74
grade C
10 days ago

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 7 credentials: AGRICULTURE_API_KEY, AIR_QUALITY_API_KEY, DAILY_CLIMATE_API_KEY, DAILY_WEATHER_API_KEY, GEOCODING_API_KEY, HOURLY_WEATHER_API_KEY, POLLEN_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretAGRICULTURE_API_KEYAgriculture services
🔐 secretAIR_QUALITY_API_KEYAir quality forecast
🔐 secretDAILY_CLIMATE_API_KEYDaily climate forecast
🔐 secretDAILY_WEATHER_API_KEYDaily weather forecast
🔐 secretGEOCODING_API_KEYCity ↔ lat/lon geocoding
🔐 secretHOURLY_WEATHER_API_KEYHourly weather forecast
🔐 secretPOLLEN_API_KEYDaily pollen forecast
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/measurespace-measure-space-mcp-server-1j8u24)](https://m8ven.ai/mcp/measurespace-measure-space-mcp-server-1j8u24)
commit: a55c1ac3f869d4fa4734b848a67bb7ff639a9247
code hash: cd04cefb2248436dc613c2769136e2a87a5ddc244d83c29434d0213116bb01a8
verified: 4/11/2026, 1:32:06 PM
view raw JSON →