reachpad-mcp

Enables agents to share and hand off documents with stable URLs, comment, and group docs under a drop key, with tamper-evident versioning and no account required.

→ las7/reachpad-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 5 credentials: REACH_OWNER_KEY, REACH_READ_TOKEN, REACH_SERVICE_TOKEN, REACH_WORKSPACE_KEY, REACH_WRITE_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configREACH_ACTOR— attribution label recorded in the history (default mcp-agent; ignored as attribution on SSO-enforced instances)

configREACH_BASE_URL— reach instance (default https://reachpad.dev)

🔐 secretREACH_OWNER_KEY— account identity for reads and writes and replaces . Otherwise add

🔐 secretREACH_READ_TOKEN— operator bearer token for reading private docs

🔐 secretREACH_SERVICE_TOKEN— On an SSO-enforced instance, add "" (minted at /my/tokens) — it is your

🔐 secretREACH_WORKSPACE_KEY

🔐 secretREACH_WRITE_TOKEN— operator bearer token for create/edit/delete (optional; creation is open unless gated)

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/las7-reachpad-mcp-1yl89m)](https://m8ven.ai/mcp/las7-reachpad-mcp-1yl89m)

commit: e36d2b0b0fa965b407667be975f3237940dc2df8

code hash: 4c9e63d56a3feb80b656c1fe675de02f535a20384b879449b237ea34847c0a29

verified: 6/27/2026, 8:51:44 AM

view raw JSON →