Back to MCP Trust Indexm8ven
74
/ 100
8 days ago
glama

BountyVerdict

MCP server offering seven paid bounded decision APIs for autonomous coding agents, including diagnosing GitHub Actions failures, classifying flaky tests, auditing skills, and comparing bounties, all settled via x402 Base USDC.

→ Mimirs402/bountyverdict· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
5 flows detected: NEAR_MARKET_API_KEY, PAYAN_API_KEY, THE402_API_KEY. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 8 credentials: BUYER_PRIVATE_KEY, CANARY_TOKEN, CDP_API_KEY_SECRET, CDP_WALLET_SECRET, CLOUDFLARE_API_TOKEN, NEAR_MARKET_API_KEY, PAYAN_API_KEY, THE402_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configACKNOWLEDGE_MAINNET_WALLET_POLICY_REPLACEMENT
configACTIVATE_AGENT_QUESTION_EXPERIMENT
configAGENTMRR_PUBLISH
configAGENTMRR_REGISTER
configAGENTSKILL_FORCE_SUBMIT
configAGENT_QUESTION_DESCRIPTION_EXPERIMENT_ACTIVATION_FILE
configAGENT_QUESTION_DESCRIPTION_EXPERIMENT_STATE_FILE
configALLOW_MAINNET_PAYMENT
configALLOW_MAINNET_SETTLEMENT_CANARY
configATTEMPT
configAUDITED_MONITOR
configBLOCK_CHUNK_SIZE
configBOUNTYVERDICT_AUDITED_ROTATION_ACTIVE
🔐 secretBUYER_PRIVATE_KEY
configCANARY_PRODUCT
configCANARY_STATE_FILE
🔐 secretCANARY_TOKEN
configCANARY_TOKEN_FILE
configCDP_ACCOUNT_POLICY_ID
configCDP_API_KEY_ID
🔐 secretCDP_API_KEY_SECRET
configCDP_PROJECT_POLICY_ID
🔐 secretCDP_WALLET_SECRET
configCLAWLANCER_WORK_STATE_FILE
🔐 secretCLOUDFLARE_API_TOKEN
configDEMAND_WATCH_STATE_FILE
configDIRECTORY_STATE_FILE
configEXECUTE_PAYMENT
configEXECUTE_SETTLEMENT_CANARY
configEXPECTED_ASSET
configEXPECTED_NETWORK
configEXPECTED_PAYER
configEXPECTED_PAY_TO
configEXPERIMENT_STATE_FILE
configFLAKE_ATTEMPT
configFLAKE_RUN_URL
configFUNNEL_EPOCH_REASON
configFUNNEL_ROTATION_ID
configFUNNEL_STATE_FILE
configGLAMA_RELEASE_IMAGE
configHISTORICAL_TEST_GAS_ETH
configISSUE_URL
configISSUE_URLS
configMAX_PAYMENT_ATOMIC
configMONITOR_NOTE_FILE
🔐 secretNEAR_MARKET_API_KEY
configNEAR_MARKET_CREATE
configNEAR_MARKET_REGISTER
configNEAR_MARKET_SECRET_FILE
configNETWORK
configPAYAN_AGENT_ID
🔐 secretPAYAN_API_KEY
configPAYAN_BID
configPAYAN_CREATE
configPAYAN_DEMAND_STATE_FILE
configPAYAN_FULFILL
configPAYAN_OFFER_MAP
configPAYAN_REGISTER
configPAYAN_SECRET_FILE
configPRODUCT
configPRODUCTION_API_URL
configPROVISION_SETTLEMENT_BUYER
configQUIET_PERIOD_SECONDS
configRECONCILE_AGENTMRR_CODE_RELEASE
configRECOVERY_EXPERIMENT_STATE_FILE
configRECOVERY_JOURNAL_INVOCATION_ID
configRELEASE_AGENTMRR_CURRENT
configREPO_URL
configREQUEST_FUNDS
configRESOURCE_SERVER_URL
configREVENUE_WALLET
configRPC_URL
configRUN_URL
configSETTLEMENT_BUYER_ADDRESS
configSETTLEMENT_BUYER_ENV_FILE
configSETTLEMENT_CANARY_PRODUCT
configSKILL_PATH
configSKILL_REPO_URL
configSTART_BLOCK
configSTART_FUNNEL_EPOCH
configSTATE_FILE
configTASKMARKET_AGENTWORK_PITCH_STATE_FILE
configTASK_LEADING_DESCRIPTION_EXPERIMENT_ACTIVATION_FILE
configTASK_LEADING_DESCRIPTION_EXPERIMENT_STATE_FILE
🔐 secretTHE402_API_KEY
configTHE402_CONFIG_FILE
configTHE402_CREATE
configTHE402_PARTICIPANT_ID
configTHE402_PLAN
configTHE402_REGISTER
configTHE402_SUBSCRIBE
configTRUSTED_FUNNEL_BASELINE_FILE
configTRUSTED_FUNNEL_HISTORY_FILE
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/mimirs402-bountyverdict-1we3uq)](https://m8ven.ai/mcp/mimirs402-bountyverdict-1we3uq)
commit: 7afcca5ca4c43a83d8b74e5c2f5d72421a1857bd
code hash: ef3fc4317c0b788c56f297b4f17793360344f6d2af4004c7e94d30aafcdde4e8
verified: 7/23/2026, 9:16:02 AM
view raw JSON →