okareo-mcp (okareo-ai/okareo-mcp) is an MCP server listed on the M8ven Trust Index. It scores 74 out of 100, grade C. It declares 50 tools. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
C
Emerging
74/100

okareo-mcp

Public okareo-mcp for connecting copilots with voice/text agent evaluation

→ okareo-ai/okareo-mcp· listed on glama

Emerging. No concerning findings. Grades remain capped until the project builds reputation through adoption. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

okareo-ai

Source: Glama · also listed on github_code

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

Glamanot scored hereGitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
✅
50 tools verified — handlers match their declared behaviour
24 read-only tools verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 4 credentials: OKAREO_API_KEY, MCP_DCR_SIGNING_KEY, POSTHOG_API_KEY, GITHUB_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configPLAYWRIGHT_BASE_URL
configTRANSPORTTransport: stdio (local) or sse (Docker)
configFRONTEGG_ISSUER
configFRONTEGG_DOMAIN
configMCP_REQUIRED_SCOPE
configMCP_RESOURCE_SERVER_URL
configOKAREO_BASE_URLOverride for on-prem Okareo backend
configK_SERVICE
configK_CONFIGURATION
configFASTMCP_PORT
🔐 secretOKAREO_API_KEYCursor inherits from your shell environment.
configFASTMCP_HOST
configFRONTEGG_VENDOR_ID
🔐 secretMCP_DCR_SIGNING_KEY
configFRONTEGG_CLIENT_ID
configMCP_EMBEDDED_LOGIN_WEB_ROOT
configAIRGAP
configOKAREO_SIM_BUFFER_SECONDS
configOKAREO_ANALYTICS_OPT_IN
🔐 secretPOSTHOG_API_KEY
configDEV
configOKAREO_PROJECT
configOKAREO_REPS_REFRESH_SECONDS
🔐 secretGITHUB_TOKEN
configOKAREO_REPS_REPO
configOKAREO_REPS_PINNED_TAG
configSHELL
configMCP_EMBEDDED_LOGIN_DEV_MODE
configMCP_TENANT_CACHE_TTL
configMCP_RATE_LIMIT_RPM
Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deployNEXT_PUBLIC_FRONTEGG_BASENAME
deployNEXT_PUBLIC_FRONTEGG_BASE_URL
deployNEXT_PUBLIC_FRONTEGG_CLIENT_ID
deployNEXT_PUBLIC_FRONTEGG_OAUTH_REDIRECT_PATH
deployNEXT_PUBLIC_MCP_BASE_URL
deployPORT
// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/okareo-ai/okareo-mcp)](https://m8ven.ai/mcp/okareo-ai/okareo-mcp)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: 0c3c1d5c164d88f23b308d2e93f2e7fd19a246b2
code hash: c551bd627448caddb5dbdafe9cefc63ab42d553d354af50941e2a0cfa9772070
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client