
github_topic

mcp-observatory

CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.

→ KryptosAI/mcp-observatory· listed on github_topic
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

GitHubGlama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: MCP_OBSERVATORY_CLOUD_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 6 credentials: GH_TOKEN, GITHUB_PRIVATE_KEY, GITHUB_TOKEN, GITHUB_WEBHOOK_SECRET, MCP_OBSERVATORY_CLOUD_TOKEN, MCP_OBSERVATORY_STATS_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configBUILDKITE
configCODEBUILD_BUILD_ID
configDO_NOT_TRACK
🔐 secretGH_TOKEN
configGITHUB_ACTIONS
configGITHUB_APP_ID
🔐 secretGITHUB_PRIVATE_KEY
configGITHUB_REPOSITORY
configGITHUB_SHA
🔐 secretGITHUB_TOKEN
🔐 secretGITHUB_WEBHOOK_SECRET
configGITLAB_CI
configJENKINS_URL
🔐 secretMCP_OBSERVATORY_CLOUD_TOKEN
configMCP_OBSERVATORY_CONTACT— your-team-contact
configMCP_OBSERVATORY_DEBUG
configMCP_OBSERVATORY_MATRIX_TIMEOUT_MS
configMCP_OBSERVATORY_METRICS_PORT
configMCP_OBSERVATORY_METRICS_ROOT
configMCP_OBSERVATORY_ORG— your-company.com
🔐 secretMCP_OBSERVATORY_STATS_TOKEN
configMCP_OBSERVATORY_TELEMETRY_D1_DATABASE
configMCP_OBSERVATORY_TELEMETRY_DEBUG
configMCP_OBSERVATORY_TELEMETRY_DISABLED
configMCP_OBSERVATORY_TELEMETRY_URL
configMCP_OBSERVATORY_TELEMETRY_WRANGLER_CONFIG
configNO_COLOR
configPORT
configTF_BUILD
configTRAVIS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/kryptosai-mcp-observatory-340baz)](https://m8ven.ai/mcp/kryptosai-mcp-observatory-340baz)
commit: f630efa4a21ad1a68de97eb8678a2dbc728ecb04
code hash: aa7ddacf12b2ec67f79bd2a0dcb9eb823ef4d4e30a8e5bf90f3d1159fe136d39
verified: 7/3/2026, 9:48:46 AM
view raw JSON →