hermes-cortex (lukemcqueen/hermes-cortex) is an MCP server listed on the M8ven Trust Index. It scores 39 out of 100, grade F. It declares 49 tools. No publisher has claimed this listing.

Warning

39/100

hermes-cortex

Item: hermes-cortex
Rating: 39
Author: M8ven

Config, skills, memory, and observability layer for my personal AI agent. Persistent knowledge base, ClawMetry dashboard, and self-improving workflow system.

→ lukemcqueen/hermes-cortex · listed on github_code

Warning. Serious findings were identified. Review the full report before connecting. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every push why connect →

Who stands behind it

lukemcqueen

Source: github_code

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings

🚨

Secret credentials may flow to a network call

4 flows detected: CORTEX_BUS_AUTH, CORTEX_BASIC_AUTH. We can’t prove the destination matches the brand the credential belongs to.

🚨

Reads files from sensitive locations

Touches: ~/hermes-cortex/.env, ~/.hermes/models.env, ~/langfuse/.env

🔐

You'll be asked for 7 credentials: CORTEX_BUS_TOKEN, CORTEX_BUS_PG_PASS, POSTGRES_PASSWORD, GATEWAY_SECRET, TELEGRAM_BOT_TOKEN, MYCORTEX_MEM_PASSWORD, AGENT_BUS_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// environment variables

To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.

configCORTEX_BUS_PORT

configHERMES_HOME

configCORTEX_DASHBOARD_PORT

configDOCKER_BIN

configCORTEX_BUS_URL

🔐 secretCORTEX_BUS_TOKEN

configCORTEX_BUS_AUTH

configCORTEX_BASIC_AUTH

configCORTEX_BUS_FALLBACK_URL

configCORTEX_INBOX_URL

configCORTEX_INBOX_AUTH

configAGENT_NAME

configCORTEX_BUS_PG_HOST

configCORTEX_BUS_PG_PORT

configCORTEX_BUS_PG_DB

configCORTEX_BUS_PG_USER

🔐 secretCORTEX_BUS_PG_PASS

configPOSTGRES_USER

🔐 secretPOSTGRES_PASSWORD

configCORTEX_BUS_RATE_LIMIT_PER_HOUR

configCORTEX_BUS_RATE_WINDOW_SECONDS

configPYENV_ROOT

configSCORE_SPEC

configSCORE_OUTPUT

configSCORE_PREVIOUS

configSCORE_TASK_ID

configSCORE_CYCLE_NUM

configSCORE_DB_PATH

configCORTEX_DEPLOY_HOME

configWATCHDOG_LOOKBACK_HOURS

configWATCHDOG_MAX_ALERTS

configHERMES_TIMEZONE

configTELEGRAM_API_BASE

🔐 secretGATEWAY_SECRET

🔐 secretTELEGRAM_BOT_TOKEN

configOLLAMA_EMBED_MODEL

configWEB_CACHE_EMBED_DIMS

🔐 secretMYCORTEX_MEM_PASSWORD

configMYCORTEX_MEM_PORT

configTASKS_STALE_HOURS

configBUS_URL

configOLLAMA_URL

configOLLAMA_MODEL

configPOLL_INTERVAL

configMAX_RETRIES

configVT_SECONDS

configFAILOVER_MIN_DOWN_MINUTES

configFAILOVER_CHECK_INTERVAL

configFAILOVER_DRY_RUN

configMOSES_HEALTH_URLS

configESTHER_HEALTH_URLS

configCORTEX_HEALTH_URL

configAGENT_BUS_URL

🔐 secretAGENT_BUS_TOKEN

configHC_AGENT

configCORTEX_REPO

configCORTEX_HOME

configIS_ORCHESTRATOR

configPENDING_DB_PATH

configHEALTH_HOSTNAME

configEXTERNAL_HEALTH_URL

configCORTEX_BUS_RETRY_DIR

configCORTEX_BUS_NO_OUTBOX

configTELEGRAM_NOTIFY_STATE_DIR

configTELEGRAM_NOTIFY_ENV_FILE

configTELEGRAM_HOME_CHANNEL

configTASKS_NOTIFY_MUTE

configTASKS_NOTIFY_QUIET

configSCORE_AUDITOR_LOOKBACK

configHERMES_MEMORY_DIR

configREVIEW_STATE_DIR

configREVIEW_DB_PATH

configSESSION_MINE_PATH

configSKILL_STUB_NAMES

configLOGNAME

configECHOKOREAN_REPO

configHERMES_PROFILE

configLEARNING_DB_ROLE

configLEARNING_DB

configMAX_COST_EXEMPT_PREFIX

configMAX_COST_DAILY_MULTIPLIER

configMAX_READ_ITERATIONS

// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

49/49 tools missing one or more hints — inbox_send (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); inbox_read (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); inbox_watch (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +46 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

25/49 tools referenced in tests (51%)

Write tests that reference each tool by name so every tool has at least one test.

No access to sensitive paths

Reads sensitive paths: ~/hermes-cortex/.env, ~/.hermes/models.env, ~/langfuse/.env

Remove reads of sensitive system paths. If you genuinely need them, document why in the README.

Secrets not logged

1 secret value sent to log.info

Redact or omit secret values from log output.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail

The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Verified](https://m8ven.ai/badge/mcp/lukemcqueen/hermes-cortex?variant=verified)](https://m8ven.ai/mcp/lukemcqueen/hermes-cortex)

Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.

commit: e1a5f13eb1f6d3e174955915d96ea7ec98f63214

code hash: 36e66065d5874b18e0a9a6df5e885a2b4a8424f28f9966b2c0b024e881f9b760

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client