DML (mmckeen-nv/DML) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 9 tools. No publisher has claimed this listing.

C
Emerging
74/100
4 days ago

DML

Protoype contextual memory system for models that mimics a sliding gradient of accuracy vs conceptual recall.

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

mmckeen-nv

Source: github_code

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
4 flows detected: DML_NVIDIA_API_KEY, OPENCLAW_INFERENCE_API_KEY. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 11 credentials: DML_PERSIST_NGC_KEY, DML_NVIDIA_API_KEY, NIM_API_KEY, OPENAI_API_KEY, NGC_API_KEY, OPENCLAW_INFERENCE_API_KEY, DML_API_TOKEN, DML_ADMIN_TOKEN, DML_API_KEY, DCM_MODEL_PROBE_API_KEY, OPENAI_COMPATIBLE_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configDML_VISUALIZER_URL
configDML_VISUALIZER_PORT
configDML_VISUALIZER_PATH
configNGC_KEY_FILE
🔐 secretDML_PERSIST_NGC_KEY
configNIM_CONTAINER_NAME
configNIM_PORT
configNIM_HEALTH_TIMEOUT
configNIM_HEALTH_INTERVAL
configDML_NVIDIA_INFERENCE_URL
🔐 secretDML_NVIDIA_API_KEY
configDML_NVIDIA_INFERENCE_TIMEOUT
🔐 secretNIM_API_KEY
🔐 secretOPENAI_API_KEY
🔐 secretNGC_API_KEY
configLOCAL_NIM_CACHE
configNIM_DOCKER_RUN_OPTS
configNIM_API_BASE
configOPENAI_API_BASE
configDML_HOST
configDML_PORT
configDML_LOG_LEVEL
configCMA_MCP_NAME
configCMA_STORAGE_PATH
configDML_BUILD_CUDA
🔐 secretOPENCLAW_INFERENCE_API_KEY
🔐 secretDML_API_TOKEN
🔐 secretDML_ADMIN_TOKEN
configDAYSTROM_DML_OUT_DIR
configDML_API_BASEDML_API_BASE, DML_API_KEY, DML_MODEL_NAME
🔐 secretDML_API_KEYDML_API_BASE, DML_API_KEY, DML_MODEL_NAME
configOLLAMA_BASE_URL
configDML_PROVIDER_URL
configDML_TENANT_ID
configDML_SESSION_ID
configDCM_MODEL_PROBE_ENDPOINT_URL
configOPENAI_COMPATIBLE_ENDPOINT_URL
configDCM_MODEL_PROBE_MODEL
configOPENAI_COMPATIBLE_MODEL
🔐 secretDCM_MODEL_PROBE_API_KEY
🔐 secretOPENAI_COMPATIBLE_API_KEY
configDCM_BENCHMARK_EMBEDDING_MODEL
configDCM_BENCHMARK_EMBEDDING_BASE_URL
configDCM_BENCHMARK_REQUEST_EXTRA_JSON
configDAYSTROM_DML_HOME
configOPENCLAW_HOME
configOPENCLAW_WORKSPACE
configDML_STORE
configDML_SKIP_VENV_REEXEC
configDAYSTROM_DML_VENV
configVIRTUAL_ENV
configDAYSTROM_DML_CORE
configDML_AUDIT_ACTOR
configDAYSTROM_DPM_GRAPH_PATH
configDAYSTROM_DPM_MODE
configDAYSTROM_DPM_ENABLE
configDAYSTROM_DPM_RELATIONSHIP_ID
configDAYSTROM_DPM_PROJECT_ID
configDAYSTROM_DPM_TOKEN_BUDGET
configDAYSTROM_DCN_MODE
configDAYSTROM_DCN_PROMOTION_EVIDENCE
configDAYSTROM_DML_SOURCE
configDAYSTROM_DML_CONFIG
configDAYSTROM_DML_STORE
configDAYSTROM_DML_PROMPT
configDAYSTROM_DML_THREAD_ID
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

9/9 tools missing one or more hints — ingest (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); augment (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); reinforce (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +6 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

6/9 tools referenced in tests (67%)

Write tests that reference each tool by name so every tool has at least one test.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/mmckeen-nv/dml)](https://m8ven.ai/mcp/mmckeen-nv/dml)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: 8f42a043aef53b3adac52fcbdb48cb8671ac0abc
code hash: 8b2600d094d16abd9aa12f42d140409c738fcf65a25e3ab214a7c7781ab4af8c
verified: 9/6/2026, 4:41:14 AM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client