/ 100

1 month ago

github_topic

nitrostack

Item: nitrostack
Rating: 44
Author: M8ven

The full-stack TypeScript framework to build, test, and deploy production-ready MCP servers and AI-native apps.

→ nitrocloudofficial/nitrostack · listed on github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

GitHub

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 7 credentials: API_KEY, DUFFEL_API_KEY, INTROSPECTION_CLIENT_SECRET, JWT_SECRET, NEXT_PUBLIC_MAPBOX_TOKEN, OAUTH_CLIENT_SECRET, TEST_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretAPI_KEY

configAPI_KEY_1

configAUTH_SERVER_URL

🔐 secretDUFFEL_API_KEY

configINTROSPECTION_CLIENT_ID

🔐 secretINTROSPECTION_CLIENT_SECRET

configINTROSPECTION_ENDPOINT

🔐 secretJWT_SECRET

configLOG_LEVEL

configMCP_LOG_PORT

configMCP_SERVER_PORT

configMCP_TRANSPORT_TYPE

configMISSING

configMY_VAR

🔐 secretNEXT_PUBLIC_MAPBOX_TOKEN

configNITROSTACK_APP_MODE

configNONEXISTENT_VAR

configOAUTH_AUTH_SERVER

configOAUTH_CLIENT_ID

🔐 secretOAUTH_CLIENT_SECRET

configOAUTH_INTROSPECTION_ENDPOINT

configOAUTH_RESOURCE_URI

configOPT

configPORT

configREQUIRED_VAR

configRESOURCE_URI

🔐 secretTEST_SECRET

configTEST_VAR

configTOKEN_AUDIENCE

configTOKEN_ISSUER

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/nitrocloudofficial-nitrostack-1aybtc)](https://m8ven.ai/mcp/nitrocloudofficial-nitrostack-1aybtc)

commit: 8137eca4ae79ced894d8c00954a9c8ed1fedaced

code hash: 11f05d0853fba185f482f4b9a648a409aeca34172635c5eb51b1fa28f9ce8737

verified: 6/14/2026, 10:56:02 AM

view raw JSON →