Back to MCP Trust Indexm8ven
2
/ 100
1 month ago
npm

ASGCompute/asgcard-public

MCP Server for ASG Card — give AI agents autonomous virtual card management via x402

→ ASGCompute/asgcard-public· npm: @asgcard/mcp-server· listed on npm
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

npmGlama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: OPS_API_KEY. We can’t prove the destination matches the brand the credential belongs to.
🚨
Reads files from sensitive locations
Touches: .env.prod.verify, .env.prod
🔐
You'll be asked for 11 credentials: CARD_DETAILS_KEY, CRON_SECRET, FACILITATOR_API_KEY, FOURPAYMENTS_API_TOKEN, FOURPAYMENTS_V2_API_TOKEN, MPP_SECRET_KEY, OPS_API_KEY, STELLAR_PRIVATE_KEY, STELLAR_SECRET, STRIPE_SESSIONS_KEY, WEBHOOK_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAGENT_DETAILS_ENABLED
configAPI_BASE
configAPI_BASE_URL
configASGCARD_API_URL
🔐 secretCARD_DETAILS_KEY
🔐 secretCRON_SECRET
configDATABASE_URL
🔐 secretFACILITATOR_API_KEY
configFACILITATOR_URL
🔐 secretFOURPAYMENTS_API_TOKEN
configFOURPAYMENTS_BASE_URL
configFOURPAYMENTS_CARDHOLDER_ID
configFOURPAYMENTS_CARD_TYPE_ID
🔐 secretFOURPAYMENTS_V2_API_TOKEN
configFOURPAYMENTS_V2_CARDHOLDER_ID
configFOURPAYMENTS_V2_CARD_TYPE_ID
configLOG_LEVEL
configMINIAPP_TEST_MODE
configMINIAPP_UNLOCK_CODES
🔐 secretMPP_SECRET_KEY
🔐 secretOPS_API_KEY
configPORT
configREPO_MODE
configSERVER_URL
configSTELLAR_HORIZON_URL
🔐 secretSTELLAR_PRIVATE_KEY
configSTELLAR_RECIPIENT
configSTELLAR_RPC_URL
🔐 secretSTELLAR_SECRET
configSTELLAR_TREASURY_ADDRESS
🔐 secretSTRIPE_SESSIONS_KEY
configTG_BOT_USERNAME
configVERCEL
🔐 secretWEBHOOK_SECRET
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/npm-https-github-com-asgcompute-asgcard-public)](https://m8ven.ai/mcp/npm-https-github-com-asgcompute-asgcard-public)
commit: 332af896eb32fccce72cabad9f625f958bf19bfa
code hash: b467ad67fd0ed982c991cd3e1dcfab42d8215f4ce516e6cab666dbcd0ad65e1c
verified: 6/14/2026, 11:10:32 AM
view raw JSON →