/ 100

2 days ago

github_topic

neo

Neo.mjs is a self-evolving software organism: a professional end-to-end AI engineering team whose cross-model swarm inhabits live apps via Neural Link, Active Hybrid GraphRAG, DreamService, and self-healing loops.

→ neomjs/neo · listed on github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

github_topic

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 3 credentials: GEMINI_API_KEY, GH_TOKEN, NEO_HEAVY_MAINTENANCE_LEASE_INHERITED_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies2 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

lowwebpack-dev-server@5.2.3GHSA-79cf-xcqc-c78w

webpack-dev-server vulnerable to cross-origin source code exposure on non-HTTPS origins

lowwebpack-dev-server@5.2.3GHSA-mx8g-39q3-5c79

webpack-dev-server vulnerable to HMR WebSocket interception via permissive user proxies

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configCHROMA_DATA_PATH

configCHROMA_PORT

🔐 secretGEMINI_API_KEY

🔐 secretGH_TOKEN

configNEO_AGENT_ID

configNEO_AGENT_IDENTITY

configNEO_AI_DAEMON_DIR

🔐 secretNEO_HEAVY_MAINTENANCE_LEASE_INHERITED_TOKEN

configNEO_OPENAI_COMPATIBLE_MODEL

configNEO_SESSION_ID

configNEO_TEST_CHAT_MODEL

configNEO_TEST_EMBEDDING_DIMENSIONS

configNEO_TEST_EMBEDDING_HOST

configNEO_TEST_EMBEDDING_MODEL

configNEO_TEST_EMBEDDING_PORT

configNEO_TEST_OIDC_HOST

configNEO_TEST_OIDC_PORT

configTMUX_SESSION

configUNIT_TEST_MODE

configWAKE_CODEX_TURN_START_PROOF_POLL_MS

configWAKE_CODEX_TURN_START_PROOF_TIMEOUT_MS

configWAKE_MAX_DELIVERY_RETRIES

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/neomjs-neo-kz90jf)](https://m8ven.ai/mcp/neomjs-neo-kz90jf)

commit: 1549b8a83d412ed23ac36c44413933c755973fe8

code hash: 5b858296f9a54c41ed77e0ca7e5bdb29f54e29aac0a5ee9bc092339286b2aab6

verified: 7/19/2026, 8:50:07 AM

view raw JSON →