/ 100

1 month ago

glama

ffl-mcp

Item: ffl-mcp
Rating: 54
Author: M8ven

MCP server for ffl. Let AI share anything for you.

→ nuwainfo/ffl-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: FFL_HOOK_PASSWORD

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configXDG_CONFIG_HOME

configCLAUDE_CLI_PATH

configCLAUDE_BIN

configNVM_DIR

configCODEX_CLI_PATH

configCODEX_BIN

configFFL_MCP_BINARY

configFFL_WAIT_LINK_SECONDS

configALLOWED_BASE_DIR— export ="$HOME/Downloads"

configFFL_RUN_MODE— python runs the Core.py CLI (requires FFL_CORE_PATH).

configFFL_BIN— export ="$HOME/bin/ffl.com"

configFFL_PYTHON

configFFL_CORE_PATH— FFL_RUN_MODE=python runs the Core.py CLI (requires ).

configFFL_COMMAND

configFFL_USE_STDIN— 1 avoids writing text/base64 payloads to disk.

configFFL_SHELL

configFFL_USE_HOOK— 1 starts a local webhook server and passes it to ffl for real-time link/progress events.

configFFL_HOOK_HOST

configFFL_HOOK_PATH

configFFL_HOOK_USERNAME

🔐 secretFFL_HOOK_PASSWORD

configFFL_HOOK_MAX_EVENTS

configFFL_DEBUG— 1 saves ffl output to a temp log file; path returned as debugLogPath. Set FFL_DEBUG=/path/to/log.txt to use a fixed path.

configPYAPP

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/nuwainfo-ffl-mcp-102w0r)](https://m8ven.ai/mcp/nuwainfo-ffl-mcp-102w0r)

commit: f229534e553b742982e91e4a082688458a385a79

code hash: c76484ec6c053a9ce89cc75539df1da3d3f6a36cbc20d23f8b66eb29d748fed4

verified: 6/24/2026, 10:04:30 AM

view raw JSON →