/ 100

1 day ago

glama

rebar-mcp

Item: rebar-mcp
Rating: 73
Author: M8ven

Enables agents to manage an event-sourced, git-backed ticket store through MCP tools, supporting operations like ticket creation, claiming, and transitions.

→ navapbc/rebar · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: ORIGIN_SECRET, JIRA_API_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAWS_REGION

configBASE_DOMAIN

configCOOKIE_DOMAIN

configCOOKIE_SECRET_PARAM

configGOOGLE_CLIENT_ID

configGOOGLE_SECRET_PARAM

configHOSTED_DOMAIN

🔐 secretORIGIN_SECRET

configREDIRECT_URI

configSESSION_TTL_SECONDS

configX

configREBAR_MCP_READONLY— instead.) Server flags: =1 exposes only read tools;

configREBAR_MCP_ALLOW_LLM

configREBAR_MCP_ALLOW_JIRA_SYNC— reconcile is dry-run unless =1. Both flags

configCLAUDE_JOB_DIR

configREBAR_ROOT— "env": { "": "/path/to/your/repo" }

configJIRA_URL

configJIRA_USER

configJIRA_PROJECT

configOTEL_EXPORTER_OTLP_ENDPOINT

configREBAR_TEST_COMPACT_RENAME_BARRIER

configREBAR_CONFIG

configREBAR_TRACKER_DIR— tracker.dir = ".tickets-tracker" # store worktree/symlink dir (env )

configXDG_CONFIG_HOME— ~/.config/rebar/config.toml (honoring $). Precedence, highest

configREBAR_CONFIG_UNKNOWN_KEYS

🔐 secretJIRA_API_TOKEN

configREBAR_RECONCILER_LOCK_STEAL

configRECONCILER_ABSENT_RETIRE_GRACE

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/navapbc-rebar-1d4jdb)](https://m8ven.ai/mcp/navapbc-rebar-1d4jdb)

commit: 517e0470ab011b89e6ec9a0deaa6fae5db8a9327

code hash: a8cc9206bace0d92805ff7906c78a0165ac1e0919c1c113009a25924b9fd51e7

verified: 7/30/2026, 9:14:40 AM

view raw JSON →