ChatGPT Bookmark Site MCP Server

Item: ChatGPT Bookmark Site MCP Server
Rating: 1
Author: M8ven

Enables users to search, read, and query saved bookmark content via a read-only MCP interface, with full-text and optional semantic search.

→ madebypan/chatgpt-bookmark-site · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 6 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: GEMINI_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies6 high6 medium

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highnext@16.2.6GHSA-6gpp-xcg3-4w24

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

highnext@16.2.6GHSA-89xv-2m56-2m9x

Next.js: Server-Side Request Forgery in Server Actions on custom servers

highnext@16.2.6GHSA-m99w-x7hq-7vfj

Next.js: Denial of Service in App Router using Server Actions

highnext@16.2.6GHSA-p9j2-gv94-2wf4

Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

highreact-server-dom-webpack@19.2.6GHSA-wx67-qw84-cm4g

react-server-dom: Denial of Service in Server Functions

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configCODEX_SANDBOX

🔐 secretGEMINI_API_KEY— ：可選，請設為 server-side Secret；啟用語意搜尋與附引用問答。未設定時，收藏、全文搜尋、匯出與其他 MCP 工具仍可使用。

configMINIFLARE_REGISTRY_PATH

configWRANGLER_LOG_PATH

configWRANGLER_WRITE_LOGS

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/madebypan-chatgpt-bookmark-site-ir5swy)](https://m8ven.ai/mcp/madebypan-chatgpt-bookmark-site-ir5swy)

commit: 90315ec4035527035572c9bddb6e9061b599b77b

code hash: b55ae3fefe7f190981960f470cec2b4344d9fcae740de054af195a637374a42a

verified: 7/25/2026, 8:38:08 AM

view raw JSON →