majrooo-mcp-devkit (Majrooo/majrooo-mcp-devkit) is an MCP server listed on the M8ven Trust Index. It scores 89 out of 100, grade B. It declares 17 tools. The publisher has proved control of what we score (Verified Publisher).

Back to MCP Trust IndexM8ven
B
Emerging
89/100

majrooo-mcp-devkit

MCP devkit — safe command execution, code analysis and refactoring tools for AI assistants

→ Majrooo/majrooo-mcp-devkit· listed on github_repo_search

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code VerifiedSandbox Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

gmail.com (@Majrooo) · Verified Publisher

Source: github_repo_search

⚡ Upgrade to Live Monitored

Connect your repo and M8ven re-verifies it on the push itself. Without it we re-check verified listings about once a day, so a fix can sit unseen. Read-only, one click, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
✅
17 tools verified — handlers match their declared behaviour
9 read-only tools verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
Are you the publisher? Confirm or correct these findings.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configMCP_BLOCK_CROSS_ROOT_READS1 or true → opt-in best-effort blocking of obvious reads outside the active root.
configMCP_EXTRA_ROOTSWorking directory (must be inside MCP_PROJECT_ROOT / MCP_EXTRA_ROOTS)
configMCP_PROJECT_NAMESFriendly names for projects, semicolon separated path=name pairs (see below). Alias paths are also included in the allowed roots, so projects registered only via this variable can be used with file-based tools.
configMCP_PROJECT_ROOTWorking directory (must be inside MCP_PROJECT_ROOT / MCP_EXTRA_ROOTS)
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/majrooo/majrooo-mcp-devkit)](https://m8ven.ai/mcp/majrooo/majrooo-mcp-devkit)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: bd5ac9be37a422b5e39d48f384a7d61409f68144
code hash: e6650e6bc12d88c9c586d6c943909c8595b20be3c140f5aaa5e1df907cb92492
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client