67
/ 100
12 days ago
glama

blop

MCP-native release confidence control plane that turns browser execution into auditable go/no-go decisions by combining business-critical journey context, evidence-heavy QA runs, and risk governance.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 8 credentials: GOOGLE_API_KEY, TEST_PASSWORD, ANTHROPIC_API_KEY, OPENAI_API_KEY, BLOP_BS_KEY, BLOP_LT_KEY, BLOP_API_TOKEN, BLOP_HTTP_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretGOOGLE_API_KEYyour_key_here
configAPP_BASE_URL"": "https://your-app.com",
configLOGIN_URL"": "https://your-app.com/login",
configBLOP_ENVproduction
configTEST_USERNAMEyour@email.com
🔐 secretTEST_PASSWORDyour_password
configSTORAGE_STATE_PATHNo — Path to a saved Playwright session (for SSO/OAuth)
configCOOKIE_JSON_PATHNo — Path to exported browser cookies (JSON array)
configBLOP_EXPLORATION_PROFILEdefault — balanced defaults for most apps.
configBLOP_NETWORK_IDLE_WAITYou can still override individual knobs with env vars (, BLOP_SPA_SETTLE_MS, BLOP_AGENT_MAX_FAILURES, BLOP_AGENT_MAX_ACTIONS_PER_STEP, BLOP_DISCOVERY_MAX_PAGES).
configBLOP_SPA_SETTLE_MSYou can still override individual knobs with env vars (BLOP_NETWORK_IDLE_WAIT, , BLOP_AGENT_MAX_FAILURES, BLOP_AGENT_MAX_ACTIONS_PER_STEP, BLOP_DISCOVERY_MAX_PAGES).
configBLOP_AGENT_MAX_FAILURESYou can still override individual knobs with env vars (BLOP_NETWORK_IDLE_WAIT, BLOP_SPA_SETTLE_MS, , BLOP_AGENT_MAX_ACTIONS_PER_STEP, BLOP_DISCOVERY_MAX_PAGES).
configBLOP_AGENT_MAX_ACTIONS_PER_STEPYou can still override individual knobs with env vars (BLOP_NETWORK_IDLE_WAIT, BLOP_SPA_SETTLE_MS, BLOP_AGENT_MAX_FAILURES, , BLOP_DISCOVERY_MAX_PAGES).
configBLOP_DISCOVERY_MAX_PAGESYou can still override individual knobs with env vars (BLOP_NETWORK_IDLE_WAIT, BLOP_SPA_SETTLE_MS, BLOP_AGENT_MAX_FAILURES, BLOP_AGENT_MAX_ACTIONS_PER_STEP, ).
configBLOP_CAPTURE_PROFILE
configBLOP_SCREENSHOT_INTERVAL_SECS
configBLOP_MAX_SCREENSHOTS
configBLOP_MAX_EVIDENCE_ARTIFACTS
configBLOP_DURABILITY_MODE
configBLOP_DB_PATHabsolute , BLOP_RUNS_DIR, and BLOP_DEBUG_LOG
configBLOP_HEADLESSNo true false = show browser window during tests (useful for debugging)
configBLOP_MAX_STEPSYour limit (default 50) may be too low for complex flows. Add BLOP_MAX_STEPS=100 to .env.
