73
/ 100
20 days ago
glama
Prufa
Point your coding agent at a URL and get a real-browser QA audit: broken signup/login/checkout flows, JS console errors, missing analytics, consent + security headers, mobile tap targets, and accessibility — returned as machine-verified findings graded A-F.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: PRUFA_API_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
PRUFA_CONFIGconfig
XDG_CONFIG_HOME🔐 secret
PRUFA_API_TOKEN— env "=$PRUFA_TOKEN" \config
PRUFA_API_BASE// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/prufa-dev-prufa-mcp-9rucjk)commit: b54cc03bc8fc27b25314de9fa38077dcfdc94d54
code hash: 044ad742508d173d77cca490072c305368297b96b8469c79a1fc7530b73b99e5
verified: 6/17/2026, 11:26:58 AM