58
grade D
3 days ago
glama

mcp-me

Digital identity layer for AI — your bio, career, skills, interests, and projects always available to every AI tool. Auto-generates profile from 342+ public APIs, 13 real-time plugins, YAML-based profiles with privacy-first local storage.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
5 flows detected: STRAVA_TOKEN, STEAM_API_KEY, TWITCH_CLIENT_SECRET. We can’t prove the destination matches the brand the credential belongs to.
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 9 credentials: GITHUB_TOKEN, GRAVATAR_API_KEY, LASTFM_API_KEY, STEAM_API_KEY, STRAVA_TOKEN, TEST_SPOTIFY_CLIENT_SECRET, TEST_SPOTIFY_REFRESH_TOKEN, TWITCH_CLIENT_SECRET, YOUTUBE_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretGITHUB_TOKEN
🔐 secretGRAVATAR_API_KEY
🔐 secretLASTFM_API_KEY
🔐 secretSTEAM_API_KEY
🔐 secretSTRAVA_TOKEN
configTEST_SPOTIFY_CLIENT_ID
🔐 secretTEST_SPOTIFY_CLIENT_SECRET
🔐 secretTEST_SPOTIFY_REFRESH_TOKEN
configTWITCH_CLIENT_ID
🔐 secretTWITCH_CLIENT_SECRET
🔐 secretYOUTUBE_API_KEY
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/paladini-mcp-me-1x7shg)](https://m8ven.ai/mcp/paladini-mcp-me-1x7shg)
commit: 463ac82e4298ff8c8a1aa166926429f3f1874b91
code hash: 8b44c9af385539c3ac923126658499d19ad4b967d3f93944644319da5ceabdd9
verified: 4/18/2026, 3:49:15 PM
view raw JSON →