configBLOP_DISCOVERY_CONCURRENCY
configBLOP_REPLAY_CONCURRENCY
configBLOP_MAX_CONCURRENT_RUNS
configBLOP_LLM_CIRCUIT_FAILURE_THRESHOLD
configBLOP_LLM_CIRCUIT_COOLDOWN_SEC
configBLOP_LLM_RETRY_MAX
configBLOP_HTTP_RATE_LIMIT_PER_MIN
configBLOP_HTTP_LLM_ROUTE_RATE_LIMIT_PER_MIN
configBLOP_LLM_PROVIDER
configBLOP_LLM_MODEL
🔐 secretANTHROPIC_API_KEY
🔐 secretOPENAI_API_KEY
configBLOP_AGENT_LLM_MODEL
configBLOP_PLANNER_LLM_MODEL
configBLOP_REPAIR_LLM_MODEL
configBLOP_CLASSIFIER_LLM_MODEL
configBLOP_VISION_LLM_MODEL
configBLOP_OTEL_TRACING
configBLOP_SECRETS_FILE
configBLOP_THINKING_BUDGET
configBLOP_APPIUM_URL
configBLOP_MOBILE_PROVIDER
configBLOP_BS_USER
🔐 secretBLOP_BS_KEY
configBLOP_LT_USER
🔐 secretBLOP_LT_KEY
configBLOP_ARCHIVE_RUNS_AFTER_DAYS
configBLOP_ARCHIVE_TELEMETRY_AFTER_DAYS
configBLOP_RUNS_DIRabsolute BLOP_DB_PATH, , and BLOP_DEBUG_LOG
configBLOP_DEBUG_LOGabsolute BLOP_DB_PATH, BLOP_RUNS_DIR, and
configBLOP_ALLOWED_HOSTSNo — Optional host allowlist for app_url validation
configBLOP_RUN_TIMEOUT_SECSNo 0 Total run timeout in seconds (0 disables timeout)
configBLOP_STEP_TIMEOUT_SECSNo 45 Per-step replay timeout in seconds
configBLOP_COMPAT_OUTPUT_DIR.playwright-mcp Where compatibility artifacts (snapshots/screenshots/storage-state files) are written
configBLOP_COMPAT_TEST_ID_ATTRIBUTEdata-testid Preferred test id attribute used when building element selectors
configBLOP_TEST_ID_ATTRIBUTE
configBLOP_COMPAT_SNAPSHOT_MODEincremental Snapshot mode hint for compatibility workflows
configBLOP_SNAPSHOT_MODE
configBLOP_AUTO_HEAL_MIN_CONFIDENCE
configBLOP_AUTO_HEAL_MAX_BEHAVIOR_RISK
configBLOP_VISUAL_DIFF_THRESHOLD
configBLOP_PROMPTS_DIR
configTEST_AUTH_URL
configBLOP_HOSTED_URL
🔐 secretBLOP_API_TOKENblop_sk_...
configBLOP_PROJECT_ID00000000-0000-0000-0000-000000000000
🔐 secretBLOP_HTTP_API_KEY
configBLOP_HTTP_PUBLIC_BASE_URL
configBLOP_HTTP_HOST
configBLOP_HTTP_PORT
configBLOP_TARGETED_MAX_STEPS
configBLOP_RUN_HEALTH_BUFFER_LIMIT
configBLOP_EVENT_BUFFER_MAX
configBLOP_ARTIFACT_BUFFER_LIMIT
configBLOP_CAPABILITIES_PROFILEproduction_minimal
configBLOP_CAPABILITIESexport =core,auth,debug,compat_browser
configBLOP_RECOMMENDATION_STALE_HOURS
configBLOP_FLOW_STALE_DAYS
configBLOP_RISK_THRESHOLD_BLOCKER
configBLOP_RISK_THRESHOLD_HIGH
configBLOP_RISK_THRESHOLD_MEDIUM
configBLOP_AUTH_LOGIN_POLL_STEPS
configBLOP_AUTH_LOGIN_POLL_INTERVAL_MS
configBLOP_AUTH_NETWORKIDLE_TIMEOUT_MS
configBLOP_AUTH_VALIDATION_CACHE_TTL_SECS
configTEST_USERNAME_SELECTORYou can override with env vars and TEST_PASSWORD_SELECTOR if your login form is unusual.
configTEST_PASSWORD_SELECTORYou can override with env vars TEST_USERNAME_SELECTOR and if your login form is unusual.
configBLOP_RECORDING_ENTRY_SETTLE_MS
configBLOP_INTERACTION_LOADING_CAP_MS
configBLOP_INTERACTION_EDITOR_LOADING_CAP_MS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/n2400813g-blop-mcp-1b5wcm)](https://m8ven.ai/mcp/n2400813g-blop-mcp-1b5wcm)
commit: b96282708de15fefbcade66c88187593b636966d
code hash: 8c3d78de2da356cbaba8e08c926829b3c968084dc42e0ff0677892d7e359df79
verified: 7/19/2026, 8:48:29 AM
view raw JSON →