/ 100

1 day ago

glama

Codexa

Item: Codexa
Rating: 74
Author: M8ven

Codexa is a local change-evidence layer for software workflows, providing committed-change receipts, plan conformance, and verification crediting. It acts as an MCP server to help agents reason about code changes and verify correctness.

→ mirnoorata/codexa · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configCLAUDE_PROJECT_DIR

configCODEXA_AGENT_AB_MCP_PREFLIGHT_TIMEOUT_MS

configCODEXA_BOOTSTRAP_TESTING

configCODEXA_CLI

configCODEXA_EXPERIMENTAL_TRANSITIVE_RANK

configCODEXA_FOCUSED_REPO

configCODEXA_LSP— 1 on supported query commands.

configCODEXA_LSP_JAVASCRIPT_COMMAND

configCODEXA_LSP_PYTHON_COMMAND

configCODEXA_LSP_TYPESCRIPT_COMMAND

configCODEXA_MANAGED_POST_EDIT

configCODEXA_MCP_OUTPUT_SCHEMA— (=full restores the deep schema). Managed and bare

configCODEXA_MCP_STRUCTURED_BUDGET_BYTES— records naming dropped fields. caps the

configCODEXA_MCP_TELEMETRY_PATH

configCODEXA_PLUGIN_ALLOW_NPX_FALLBACK

configCODEXA_PLUGIN_AUTO_REFRESH

configCODEXA_PLUGIN_TOOLS

configCODEXA_REPO

configCODEXA_SEMANTIC

configCODEXA_SESSIONSTART_CONTEXT

configCODEXA_WORKSPACE_FOCUS_FILE

configCODEXA_WORKSPACE_SESSION— session> or --workspace-session <session> when

configCODEX_WORKSPACE

configCODEX_WORKSPACE_ROOT

configCOMSPEC

configComSpec

configGITHUB_STEP_SUMMARY

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/mirnoorata-codexa-zm1jzy)](https://m8ven.ai/mcp/mirnoorata-codexa-zm1jzy)

commit: 834bd5ef6c2c35d6182075bb5e4e33db206f9728

code hash: 24327dc81336b0edd47d403eebfc78b3d00c884bef2363d87dc0e7b139522dbe

verified: 7/30/2026, 7:55:01 PM

view raw JSON →