Scholar Sidekick (mlava/scholar-sidekick-mcp) is an MCP server listed on the M8ven Trust Index. It scores 89 out of 100, grade B. It declares 7 tools. The publisher has proved control of what we score (Verified Publisher). It is connected through the M8ven GitHub App, so the listing is re-checked on every push.

Back to MCP Trust Index

B

Emerging

89/100

6 days ago

Scholar Sidekick

Resolves scholarly identifiers — DOI, PubMed ID, PMCID, ISBN, ISSN, arXiv, ADS bibcode — into clean, formatted citations in any of 10,000+ CSL styles. Returns plain text, HTML, Markdown, RIS, BibTeX, CSL-JSON, or EndNote XML for direct paste or reference manager import.

→ mlava/scholar-sidekick-mcp· npm: scholar-sidekick-mcp· listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code VerifiedSandbox Verified⚡ Live Monitored

Monitored 21 days · every push re-verified

Who stands behind it

scholar-sidekick.com (@mlava) · Verified Publisher

Source: Glama

Maintenance & responsiveness

as of 2026-08-20

Issues closed (90d): 0 · 0 open

Releases (90d): 10

Contributor retention: 1/1 stayed · 1 active

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

1 flow detected: RAPIDAPI_KEY. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 2 credentials: RAPIDAPI_KEY, SCHOLAR_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

Something look wrong? Dispute a finding

Are you the publisher? Confirm or correct these findings.

// environment variables

To run this server yourself, you supply these values.

configRAPIDAPI_HOSTRapidAPI host (defaults to scholar-sidekick.p.rapidapi.com)

🔐 secretRAPIDAPI_KEYset (which routes calls through the RapidAPI gateway).

🔐 secretSCHOLAR_API_KEY[scholar-sidekick.com/account](https://scholar-sidekick.com/account) and set .

configSCHOLAR_SIDEKICK_TIMEOUT_MSRequest timeout in milliseconds (default: 30000)

configSCHOLAR_SIDEKICK_URLOverride the API base URL (defaults to https://scholar-sidekick.com, or the RapidAPI gateway when RAPIDAPI_KEY is set).

// quality suggestions

Secrets stay with their owner

1 secret sent to a request target we could not resolve (RAPIDAPI_KEY → dynamic) — often a configured endpoint, not necessarily third-party

Audit where credentials are sent. A NOTION_TOKEN should only reach api.notion.com — never a third-party host.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/mlava/scholar-sidekick-mcp)](https://m8ven.ai/mcp/mlava/scholar-sidekick-mcp)copy

Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.

commit: 5cf3a67e1a5ef93580bf8ff7f44ac58e5b3a3bcd

code hash: e31544a6475a2fbf51fc66902b9a991d22249b859bcb0f103648362f29965d31

verified: 9/4/2026, 4:55:45 AM

view raw JSON →

Check MCPs from inside your assistant

Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-checkcopy

check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern

How to add it →Free · no account needed · works in any MCP client