Back to MCP Trust Indexm8ven
58
/ 100
1 month ago
glama

Athena Protocol MCP Server

An intelligent MCP server that acts as an AI tech lead for coding agents, providing expert validation, impact analysis, and strategic guidance before code changes are made.

→ n0zer0d4y/athena-protocol· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

GlamaPulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Known vulnerabilities in dependencies: 5 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: GOOGLE_AI_API_KEY, GOOGLE_API_KEY, JWT_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies5 high6 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.24.0GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.24.0GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

highundici@6.19.8GHSA-f269-vfmq-vjvj

Undici: Malicious WebSocket 64-bit length overflows parser and crashes the client

highundici@6.19.8GHSA-v9p9-hfj2-hcw8

Undici has Unhandled Exception in WebSocket Client Due to Invalid server_max_window_bits Validation

highundici@6.19.8GHSA-vrm6-8vpv-qv8q

Undici has Unbounded Memory Consumption in WebSocket permessage-deflate Decompression

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configCONFIG_STRICT
configDEFAULT_LLM_PROVIDER— Set (e.g., openai, anthropic, google)
configFRONTEND_URL
🔐 secretGOOGLE_AI_API_KEY
🔐 secretGOOGLE_API_KEY
🔐 secretJWT_SECRET
configLOG_ENABLED
configLOG_LEVEL
configLOG_PATH
configMEMORY_COMPRESSION_THRESHOLD
configMEMORY_MAX_PERSISTENT_ENTRIES
configMEMORY_MAX_SHORT_TERM_ENTRIES
configMEMORY_RELEVANCE_THRESHOLD
configMONGODB_URI
configPORT
configPROVIDER_SELECTION_PRIORITY— is REQUIRED - list your providers in priority order
configTEST_MODE
configTOOL_CALLING_ALLOWED_COMMANDS
configTOOL_CALLING_ALLOWED_FILE_EXTENSIONS
configTOOL_CALLING_EXECUTE_COMMAND_ENABLED
configTOOL_CALLING_GREP_ENABLED
configTOOL_CALLING_LIST_FILES_ENABLED
configTOOL_CALLING_MAX_EXECUTION_TIME_SEC
configTOOL_CALLING_MAX_FILE_SIZE_KB
configTOOL_CALLING_READ_FILE_ENABLED
configTOOL_CALLING_REPLACE_IN_FILE_ENABLED
configTOOL_CALLING_WRITE_TO_FILE_ENABLED
configTOOL_TIMEOUT_ASSUMPTION_CHECKER_MS
configTOOL_TIMEOUT_DEPENDENCY_MAPPER_MS
configTOOL_TIMEOUT_IMPACT_ANALYSIS_MS
configTOOL_TIMEOUT_THINKING_OPTIMIZER_MS
configTOOL_TIMEOUT_THINKING_VALIDATION_MS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/n0zer0d4y-athena-protocol-1a43ws)](https://m8ven.ai/mcp/n0zer0d4y-athena-protocol-1a43ws)
commit: 1e8f44c0f55a5e3095dd3a7a9b8237b2e992db53
code hash: 4d06fa7057b2d85eadaadfb6addde2633ae5cdc07a6a5d380122818e9a68396a
verified: 6/11/2026, 10:45:08 AM
view raw JSON →