Back to MCP Trust Indexm8ven
0
/ 100
10 days ago
glama

TailOpsMCP

A control plane gateway for managing distributed infrastructure through MCP, enabling centralized SSH, Docker, and HTTP target management with capability-based authorization and policy enforcement.

→ mdlmarkham/TailOpsMCP· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Reads files from sensitive locations
Touches: ~/.ssh/known_hosts, ~/.ssh/known_hosts
🔐
You'll be asked for 7 credentials: SYSTEMMANAGER_SHARED_SECRET, MCP_AUTH_CLIENT_SECRET, SYSTEMMANAGER_JWT_SECRET, TSIDP_CLIENT_SECRET, PROXMOX_PASSWORD, TAILSCALE_AUTH_KEY, SMTP_PASSWORD
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretSYSTEMMANAGER_SHARED_SECRET
configPYTHONIOENCODING
configMCP_AUTH_CLIENT_ID
🔐 secretMCP_AUTH_CLIENT_SECRET
configSYSTEMMANAGER_REQUIRE_AUTH
configSYSTEMMANAGER_ENABLE_APPROVAL
configSYSTEMMANAGER_ENABLE_RATE_LIMITING
configSYSTEMMANAGER_APPROVAL_WEBHOOK
configSYSTEMMANAGER_VALIDATION_MODE
configSYSTEMMANAGER_RATE_LIMIT_MODE
configSYSTEMMANAGER_AUTH_MODE
🔐 secretSYSTEMMANAGER_JWT_SECRET
configTSIDP_URL
configTSIDP_CLIENT_ID
🔐 secretTSIDP_CLIENT_SECRET
configTSIDP_SCOPES
configSYSTEMMANAGER_ALLOWED_BASE_PATHS
configTOON_ENVIRONMENT
configTOON_VERSION
configTOON_FORMAT
configTOON_TOKEN_BUDGET
configTOON_CACHE_SIZE
configSYSTEMMANAGER_INVENTORY
configLOG_LEVEL
configMCP_HOST
configMCP_PORT
configSYSTEMMANAGER_BASE_URL
configACCESS_CONTROL_DEFAULT_DENY
configCONTEXTUAL_PERMISSIONS
configRISK_BASED_ACCESS
configSEPARATION_OF_DUTIES
configCOMPLIANCE_STANDARDS
configAUTOMATED_COMPLIANCE_REPORTING
configAUTOMATED_EVIDENCE_COLLECTION
configDATA_RETENTION_POLICIES
configAUDIT_LOGGING_ENABLED
configACCESS_CONTROL_ENABLED
configMFA_REQUIRED_ROLES
configVULNERABILITY_SCANNING_ENABLED
configAUDIT_LOG_RETENTION_DAYS
configSECURITY_EVENT_RETENTION_DAYS
configSEPARATION_OF_DUTIES_ENABLED
configAPPROVAL_CHAIN_REQUIRED
configSYSTEMMANAGER_DISCOVERY_INTERVAL
configSYSTEMMANAGER_HEALTH_CHECK_INTERVAL
configSYSTEMMANAGER_MAX_CONCURRENT_PROBES
configSYSTEMMANAGER_AUTO_REGISTER
configSYSTEMMANAGER_MAX_FLEET_SIZE
configPROXMOX_HOST
configPROXMOX_USERNAME
🔐 secretPROXMOX_PASSWORD
configPROXMOX_TOKEN_NAME
configPROXMOX_TOKEN_VALUE
configPROXMOX_VERIFY_SSL
configTAILSCALE_ENABLED
configTAILSCALE_TAILNET
🔐 secretTAILSCALE_AUTH_KEY
configTAILSCALE_SSH_USER
configSMTP_HOST
configSMTP_PORT
configSMTP_USERNAME
🔐 secretSMTP_PASSWORD
configSLACK_WEBHOOK_URL
configTEAMS_WEBHOOK_URL
configALERT_LOG_FILE
configTAILSCALE_OIDC_ENABLED
configTAILSCALE_OIDC_ISSUER
configTAILSCALE_OIDC_AUDIENCE
configSESSION_TIMEOUT_HOURS
configMAX_CONCURRENT_SESSIONS
configSYSTEMMANAGER_POLICY_MODE
configSYSTEMMANAGER_ENABLE_DRY_RUN
configSYSTEMMANAGER_DISABLE_APPROVAL
configSYSTEMMANAGER_SELF_APPROVAL_TIMEOUT
configSSH_STRICT_HOST_KEY_CHECKING
configSYSTEMMANAGER_SNAPSHOT_DIR
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/mdlmarkham-tailopsmcp-1r6pzd)](https://m8ven.ai/mcp/mdlmarkham-tailopsmcp-1r6pzd)
commit: 23e2fff9d88753fb1201e3eed7e00e89570d7a0b
code hash: bcf8307cc18c13271d899ff1f3775b9af8c270d8e50ad8fe1c50d7a18447e107
verified: 7/21/2026, 9:06:50 AM
view raw JSON →