claude-openmax

Item: claude-openmax
Rating: 74
Author: M8ven

A Claude Code runtime adapter for OpenMax/CWS that enables bidirectional messaging and exposes workspace services as MCP tools.

→ openmaxai/claude-openmax · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 4 credentials: CLAUDE_OPENMAX_WAKE_TOKEN, COCO_API_KEY, COCO_CF_ACCESS_CLIENT_SECRET, COCO_INVITATION_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configCLAUDE_OPENMAX_CONFIG— Config file at $ (or ~/.config/claude-openmax/config.json);

configCLAUDE_OPENMAX_CONTENT_FREE— , CLAUDE_OPENMAX_WAKE_{HOST,PORT,TOKEN}.

configCLAUDE_OPENMAX_DATA_DIR— , CLAUDE_OPENMAX_MODE, CLAUDE_OPENMAX_DEBOUNCE_MS,

configCLAUDE_OPENMAX_DEBOUNCE_MS— CLAUDE_OPENMAX_DATA_DIR, CLAUDE_OPENMAX_MODE, ,

configCLAUDE_OPENMAX_LOG_FILE

configCLAUDE_OPENMAX_MODE— Split (design topology 1, =channel-only) — the MCP

configCLAUDE_OPENMAX_WAKE_HOST

configCLAUDE_OPENMAX_WAKE_PORT— CLAUDE_OPENMAX_MODE=channel-only =47600 CLAUDE_OPENMAX_WAKE_TOKEN=... claude ...

🔐 secretCLAUDE_OPENMAX_WAKE_TOKEN— CLAUDE_OPENMAX_MODE=channel-only CLAUDE_OPENMAX_WAKE_PORT=47600 =... claude ...

🔐 secretCOCO_API_KEY— →agent.api_key, COCO_DEVICE_ID→agent.device_id,

configCOCO_API_URL— Env fallbacks (map onto the nested fields): →server.bff_url,

configCOCO_CF_ACCESS_CLIENT_ID

🔐 secretCOCO_CF_ACCESS_CLIENT_SECRET

configCOCO_CLIENT_VERSION— →agent.app_version, COCO_ORG_ID→default org. Other knobs:

configCOCO_DEVICE_ID— COCO_API_KEY→agent.api_key, →agent.device_id,

configCOCO_FRONTEND_BASE_PATH— COCO_WS_URL→server.ws_url, →server.frontend_base_path,

configCOCO_INVITATION_ID

🔐 secretCOCO_INVITATION_TOKEN

configCOCO_ORG_ID— COCO_CLIENT_VERSION→agent.app_version, →default org. Other knobs:

configCOCO_WS_URL— →server.ws_url, COCO_FRONTEND_BASE_PATH→server.frontend_base_path,

configXDG_CONFIG_HOME

configXDG_DATA_HOME

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/openmaxai-claude-openmax-1dmcpy)](https://m8ven.ai/mcp/openmaxai-claude-openmax-1dmcpy)

commit: b303b4648c844e0827a6d8b8aaa58034a831b121

code hash: 05f02d048ff5900e273d386357d49a4f0777f2846f6ce359b543bb2edf43162b

verified: 7/22/2026, 8:46:12 AM

view raw JSON →