Back to MCP Trust Indexm8ven
0
/ 100
1 month ago
glama

AXIS iliad

Axis Iliad turns messy codebases into 86 canonical, deterministic artifacts across 18 programs. From raw repos to production-ready AGENTS.md, compliance kits, canvas packs and agent-ready foundations — the authoring layer for the natural language development era.

→ lastmanupinc-hub/AXIS-iliad· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: STRIPE_SECRET_KEY. We can’t prove the destination matches the brand the credential belongs to.
🚨
Reads files from sensitive locations
Touches: private-key.pem
⚠️
Known vulnerabilities in dependencies: 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 12 credentials: ADMIN_API_KEY, FIRECRAWL_API_KEY, GITHUB_CLIENT_SECRET, GITHUB_TOKEN, JWT_PRIVATE_KEY, MPP_SECRET_KEY, OAUTH_JWT_PRIVATE_KEY, OAUTH_JWT_PUBLIC_KEY, PAID_API_KEY, PAID_WEBHOOK_SIGNING_KEY, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 high1 medium

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highvite@8.0.8GHSA-fx2h-pf6j-xcff

vite: `server.fs.deny` bypass on Windows alternate paths

mediumvite@8.0.8GHSA-v6wh-96g9-6wx3

launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretADMIN_API_KEY
configAXIS_E2E
configAXIS_E2E_BASE
configAXIS_ENABLE_TEST_LOGS
configAXIS_WEB_URL
configCORS_ORIGIN
configDOCKER_CONTAINER
🔐 secretFIRECRAWL_API_KEY
configGITHUB_CALLBACK_URL
configGITHUB_CLIENT_ID
🔐 secretGITHUB_CLIENT_SECRET
🔐 secretGITHUB_TOKEN
🔐 secretJWT_PRIVATE_KEY
configKEEP_ALIVE_TIMEOUT_MS
configLOG_LEVEL
configMAX_BODY_BYTES
🔐 secretMPP_SECRET_KEY
🔐 secretOAUTH_JWT_PRIVATE_KEY
🔐 secretOAUTH_JWT_PUBLIC_KEY
configPAID_API_BASE_URL
🔐 secretPAID_API_KEY
configPAID_MERCHANT_ID
configPAID_PLAN_PRO_ANNUAL
configPAID_PLAN_PRO_MONTHLY
🔐 secretPAID_WEBHOOK_SIGNING_KEY
configPORT
configREQUEST_TIMEOUT_MS
configSTRIPE_PRICE_ID_GROWTH
configSTRIPE_PRICE_ID_GROWTH_ANNUAL
configSTRIPE_PRICE_ID_PAID
configSTRIPE_PRICE_ID_PAID_ANNUAL
configSTRIPE_PRICE_ID_PRO
configSTRIPE_PRICE_ID_PRO_ANNUAL
configSTRIPE_PRICE_ID_STARTER
configSTRIPE_PRICE_ID_STARTER_ANNUAL
configSTRIPE_PRICE_ID_SUITE
🔐 secretSTRIPE_SECRET_KEY
🔐 secretSTRIPE_WEBHOOK_SECRET
configVITEST
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/lastmanupinc-hub-axis-iliad-84te8h)](https://m8ven.ai/mcp/lastmanupinc-hub-axis-iliad-84te8h)
commit: 9cdf1b0d0072592132bdfafa65617299c1c14331
code hash: a517e81a001915b472489ab0cd381345161e601acbca913a6cdea3461d63aa72
verified: 6/17/2026, 11:55:59 AM
view raw JSON →