5
/ 100
1 month ago
github_topic

Uni-CLI

Operations substrate for AI agents that use real software: 311 sites/tools, logged-in browsers, desktop apps, local tools, MCP, policy, evidence, AgentEnvelope v2, and self-repair.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Hardcoded credentials detected
1 live-looking API key in source: 1 Google API key
🚨
Known vulnerabilities in dependencies: 2 critical
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 1 credential: BENCH_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 critical

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalshell-quote@1.8.3GHSA-w7jw-789q-3m8p

shell-quote quote() does not escape newlines in object .op values

criticalvitest@3.2.4GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configANTHROPIC_BENCH_AUTOAPPROVE
configBASE_REF
🔐 secretBENCH_API_KEY
configBENCH_AUTOAPPROVE
configBENCH_BASE_URL
configBENCH_FIXTURES_ONLY
configBENCH_MODELS
configBENCH_RUNS
configBENCH_TRIALS_PER_CELL
configCROSSREF_MAILTO
configDISPLAY
configGITHUB_REF
configGITHUB_REF_NAME
configHEALTH_SITE
configHEALTH_TIMEOUT_MS
configRELEASE_CODENAME
configRELEASE_REQUIRE_CODENAME
configRELEASE_REQUIRE_MANIFEST
configSITE_SWEEP_DETECT
configSITE_SWEEP_REPORT_ONLY
configSITE_SWEEP_SITE
configSITE_SWEEP_TIMEOUT_MS
configUNICLI_BENCH_TRIALS
configUNICLI_DYNAMIC_MACOS
configUNICLI_SIDECAR_POSTINSTALL_PLATFORM
configUNICLI_SIDEcar_POSTINSTALL_PLATFORM
configUNICLI_STATS_TEST_STRATEGY
configVITEST
configVITEST_POOL_ID
configVITEST_WORKER_ID
configWAYLAND_DISPLAY
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/olo-dot-io-uni-cli-189z9q)](https://m8ven.ai/mcp/olo-dot-io-uni-cli-189z9q)
commit: deff946cb84afa933fc1a9e4bc6d402630c3fe42
code hash: 249edcf28dd2ffd6b5ab8c67f62612deedfe749f86fe61455f15b3159528d8f7
verified: 6/14/2026, 10:32:33 AM
view raw JSON →