Back to MCP Trust Indexm8ven
0
/ 100
1 month ago
glama

mcp-localintel

The routing layer between AI agents and local Florida businesses. Live data on permits, sector gaps, and market signals across 2,383 ZIP codes — so when an agent, voice assistant, or real customer needs something done, the right business gets the job. Ask LocalIntel Claim Your Listing

→ MCFLAMINGO/gsb-swarm· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
11 flows detected: TWILIO_AUTH_TOKEN, X_CLIENT_SECRET, TELEGRAM_BOT_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Known vulnerabilities in dependencies: 16 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 31 credentials: ADMIN_TOKEN, AGENT_WALLET_PRIVATE_KEY, ALPHA_SCANNER_PRIVATE_KEY, Bearer_Token, CENSUS_API_KEY, DASHBOARD_PASSWORD, INTERNAL_SECRET, NVIDIA_API_KEY, OPERATOR_SECRET, POS_ENCRYPT_KEY, RESEND_API_KEY, SMTP_PASS, SOLANA_AGENT_PRIVATE_KEY, SOLANA_PUMP_PRIVATE_KEY, SOL_PRIVATE_KEY, STRIPE_SECRET_KEY, TELEGRAM_BOT_TOKEN, THREAD_WRITER_PRIVATE_KEY, THROW_TEST_SECRET, TWILIO_AUTH_TOKEN, UPSTASH_REDIS_REST_TOKEN, VAPID_PRIVATE_KEY, VAPID_PUBLIC_KEY, VIRTUALS_API_KEY, WALLET_PROFILER_PRIVATE_KEY, X_ACCESS_TOKEN, X_ACCESS_TOKEN_SECRET, X_API_KEY, X_API_SECRET, X_BEARER_TOKEN, X_CLIENT_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies16 high14 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

highaxios@1.6.0GHSA-35jp-ww65-95wh

axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

highaxios@1.6.0GHSA-3g43-6gmg-66jw

axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

highaxios@1.6.0GHSA-43fc-jf86-j433

Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig

highaxios@1.6.0GHSA-4hjh-wcwx-xvwj

Axios is vulnerable to DoS attack through lack of data size check

highaxios@1.6.0GHSA-6chq-wfr3-2hj9

Axios: Header Injection via Prototype Pollution

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configACTIVE_STATES
🔐 secretADMIN_TOKEN
🔐 secretAGENT_WALLET_PRIVATE_KEY
configALPHA_SCANNER_ENTITY_ID
🔐 secretALPHA_SCANNER_PRIVATE_KEY
configALPHA_SCANNER_SIGNER_PK
configALPHA_SCANNER_WALLET_ADDRESS
configALPHA_SCANNER_WALLET_ID
configARB_RPC_URL
configBASE_RPC_URL
configBASE_TREASURY
configBAZAAR_PAYER_PK
configBEA_API
configBEA_FORCE
🔐 secretBearer_Token
🔐 secretCENSUS_API_KEY
configCEO_ACP_AGENT_ID
configCEO_ENTITY_ID
configCEO_WALLET_ADDRESS
configCensus_Data_API
🔐 secretDASHBOARD_PASSWORD
configDATA_DIR
configDATA_INGEST_PORT
configDB_POOL_MAX
configEMBEDDING_SERVICE_URL
configETH_RPC_URL
configFINANCIAL_ANALYST_ENTITY_ID
configFINANCIAL_ANALYST_WALLET_AD
configFULL_REFRESH
configGSB_SOL_WALLET
configGSB_SWARM_URL
configHELIUS_RPC_URL
🔐 secretINTERNAL_SECRET
configLOCAL_INTEL_DB_URL
configLOCAL_INTEL_MCP_PORT
configLOCAL_INTEL_PORT
configLOCAL_INTEL_TREASURY
configMCP_BASE_URL
🔐 secretNVIDIA_API_KEY
🔐 secretOPERATOR_SECRET
configORDER_FEE_PCT
configOWNER_ALERT_PHONE
configPOLY_RPC_URL
configPORT
🔐 secretPOS_ENCRYPT_KEY
configRAID_PRICE_USD
configRESEED_JOB_ID
configRESEED_ONLY
🔐 secretRESEND_API_KEY
configRFQ_FLAT_FEE
configRFQ_VALUE_PCT
configROUTING_ENABLED
configSKILL_FEEDBACK_FILE
configSMTP_FROM
configSMTP_HOST
🔐 secretSMTP_PASS
configSMTP_PORT
configSMTP_USER
🔐 secretSOLANA_AGENT_PRIVATE_KEY
🔐 secretSOLANA_PUMP_PRIVATE_KEY
configSOLANA_RPC_URL
🔐 secretSOL_PRIVATE_KEY
🔐 secretSTRIPE_SECRET_KEY
configSWARM_MEMORY_FILE
configTARGET_STATE
🔐 secretTELEGRAM_BOT_TOKEN
configTELEGRAM_CHANNEL_ID
configTELEGRAM_GROUP_ID
configTELEGRAM_SWAP_BOT
configTHREAD_WRITER_ENTITY_ID
🔐 secretTHREAD_WRITER_PRIVATE_KEY
configTHREAD_WRITER_SIGNER_PK
configTHREAD_WRITER_WALLET_ADDRESS
configTHREAD_WRITER_WALLET_ID
configTHROW_HOST_PK
configTHROW_PLAYER_PK
🔐 secretTHROW_TEST_SECRET
configTHROW_TREASURY_PK
configTHROW_WATCHER_URL
configTOKEN_ANALYST_ENTITY_ID
configTOKEN_ANALYST_PK
configTOKEN_ANALYST_SIGNER_PK
configTOKEN_ANALYST_WALLET_ADDRESS
configTOKEN_ANALYST_WALLET_ID
configTWILIO_ACCOUNT_SID
🔐 secretTWILIO_AUTH_TOKEN
configTWILIO_FROM_NUMBER
configTWILIO_PHONE_NUMBER
🔐 secretUPSTASH_REDIS_REST_TOKEN
configUPSTASH_REDIS_REST_URL
configUPSTASH_REDIS_URL
configVAPID_EMAIL
🔐 secretVAPID_PRIVATE_KEY
🔐 secretVAPID_PUBLIC_KEY
🔐 secretVIRTUALS_API_KEY
configWALLET_PROFILER_ENTITY_ID
🔐 secretWALLET_PROFILER_PRIVATE_KEY
configWALLET_PROFILER_SIGNER_PK
configWALLET_PROFILER_WALLET_ADDRESS
configWALLET_PROFILER_WALLET_ID
🔐 secretX_ACCESS_TOKEN
🔐 secretX_ACCESS_TOKEN_SECRET
🔐 secretX_API_KEY
🔐 secretX_API_SECRET
🔐 secretX_BEARER_TOKEN
configX_CALLBACK_URL
configX_CLIENT_ID
🔐 secretX_CLIENT_SECRET
configZIPS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/mcflamingo-gsb-swarm-gvw36y)](https://m8ven.ai/mcp/mcflamingo-gsb-swarm-gvw36y)
commit: 85ce5fdb3b9cf8bdd51d00d704d545adc8614400
code hash: 5c078fec2f194262426c4085b7215050c6fa56add9dc37e8cc620010cc986d10
verified: 6/14/2026, 10:21:47 AM
view raw JSON →